Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

The Hacker News - Sep 22, 2026

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Read full article

More News

$Mathematics Isn’t Just a Game to Let A.I. Solve. History Shows Why.$

Sep 22, 2026

Mathematics Isn’t Just a Game to Let A.I. Solve. History Shows Why.

In our field of applied mathematics, the long, human process of trial and error — not just the solutions themselves — is often what has led to progress.

Sep 22, 2026

Man vs robot: Influencer takes on 6ft humanoid in a terrifying cage fight - and it doesn't end well for him

It might sound like the plot of a bonkers sci-fi film, but the world has now witnessed the very first human vs robot boxing match.

Sep 22, 2026

Gen Z are in a sex RECESSION, study reveals - with a fifth reporting they've never had a partner

Despite being the generation that grew up with Tinder, Hinge and Bumble at their fingertips, a study has revealed Gen Z is in a sex recession.

Sep 22, 2026

Call of Duty's Activision to make next Halo game as Xbox cuts more jobs

The news comes as part of a "reset" announced by Xbox in July, with 3,600 planned job losses overall.

Sep 22, 2026

China’s Hygon moves beyond data centres with embedded processors for robotics, edge AI

Chinese chipmaker Hygon Information Technology on Tuesday launched a suite of central processing units (CPUs) for robotics and industrial edge devices, expanding beyond cloud computing and into the fast-growing market for physical artificial intelligence. The firm unveiled its Hygon 1000 series processors, designed to be embedded into physical devices in industrial automation systems such as robotics and factory controllers, enabling computing and graphics processing to be handled locally. Built...

Sep 22, 2026

Sick of wearing sweaty headphones after the gym? Beats 360 feature interchangeable cushions that can be swapped in and out in seconds

Called Beats 360, the £299.95 headphones are sold alongside a range of ear cups and headband cushions, which can be swapped in and out in seconds.

Sep 22, 2026

Developing El Niño becomes strongest on record weeks before expected peak

Scientists say the developing El Niño is now the strongest on record with weather impacts already being felt around the world.

Sep 22, 2026

New report tackles problem of governments' overreliance on consulting firms

Dependence on consulting firms is a growing trend among governments globally. Left unchecked, it can have a negative impact due to high costs or transparency issues. Such dependence came to the fore in France a few years ago, when the Macron government was criticised for its close ties with US consulting giant McKinsey. UNESCO's Inclusive Policy Lab, headed by Iulia Sevciuc, has established a new blueprint to tackle this problem. She spoke to us in Business.

Sep 22, 2026

AI Agents Are Rewriting the Rules of Lateral Movement

Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how can we determine which paths an autonomous system can discover, given the access it already has? A person may try several ways to complete a task. A deterministic application follows the flow its developer wrote. But an AI agent is relentless in its pursuit of done. In May

Sep 22, 2026

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on September 22. The flaw, tracked as CVE-2026-93952, may allow a remote attacker with no login access to privilege internal functions and affect the VCO host. Only orchestrators set up to authenticate their Edges with certificates are

Sep 22, 2026

Why is it still so warm in the UK? Met Office predicts temperatures could hit 26C in late-September heatwave - as furious Brits plead 'please give us a break'

The Met Office predicts that southern areas could reach 26°C today, while people in the north can expect balmy highs of 22°C.

Sep 22, 2026

Holibob launches SDK that cuts experience-booking integration from six months to three days

New developer toolkit lets any travel brand stand up a live, bookable experiences storefront in days rather than quarters, permanently removing the engineering-roadmap blocker that has kept the £300bn experiences opportunity out of reach for much of the industry.

Home

Most Recent

Press

Contact

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

More News

Mathematics Isn’t Just a Game to Let A.I. Solve. History Shows Why.

Man vs robot: Influencer takes on 6ft humanoid in a terrifying cage fight - and it doesn't end well for him

Gen Z are in a sex RECESSION, study reveals - with a fifth reporting they've never had a partner

Call of Duty's Activision to make next Halo game as Xbox cuts more jobs

China’s Hygon moves beyond data centres with embedded processors for robotics, edge AI

Sick of wearing sweaty headphones after the gym? Beats 360 feature interchangeable cushions that can be swapped in and out in seconds

Developing El Niño becomes strongest on record weeks before expected peak

New report tackles problem of governments' overreliance on consulting firms

AI Agents Are Rewriting the Rules of Lateral Movement

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Why is it still so warm in the UK? Met Office predicts temperatures could hit 26C in late-September heatwave - as furious Brits plead 'please give us a break'

Holibob launches SDK that cuts experience-booking integration from six months to three days

Recommended

Anthropic Releases a New A.I. Model, Opus 5.5, Amid Safety Debate

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

The Big Threat Has Been Climate Change. Now Comes A.I.

Sea turtle laying eggs at Huntington Beach is first known instance of nesting on West Coast

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

An A.I. Image of Trump Kissing a Woman Was Fake. It Spread Anyway.

I Gave My Life Over to Meta’s A.I. Agent and Was Blown Away

An Army of Paid Creators Is Carpeting the Web With Political Content

C.T.E. Can’t Be Detected in the Living. New Brain Research Offers Hope.