News
Alien life may emerge through planetary patterns
3+ day, 5+ hour ago (559+ words) Scientists are advancing a new way to search for life beyond Earth by looking not for a single decisive signal on one planet, but for recurring patterns across many worlds. The idea, set out in a study published in The…...
AI agents redraw vendor risk map
1+ week, 1+ day ago (647+ words) Agentic AI is moving from pilot projects into mainstream corporate workflows, forcing boards and security teams to treat these systems less like software features and more like outside operators with broad access to data, tools and decisions. What changes the…...
Claude Code guardrails falter under command overload
1+ week, 5+ day ago (632+ words) Anthropic's Claude Code has come under fresh scrutiny after researchers disclosed a flaw that can neutralise user-set deny rules when a shell command is padded with a long chain of harmless subcommands, raising concerns that a safety feature marketed as…...
Webhooks turn workflow tools into malware bait
2+ day, 9+ hour ago (635+ words) Cyber attackers are abusing the low-code automation platform n8n to push malware and track targets through phishing emails, in a campaign that security researchers say gathered pace between October 2025 and March 2026 and reflects a broader shift in how legitimate cloud tools…...
Node. js gatekeepers face supply chain trap
2+ week, 1+ hour ago (626+ words) Attackers behind the compromise of the widely used Axios package have widened their campaign, turning from code repositories to the people who maintain them and exposing how a single deceptive approach can threaten vast stretches of the software supply chain....
Bedrock flaw exposes deeper cloud AI risks
1+ mon, 1+ day ago (560+ words) Security researchers have uncovered a vulnerability in Amazon Web Services Bedrock's code interpreter environment, raising concerns over the robustness of isolation safeguards in generative AI systems and prompting renewed scrutiny of cloud-based development tools used by enterprises. The flaw, identified…...
Open AI agrees to acquire Promptfoo
1+ mon, 1+ week ago (424+ words) Open AI has agreed to acquire Promptfoo, a fast-growing artificial intelligence security platform, in a move aimed at strengthening the safety and reliability of enterprise AI systems as companies accelerate the deployment of autonomous agents and generative models across critical…...
Pix Revolution malware targets Brazil's instant payment system
1+ mon, 5+ day ago (304+ words) A sophisticated strain of Android malware capable of diverting real-time payments has emerged as a major cybersecurity concern in Brazil, exploiting the country's widely used PIX instant payment platform and highlighting the risks attached to rapidly expanding digital payment ecosystems....
Glass Worm malware quietly infiltrates developer toolchains
1+ mon, 4+ day ago (248+ words) This technique exploits two common configuration features used in extension manifests, typically called extension packs and dependency links. These functions allow developers to bundle related tools or automatically install required add-ons. By manipulating these mechanisms, attackers can cause code editors…...
Huang defends DLSS as criticism grows
4+ week, 2+ day ago (453+ words) Nvidia chief executive Jensen Huang has pushed back against mounting criticism of the company's next-generation DLSS 5 upscaling technology, insisting detractors misunderstand its purpose and impact on creative control in game development. Huang addressed these concerns directly, framing DLSS as a…...