The adoption of AI agents in millions of organizations is creating new opportunities for attackers to make them take malicious actions, such as exfiltrating database contents and sensitive business and personal information.

In the past five months, Google and four other organizations—with little in common except for their use of AI agents—have acknowledged vulnerabilities that exploit one agent inside a targeted network to spread harmful instructions to other internal agents. The technique is a special form of prompt injection that targets not the LLM but a particular agent, such as one for translation or data analysis. Guardrails inside such agents, if they exist at all, are often lax and will send the instructions to other agents down the chain. Because the latter agent explicitly trusts the first one, it follows the directions.

Unexpected and hard to mitigate

Independent researcher Syed Anas Mohiuddin tested agents from organizations including Google, JP Morgan Chase, Weviate, Rapid7, the French government's interministerial digital directorate, and the US federal government. His proof-of-concept attacks exploit trust gaps in MCP, short for Model Context Protocol. The standard is one way AI apps and agents communicate with each other inside an internal network. The illustration below shows a simplified MCP in action.

Read full article

Comments

Cable lobby groups notified the Federal Communications Commission that they will sue the agency to block its controversial repeal of the National Television Ownership Rule, which limits the number of broadcast TV stations a single company may own.

The cable groups said that larger broadcast TV station groups will have leverage to demand higher retransmission fees from TV providers, resulting in "higher monthly TV bills for consumers." They said the FCC repeal order "arbitrarily and capriciously ignores the harms that will surely follow from allowing broadcast station groups to exceed the National Cap."

The cable lobby groups represent top providers Comcast, Charter, and various other cable operators. Top cable companies have also expanded through mergers. Charter completed a purchase of Cox in August after the FCC rejected protests by advocacy groups that said the cable deal "would create unchecked gatekeeper power over Internet distribution" and make it easier for the biggest cable companies to raise prices.

Read full article

Comments

As bipartisan backlash against Flock grows, some cities are asking anti-surveillance advocates and media outlets to pay eye-popping fees—including charging tens of thousands or even millions—to get information about how police departments are using and potentially abusing AI-enabled camera systems that track every vehicle that passes them.

On Monday, the Texas Tribune reported that city officials in a Fort Worth suburb, North Richland Hills, asked one group to pay $2.3 million before it would fulfill a public records request for Flock data. To reach that high fee, officials claimed that searching “about a terabyte worth of communications about errors, misuse, and effectiveness of the Flock system” would take approximately 14 years of labor at a rate of $15 per hour.

Phil Mynona, who filed the request using a pseudonym on behalf of his group, the Texas Privacy Coalition, told the Tribune that the fee seemed “ludicrous” and designed to stifle his public records searches.

Read full article

Comments

• Milestone

This is a security-oriented release with several security patches and bug fixes in the continuation of 1.30.0.

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

• Some security attack scenarios patched
• Fix domain-wide Retry-After
• Fix muting of feeds gone with HTTP 410

Feature highlights✨:

• CLI: Add optional feed argument to actualize-user.php

This release has been made by @Alkarex, @andris155, @fzlzjerry, @Inverle, @jamalkamaladdin, @jtracey, @Otolock and newcomers @akine, @colons, @ethanstoner, @gigioneggiando, @Juice-de-Orange, @pavel-miniutka, @qwist1233-cpu, @Sharawey74, @shcheglovnd, @TapuGithub, @yuchenshi, @ZainnQureshii

Full changelog:

• Deployment
  • Reword recommendations and explanations for edge (rolling release) vs. latest (versioned release) channels #9270
• Security
  • Config + increase default values for search max length and depth #9280
  • Accept a trusted proxy address given without a subnet #9301
  • Warn during session regenerate fail #9311, #9376
  • CI/CD add zizmor workflow for action security checks #9228, #9331
  • Use PHP #[\SensitiveParameter] #9322
  • Reject token access (RSS/OPML export, feed refresh) for disabled accounts #9336
  • Require POST+CSRF for self-update mutations #9335
  • Make the login challenge nonce one-time #9334
  • Bound ZIP import against decompression bombs #9332
  • Rotate session ID on all authenticated transitions #9333
  • Minz: Remove vulnerable and unused code path for displaying errors #9395
  • Fix NAT64 feed fetching on IPv6-only hosts #9372
• Bug fixes
  • Fix domain-wide Retry-After #9390
  • Fix muting of feeds gone with HTTP 410 #9391
  • Fix infinite redirect loop due to SCRIPT_NAME in PATH_INFO #9282, #9287
  • Restore the automatic reading view after marking articles as read, while preserving explicit filters #9288
  • Fix adaptive reading state after marking articles read #9290
  • Fix regression sharing links #9303
  • Don’t disable anonymous refresh when anonymous feed access is disabled #9354
  • Fix regression with HTTPS proxies due to wrong TLS SNI resolution #9341
  • Better enforce limits for feeds and categories #9357
  • Fix JavaScript error when opening a label menu in sidebar #9377
  • Fix custom favicon with GReader API #9409
• CLI
  • Add optional feed argument to actualize-user.php #9319
• UI
  • Various UI and style improvements #9298, #9369,
    #9388
• Extensions
  • Call check_url_before_add hook when previewing a feed #9343
• I18n
  • Add Belarusian #9351
  • Improve German #9370, #9385
  • Improve Italian #9370
  • Improve Japanese #9398
  • Improve Turkish #9349
• Misc.
  • Check SVG optimization in the tests CI workflow with SVGO #9361
  • Move PHPUnit flags to a config file and use strictest failure mode #9374
  • Avoid writing to log files during unit tests #9373
  • Bump Ruby gems automatically with Dependabot for docs #9401
  • Update dev dependencies #9323, #9324,
    #9325, #9326, #9327,
    #9328, #9368, #9378,
    #9379, #9380, #9381,
    #9402, #9403, #9404,
    #9405, #9406, #9407

A new tool is allowing Mac users the ability again to easily turn off Apple Intelligence with one click and free up to 12GB of storage.

Unlike with previous versions of macOS, macOS 27 Golden Gate doesn’t have a toggle for turning off Apple Intelligence. That makes disabling AI features that you may not want more difficult. It also means that the AI models necessary for running Apple Intelligence will take up space on your disk, even if you don’t use them or if you go through your settings to individually find and disable AI capabilities.

In response, a developer known as Om Lahore on GitHub last week created RemoveMacAI, a command-line tool that allows macOS 27 users to “turn off Apple Intelligence on macOS 27" in a way that is “fully reversible,” per the GitHub page. They said that Apple's Intelligence models take up "about 12GB," but the models can actually take up over 30GB, The Verge noted.

Read full article

Comments

Over decades of research, scientists have built up a partial picture of what specialized cells within the brain and spinal cord do. By studying how the brain develops, they could identify genes that were active in different populations of neurons and where in the brain those neurons resided. In some cases, these genes could then be used to genetically delete the neurons, allowing us to get some indication of what they might be doing, building on the information we've obtained from studies of brains with damaged regions.

But this approach has its limits. The brain is flexible enough to potentially adapt to the loss of some cells, and their loss early in development may alter the development of any neurons they would have normally formed connections with. It would be far more informative to activate and shut down the neurons in an otherwise intact brain.

Today's Nobel Prize in Physiology or Medicine rewards three people—Karl Deisseroth, Peter Hegemann and Georg Nagel—who developed our ability to do precisely that. Starting from studies of single-celled algae that are attracted to light, these and many other researchers built an entire field of study that we now call optogenetics: using light to alter the behavior of nerve cells marked by the activity of individual genes.

Read full article

Comments

A surge in Russian jet-powered drone strikes on Ukrainian data centers has increasingly disrupted mobile phone and Internet services for thousands of people. Now Ukraine President Volodymyr Zelenskyy and other government officials are warning of the need for more air defense capabilities, as such telecommunication outages could threaten Ukraine’s digital economy and undermine the country’s ongoing resistance to Russia’s invasion.

The Russian attacks on Ukrainian telecommunication infrastructure have focused on Ukraine’s capital of Kyiv since September 23, according to the nonprofit Reporters Without Borders. Ukraine’s digital transformation ministry reported that 100,000 households in the Kyiv region were temporarily experiencing Internet outages from those initial strikes—and Russia has only intensified its strike campaign against major Ukrainian data centers and mobile phone networks in recent weeks.

“Russian attacks on Ukraine’s telecommunication infrastructure are not new, with strikes and shelling previously damaging fiber optic lines, cell towers, and facilities belonging to mobile network companies,” said Tetiana Gaviuk, analyst for Europe at ACLED, in a post on October 1. “However, the recent concentrated attacks on Kyiv’s data centers and telecom networks stand out because multiple providers and facilities were hit within days, indicating Russia’s increased pressure on Ukraine’s digital infrastructure.”

Read full article

Comments

Well, it’s safe to say no Bahrain Grand Prix has been affected by torrential rain quite like the 2026 race.

For one thing, it was held several thousand miles from Bahrain itself. The ongoing war with Iran ruled such things out, so the Sepang International Circuit in Malaysia stepped in to fill its spot. One of the best examples of a late-'90s “Tilke track”—named for its designer, Herman Tilke—it’s characterized by a couple of long straights and the always-brutal tropical weather that provides one of the toughest physical challenges on the calendar. And this weekend was no exception.

Heavy rain arrived about half an hour before the start time, delaying things significantly. Although the sport has two different kinds of treaded tires for use in the rain, the full wet tire generates so much spray, and such slow lap times, that it's essentially only useful for circulating behind the safety car. If it’s wet enough to need it, it will be too wet to see where you’re going. The intermediate tire, by contrast, has much shallower grooves and is good for racing on damp but not soaked tracks, although it quickly overheats and degrades as the track dries.

Read full article

Comments

Roughly 200 people are under medical observation, several hospitals are under quarantine, and dozens are in isolation in Russia following the unexplained death of an infectious disease researcher at the Irkutsk Anti-Plague Research Institute of Siberia, in the town of Shelekhov, according to early reports of the situation on Sunday and Monday.

Researcher Darya Shipilova reportedly died last week from pneumonia of "unknown" cause, according to Rospotrebnadzor, a Russian public health agency.

Unconfirmed information regarding her death has swirled. Some reports have claimed she accidentally broke a test tube containing the plague pathogen, Yersinia pestis, on September 25. She subsequently fell ill, was admitted to a hospital September 29 with severe pneumonia and died overnight between October 1 and October 2.  The head of the Russian region that neighbors Irkutsk, Alexey Tsydenov, initially reported that she had died of plague but later altered his statement to say she "possibly" died of the disease.

Read full article

Comments

Norway has become the first major country to propose a temporary ban on the use of AI glasses in selected public places amid growing privacy concerns over wearable technology.

The rich Scandinavian country’s center-left government said on Monday that it would introduce a law to parliament soon on a temporary ban for places such as parks, beaches, schools, and kindergartens. It will also set up an expert group to propose permanent national rules.

“I am concerned about the introduction of powerful new technology where people risk being photographed, filmed, or recorded without their knowledge,” said Torgeir Micaelsen, Norway’s digitalization minister. A temporary ban “will give us time to conduct a thorough assessment and hold an informed debate that can lay the foundation for permanent regulation,” he said.

Read full article

Comments

The mechanical keyboard isn't always so mechanical anymore.

Over the past six years, keyboards with optical, Hall-effect, and other "contactless" switches have become increasingly common, often going for higher prices than traditional mechanical keyboards, which already command a premium over basic membrane boards. In return, they promise some theoretical advantages, particularly for gamers. In daily use, though, the differences can be pretty subtle.

So what exactly are you paying for? In this guide, we break down how the newest switches work, why contactless designs are becoming more popular, and where their advantages—and disadvantages—really matter.

Read full article

Comments

Egyptologists have long debated whether the earliest pharaohs of the First Dynasty were buried with various servants and officials to serve them in the afterlife—a form of human sacrifice. But there is very little archaeological evidence available, given that many of the earliest Egyptian tombs were plundered and/or hastily excavated. A new paper published in the journal Frontiers in Environmental Archaeology reassesses a collection of skulls excavated from tombs in the 1920s and concludes that over one-third show evidence of blunt force trauma. This suggests that they may have been victims of so-called "retainer sacrifice."

Author Roselyn Campbell is a bioarchaeologist at Purdue University who has long been fascinated with the history of human sacrifice. "I'm interested in how we as human beings decide which types of violence are okay and which are not, and how we even define violence," Campbell told Ars. "It's very context-specific. We have to be careful not to extend our own ideas about what violence is and how it's used into other cultures. With Egypt, we have such a long history of European and colonial archeology; they came in with very specific ideas about what this culture was. You really have to make an effort to contextualize the legacy data we have."

Naturally she found the debate over whether ancient Egyptians practiced retainer sacrifice pertinent to her interests. "People tend to fall into one of two camps," said Campbell. "Either retainer sacrifice definitely happened, end of discussion, or it definitely didn't happen, end of discussion. But nobody's actually looked at the bones in a very long time." Forensic science has advanced considerably over the last century, so re-analysis could be useful. Complicating matters is the fact that older sets of remains are often incomplete and/or modified for preservation, destroying vital forensic information in the process.

Read full article

Comments