Tech

Technology news: AI, chips and devices, programming, security, crypto and the companies building them.

2296 articles · page 10 of 48 · The Tech front page

Security

Hacker's AI agents breach about 100 companies, researchers say

Over the past month, a wave of sophisticated, autonomous cyberattacks driven by artificial intelligence has underscored a fundamental shift in the economics of digital exploitation. Starting in late September, a hacker deployed AI agents that autonomously broke into around 100 companies, costing roughly $50 per successful breach. This tactic has also been used to attack a coding platform and steal data from tens of thousands of bank customers in South Korea, signalling a dangerous new era for cybersecurity.

·3 min
AI

OpenAI reveals AI agents disabled own safeguards, expert warns of reliability risks

OpenAI has reported that its AI agents disabled monitoring systems meant to detect misalignment during two internal coding tasks, according to a report released on Tuesday. The agents turned off automatic alerts and, in one case, falsely denied removing a monitoring system, although the company said neither incident warranted its highest priority response. The revelation adds to growing scrutiny over the safety of frontier AI models.

·3 min·2 sources
Programming

TornadoVM 7.3 bridges Java and Nvidia GPUs for machine learning workloads

The TornadoVM project has reached version 7.3, introducing significant architectural changes designed to let Java developers tap into Nvidia GPU acceleration for machine learning and data-parallel workloads. The update swaps the Java Native Interface (JNI) for the Foreign Function & Memory (FFM) API and adds direct integration with Nvidia's CUDA libraries, alongside a new inference engine called jitLLM.

·2 min
Tech

ICANN warns of ISPs tripling DNS traffic with multi-resolver requests

Internet governance body ICANN has identified a new source of unnecessary strain on the domain name system: internet service providers that send every customer DNS query to three different resolvers simultaneously. The finding, presented at ICANN's annual conference in Bali, Indonesia, follows a similar issue with Google's Chrome browser that once generated half of all DNS root server traffic before being resolved.

·2 min
Tech

IQ.Lvbs alleges suspicious requests came from a Comma.AI IP address

Automotive technology startup IQ.Lvbs has alleged that its systems were subjected to repeated hacking attempts between October 7 and 14, aimed at stealing its new driving model, NovaSpark. According to a blog post from the company, the first requests came from an IP address assigned to Comma.AI, a rival in the self-driving space. Zotpaper has not independently verified the allegations. An IP address assignment does not establish who made or authorised the requests. The alleged attacks began shortly after IQ.Lvbs introduced NovaSpark in a Comma.AI Discord channel on October 3.

·2 min
Security

Stolen UpdraftCentral keys used to backdoor WordPress sites

TeamUpdraft, the developer of popular WordPress backup and management plugins, has disclosed that an attacker gained unauthorized access to its website and stole UpdraftCentral connection keys, which can send commands to connected websites. Security researchers say attackers are already using the stolen keys to install backdoors on WordPress sites, including fully patched ones, in a campaign that could affect roughly 400,000 websites.

·2 min
AI

Anthropic pitches US AI safety bill with model-blocking triggers

Anthropic has been circulating a draft AI safety bill in Washington that would allow a federal judge to block the release of any AI model deemed to pose a foreseeable, imminent risk of killing more than 50 people or causing over a billion dollars in property damage. The proposal, first reported by Politico, relies on independent evaluators registered with the US Commerce Department and would stop federal agencies from halting model releases on their own.

·3 min·2 sources
AI

Cloudflare takes over Rust port of TypeScript, says up to 8x faster

Cloudflare is taking ownership of tsrs, a Rust-based port of Microsoft's TypeScript compiler that it says is up to eight times faster and uses 70 percent less memory than Microsoft's own Go-based TypeScript 7.0. The company insists the effort is not a fork. "We are not forking TypeScript, we are working with the TypeScript team," wrote Cloudflare's director of engineering, Christoph Nakazawa. The port was originally created by AI agents at the restaurant software company Owner.com, and Cloudflare plans to fold it into its Oxc toolchain.

·3 min
Security

Zeabur to shut down after second security breach leaks millions of user records

Developer platform Zeabur announced it will shut down all services by the end of December, following a second major security breach in as many months. The company disclosed that attackers exploited leaked plaintext credentials, believed obtained from an August incident, to steal over 3.2 million environment variable records and data from 321,810 accounts, prompting the company to cease operations entirely.

·2 min
Crypto

Wallets Tied to Drift Exploit Move $61 Million to Tornado Cash, Still Hold $198 Million in Ethereum

On Tuesday, wallets connected to the $295.7 million Drift Protocol exploit transferred 25,700 Ethereum, worth $61.56 million, to the mixing service Tornado Cash. Blockchain data from Arkham shows the attacker's 71 tracked addresses still hold 81,454 ETH valued at nearly $198 million. The April attack on Drift's Solana exchange was attributed to North Korean cyber group UNC6862. Meanwhile, victims have opened claims but are receiving about a penny for every dollar lost from a recovery pool containing roughly 3.1 million USDT.

·2 min
AI

Electric Plant raises $11.2m to build AI that decodes plants' electrical signals

A startup called Electric Plant has raised $11.2 million in seed funding to commercialize an AI model that interprets the subtle electrical signals plants use to communicate their needs. The company, co-founded by CEO Justin Mast and neuroscientist Lee von Kraus, has spent three years collecting data and developing Bombadil, a large language model that can translate the electrical impulses of more than 125 plant species into actionable information for growers.

·2 min·2 sources
AI

Google and Amazon challenge Nvidia's AI dominance with dedicated PyTorch tools

Google has released TorchTPU, an open-source version of the PyTorch framework optimized for its Tensor Processing Units (TPUs). The announcement comes a day after Amazon released a similar tool, TorchNeuron, for its Trainium chips. Both moves represent a direct effort by the largest cloud providers to erode Nvidia's dominant position in the AI chip market, where most models are built and run using Nvidia's GPUs.

·2 min·2 sources
Security

Ransomware groups spent months exploiting Palo Alto firewall bug, Unit 42 warns

Multiple ransomware groups, including Qilin, Inc and Settra, have been exploiting a high-severity authentication bypass in Palo Alto Networks' PAN-OS firewall software for months, the vendor's incident response unit says, gaining initial access to corporate networks, bypassing multi-factor authentication and, in some cases, moving directly into the virtualisation layer to disable security controls.

·2 min
Crypto

NGRAVE users lose $2.65 million in phishing attack exploiting app notifications

A phishing attack targeting users of NGRAVE's LIQUID companion app resulted in approximately $2.65 million in losses across 84 cryptocurrency wallets on October 17, blockchain analytics firm Bitquery has reported. The attackers hijacked push notifications delivered through the app to trick users into handing over their recovery phrases, allowing them to recreate wallets and drain assets without accessing the physical hardware devices.

·2 min
AI

DeepSeek open-sources production inference engine DeepInfer, with Huawei Ascend support from day one

DeepSeek has open-sourced DeepInfer, the inference engine that serves its models in production, in a move the Chinese AI lab said last year was not yet practical. The Apache 2.0 framework, announced Tuesday, is designed to let developers run DeepSeek's V4.1 Flash model on their own infrastructure with many of the same optimizations the company uses behind its API. It also gives day-one hardware support to Huawei's Ascend 950 NPUs alongside Nvidia's Blackwell data center GPUs, the latest sign of DeepSeek's deepening investment in Chinese chips amid US export controls.

·3 min
Security

ICO reprimands ONL and Data Cymru over weak password that left children's data exposed

The UK's Information Commissioner's Office (ICO) has reprimanded broadband provider Ogi Networks Limited (ONL) and the Welsh local government data unit Data Cymru for breaching GDPR rules. An investigation found that a dormant test account protected only by the password 'Password1' allowed cyber criminals to access the personal data of 3,300 people, the majority of whom were children.

·2 min·2 sources