Upwind links compromise of multiple AsyncAPI npm packages to coordinated attack on software release process
Upwind links compromise of multiple AsyncAPI npm packages to coordinated attack on software release process

Developers often assume that packages published through official channels have passed through a secure release process. That assumption is fundamental to modern software development, where open source components are routinely integrated into applicatio…

Demis Hassabis wants a Wall Street-style referee for AI, with the power to hit pause
Demis Hassabis wants a Wall Street-style referee for AI, with the power to hit pause

The man behind Google’s AI thinks the world needs a referee. And he has drafted the rules. Demis Hassabis wants a US-led watchdog that vets frontier models before release. It is modelled on Wall Street’s policeman, and it could slow the whole industry …

Medical AI was meant to help. This week it replaced nurses and dodged its own checks
Medical AI was meant to help. This week it replaced nurses and dodged its own checks

The pitch for medical AI is that it frees clinicians to care for patients. Two stories this week suggest the reality can run the other way. In New York, nurses say software replaced them. In Minnesota, a former Mayo Clinic leader says the software was …

Nadella says you pay for AI twice, and Microsoft helped build the trap
Nadella says you pay for AI twice, and Microsoft helped build the trap

Microsoft’s Satya Nadella says every firm using AI is paying for it twice, once in cash, and once in the secrets it hands over to make the thing useful. He calls it the Reverse Information Paradox. He also runs the company that helped build the trap. S…

The web is now mostly bots. Cloudflare is rebuilding its defences around that
The web is now mostly bots. Cloudflare is rebuilding its defences around that

For the first time, bots generate more than half of all web traffic. Cloudflare Precursor, the company’s new tool, stops checking IDs at the door and starts watching how visitors behave once they are inside. The internet just passed a strange milestone…

Valarian raised $50m to help governments use US cloud without losing control of it
Valarian raised $50m to help governments use US cloud without losing control of it

A London startup co-founded by a former Palantir executive has raised $50m to help governments and companies use American cloud and AI without letting America reach inside. The fear driving it stopped being hypothetical this year. Valarian, a London-ba…

The EU has stopped sanctioning Russian hackers and started sanctioning the machine that makes them
The EU has stopped sanctioning Russian hackers and started sanctioning the machine that makes them

The European Union and the United Kingdom have jointly sanctioned Russia’s cyber apparatus for the first time. The EU listed nine individuals and four entities, while the UK went further with 24, Politico reports. The language is what matters here. The…

Meta’s AI detector can’t catch its own cropped fakes
Meta’s AI detector can’t catch its own cropped fakes

The Meta AI detector promises to catch Meta’s own fakes. Crop the image, and more than half slip straight past it. The tool was meant to be a fix for the deepfake problem, not an example of it. This week Meta previewed an image detector alongside Muse …

Zhipu’s founder says frontier AI should stay open to everyone. His own government may disagree.
Zhipu’s founder says frontier AI should stay open to everyone. His own government may disagree.

The founder of China’s most prominent AI lab has made an unambiguous case for openness. Frontier AI should stay broadly accessible rather than controlled by a select few, Zhipu’s Tang Jie wrote in an internal memo reviewed by Bloomberg. His argument in…

Beijing flagged Claude Code as a back door, and Chinese coding tools are lining up to take its place
Beijing flagged Claude Code as a back door, and Chinese coding tools are lining up to take its place

Beijing’s cybersecurity warning against Anthropic is expected to speed up a shift already under way. Chinese developers are moving to domestic coding tools, analysts told the South China Morning Post. China’s National Vulnerability Database, overseen b…