As large language model (LLM) inference increasingly processes sensitive information and proprietary model context across personal, enterprise, and regulated…
A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) “at every step of the attack chain.” The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud,…
This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Don’t be fooled by this summer of AI hype —Timnit Gebru, executive director of the Distributed AI Research Institute (DAIR), and Emily M. Bender, professor of linguistics at the University of…
It’s been a busy few months for AI hype. At the end of April, Anthropic claimed that its model Claude Mythos is better at finding software vulnerabilities than most security experts. Then we had the OpenAI–Hugging Face hacking incident, after which Anthropic (proudly) and Meta (reluctantly) disclosed similar incidents involving their models. This was followed…
Google is done treating laptops as an afterthought to Android and ChromeOS. On September 21, 2026, the company opened pre-orders for Googlebook, a new premium laptop platform built jointly with five PC makers — Acer, Lenovo, ASUS, HP, and Dell — and priced from $899. The launch splits chip duty between Intel’s new Panther Lake…
AI is becoming a bigger part of software testing, but many QA teams are still figuring out where to begin. The good news is that adopting AI does not require replacing an existing testing process all at once. In this blog, we will look at a practical roadmap for understanding where AI fits, which use…
Meta’s Muse AI assistant has gone 24 hours without a fix for a macOS vulnerability that lets local malware quietly hijack the app and turn it into what one researcher calls “the ultimate backdoor.” The bug, disclosed publicly on September 21, 2026 by Objective-See founder Patrick Wardle, remains unpatched as of September 22, according to…