Skip to content

The Edge of the Cyber World See the latest

large-language-models

Cyber Security

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Read summary

AI

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) “at every step of the attack chain.” The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud,…

Read summary

Cyber Security

Don’t be fooled by this summer of AI hype 

It’s been a busy few months for AI hype. At the end of April, Anthropic claimed that its model Claude Mythos is better at finding software vulnerabilities than most security experts. Then we had the OpenAI–Hugging Face hacking incident, after which Anthropic (proudly) and Meta (reluctantly) disclosed similar incidents involving their models. This was followed…

Read summary

Apps

Googlebook Launches: $899 Panther Lake vs Snapdragon Race [2026]

Google is done treating laptops as an afterthought to Android and ChromeOS. On September 21, 2026, the company opened pre-orders for Googlebook, a new premium laptop platform built jointly with five PC makers — Acer, Lenovo, ASUS, HP, and Dell — and priced from $899. The launch splits chip duty between Intel’s new Panther Lake…

Read summary

Apps

AI Testing 101: A Roadmap for QA Teams New to AI

AI is becoming a bigger part of software testing, but many QA teams are still figuring out where to begin. The good news is that adopting AI does not require replacing an existing testing process all at once. In this blog, we will look at a practical roadmap for understanding where AI fits, which use…

Read summary

Apps

Meta Muse Backdoor Stays Unpatched 24 Hours Later [2026]

Meta’s Muse AI assistant has gone 24 hours without a fix for a macOS vulnerability that lets local malware quietly hijack the app and turn it into what one researcher calls “the ultimate backdoor.” The bug, disclosed publicly on September 21, 2026 by Objective-See founder Patrick Wardle, remains unpatched as of September 22, according to…

Read summary