Uncategorized

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain 2026-04-20 at 14:37 By Cybersecurity researchers have discovered a critical “by design” weakness in the Model Context Protocol’s (MCP) architecture that could pave the way for remote code execution and have a cascading effect on the artificial intelligence (AI) supply chain. “This flaw enables Arbitrary […]

Growing AI power slurpage prompts MPs to examine low-energy computing 2026-04-20 at 12:33 By Carly Page Committee launches inquiry into emerging chip designs to curb datacenter energy use MPs are probing whether radically different, low-energy chip designs can stop AI from turning the UK’s power grid into a bottleneck.… This article is an excerpt from

Palantir’s NHS future in doubt as ministers eye contract break 2026-04-20 at 12:33 By Lindsay Clark £330M deal leaves service with no ownership of software built to connect trusts to the platform The UK government is considering ending Palantir’s involvement in a central NHS data platform after coming under fire from MPs, unions, and campaigners.…

AI quota inflation is no token effort. It’s baked in 2026-04-20 at 11:31 By Rupert Goodwins We’ve been here before. This time, we may not get out Opinion  Fans of the creative arts often find out where creators gather to talk among themselves, then sneak in to eavesdrop on what those masters of the art

Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems 2026-04-20 at 11:31 By Cybersecurity researchers have flagged a new malware called ZionSiphon that appears to be specifically designed to target Israeli water treatment and desalination systems. The malware has been codenamed ZionSiphon by Darktrace, highlighting its ability to set up persistence, tamper with local

Next.js developer Vercel warns of customer credential compromise 2026-04-20 at 10:47 By Simon Sharwood Blames outfit called Context.ai, which reckons an agentic OAuth tangle caused the incident Vercel, the company that created the open source Next.js web development framework, has a data leak that led to compromise of some customer credentials, and blamed an outfit

NASA working on ‘Big Bang’ upgrade to keep the Voyagers alive for longer 2026-04-20 at 09:14 By Simon Sharwood Tests scheduled for May can’t come soon enough after VGER 1 power glitch led to instrument shutdown NASA has revealed it’s working on a plan called “The Big Bang” that it hopes will extend the working

Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials 2026-04-20 at 07:52 By Web infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access to “certain” internal Vercel systems. The incident stemmed from the compromise of Context.ai, a third-party artificial intelligence (AI) tool, that was used by

Top 3 Cyber Insurance Incident Claims 2026-04-20 at 07:22 By A new report reveals the top three cyber incidents that account for a majority of reported claims.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Just like phishing for gullible humans, prompt injecting AIs is here to stay 2026-04-20 at 02:00 By Brandon Vigliarolo Aren’t we all just prompting tokens of linguistic meaning and hoping the other person isn’t bullshitting us? kettle  It’s a week of the year, which means there’s been the discovery of yet another prompt injection attack

I meant to do that! AI vendors shrug off responsibility for vulns 2026-04-19 at 16:21 By Jessica Lyons Passing the buck, and the blame, down the road shows lack of AI companies’ maturity OPINION  AI vendors: “You need to use AI to fight AI threats (and do everything else in your corporate IT environment).” Also

Ruby Central in ‘real financial jeopardy’ following RubyGems maintainer ruckus 2026-04-19 at 11:49 By Lindsay Clark Non profit loses several staffers including its executive director Ruby Central, a nonprofit that supports the Ruby programming language ecosystem, in is “real financial jeopardy,” according to a missive from its board members.… This article is an excerpt from

Humanoid robots crush humans during half-marathon — and set the world record 2026-04-19 at 09:12 By Reuters Not only had the number of participating teams increased from 20 to more than 100, but several robot frontrunners were noticeably faster than professional athletes, beating the ​human winners by more than 10 minutes. This article is an

Cloudflare can remember it for you wholesale 2026-04-18 at 11:49 By Thomas Claburn Agent Memory stores AI chat scraps off to the side and recalls them when needed Not only is hardware memory scarce these days, but context memory, the conversational data exchanged with AI models, can be an issue too.… This article is an

$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims 2026-04-18 at 11:48 By Grinex, a Kyrgyzstan-incorporated cryptocurrency exchange sanctioned by the U.K. and the U.S. last year, said it’s suspending operations after it blamed Western intelligence agencies for a $13.74 million hack. The exchange said it fell victim to what it described as a

[Webinar] Eliminate Ghost Identities Before They Expose Your Enterprise Data 2026-04-18 at 11:48 By In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not weak passwords. Unmanaged non-human identities that nobody was watching. For every employee in your org, there are 40 to 50 automated credentials: service accounts, API tokens,

Atlassian’s new data collection policy protects rich customers while AI eats the rest 2026-04-18 at 11:02 By O’Ryan Johnson From August 17, the outfit will collect customer metadata by default unless you pay for the top tier Unless a customer pays for the most expensive enterprise license, or the law forbids it, Atlassian is going

Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet 2026-04-18 at 11:02 By Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42. The attack targeting TBK

Elon Musk’s proposal of ‘universal high income’ to combat AI job losses baffles economists: ‘So wrong on this’ 2026-04-18 at 03:25 By Fox Business The proposal rebuffed the idea that such payments would be inflationary. This article is an excerpt from Latest Technology News | New York Post View Original Source