Browse All

Microsoft is testing agentic AI (AI that can perform multi-step tasks automatically) in its Edge for Business browser to help employees complete routine work like filling forms and gathering information across tabs. A key focus is protecting corporate data through features that keep AI prompts within the company's Microsoft 365 tenant (a private cloud environment), prevent copy-paste operations, block sensitive uploads, and allow companies to audit what users do.

Federated learning (a system where multiple computers train an AI model together while keeping their data private) can be unfair to some participants and vulnerable to attacks where bad actors tamper with the process. FairRoP is a new method that uses adaptive client selection (choosing which computers to include based on their trustworthiness) and a bandit algorithm (a technique for balancing exploration and exploitation in decision-making) to improve both fairness and robustness against attacks. The approach combines three components: fairness awareness, attack detection, and q-Balance to handle the different challenges involved.

This article addresses how radar systems (devices that detect objects using electromagnetic waves) can better allocate their time between searching for targets and tracking known ones when facing jamming (intentional interference meant to disrupt detection). The researchers propose a dynamic scheduling strategy using receding-horizon optimization (a method that repeatedly solves shorter planning problems instead of one big long-term problem) combined with mathematical techniques to keep radar performance strong even under jamming attacks.

At Anthropic's developer event, nearly half the attendees reported shipping code written entirely by Claude (an AI assistant), with many not reading it first before deploying it live. The article discusses how AI coding tools are becoming increasingly capable and how developers are automating their work, though not everyone agrees this approach is beneficial.

AI security strategies often fail in operational technology (OT) environments, like power plants and factories, because critical legacy systems don't send data to AI systems—a maintenance laptop running unpatched Windows 7 is common. AI trained on typical IT data (like web traffic logs) often misclassifies normal industrial traffic as threats, and automated responses can accidentally shut down production lines faster than actual attacks, because in OT systems availability (keeping things running) is more important than the IT security priorities of confidentiality and integrity.

This research paper proposes E2E-PP, a system that protects privacy in mobile crowdsensing (collecting data from many mobile devices) by combining compressive sensing (a technique that reduces data size while preserving important information) with personalized differential privacy (a method that adds customized noise to data to prevent identifying individuals). The system aims to let mobile devices share sensor data for collective purposes while keeping personal information private.

This academic paper analyzes how Internet of Things devices (smart devices connected to the internet, like security cameras or smart home systems) receive and install software updates. The research examines the mechanisms these devices use to stay current with security patches and new features. The publication appears in a peer-reviewed security journal and was made available online in May 2026.

Drupal Core has a SQL injection vulnerability (a flaw where attackers insert malicious database commands into user input) that could allow attackers to gain higher privileges and execute remote code through specially crafted requests to the database API. This vulnerability is actively being exploited in the wild, with a deadline of May 27, 2026 to address it.