Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

The Hacker News - Sep 22, 2026

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Read full article

MORE NEWS

Mathematics Isn’t Just a Game to Let A.I. Solve. History Shows Why.

Sep 22, 2026

Mathematics Isn’t Just a Game to Let A.I. Solve. History Shows Why.

In our field of applied mathematics, the long, human process of trial and error — not just the solutions themselves — is often what has led to progress.

Man vs robot: Influencer takes on 6ft humanoid in a terrifying cage fight - and it doesn't end well for him

Sep 22, 2026

Man vs robot: Influencer takes on 6ft humanoid in a terrifying cage fight - and it doesn't end well for him

It might sound like the plot of a bonkers sci-fi film, but the world has now witnessed the very first human vs robot boxing match.

Gen Z are in a sex RECESSION, study reveals - with a fifth reporting they've never had a partner

Sep 22, 2026

Gen Z are in a sex RECESSION, study reveals - with a fifth reporting they've never had a partner

Despite being the generation that grew up with Tinder, Hinge and Bumble at their fingertips, a study has revealed Gen Z is in a sex recession.

Call of Duty's Activision to make next Halo game as Xbox cuts more jobs

Sep 22, 2026

Call of Duty's Activision to make next Halo game as Xbox cuts more jobs

The news comes as part of a "reset" announced by Xbox in July, with 3,600 planned job losses overall.

China’s Hygon moves beyond data centres with embedded processors for robotics, edge AI

Sep 22, 2026

China’s Hygon moves beyond data centres with embedded processors for robotics, edge AI

Chinese chipmaker Hygon Information Technology on Tuesday launched a suite of central processing units (CPUs) for robotics and industrial edge devices, expanding beyond cloud computing and into the fast-growing market for physical artificial intelligence. The firm unveiled its Hygon 1000 series processors, designed to be embedded into physical devices in industrial automation systems such as robotics and factory controllers, enabling computing and graphics processing to be handled locally. Built...

Sick of wearing sweaty headphones after the gym? Beats 360 feature interchangeable cushions that can be swapped in and out in seconds

Sep 22, 2026

Sick of wearing sweaty headphones after the gym? Beats 360 feature interchangeable cushions that can be swapped in and out in seconds

Called Beats 360, the £299.95 headphones are sold alongside a range of ear cups and headband cushions, which can be swapped in and out in seconds.

Developing El Niño becomes strongest on record weeks before expected peak

Sep 22, 2026

Developing El Niño becomes strongest on record weeks before expected peak

Scientists say the developing El Niño is now the strongest on record with weather impacts already being felt around the world.

New report tackles problem of governments' overreliance on consulting firms

Sep 22, 2026

New report tackles problem of governments' overreliance on consulting firms

Dependence on consulting firms is a growing trend among governments globally. Left unchecked, it can have a negative impact due to high costs or transparency issues. Such dependence came to the fore in France a few years ago, when the Macron government was criticised for its close ties with US consulting giant McKinsey. UNESCO's Inclusive Policy Lab, headed by Iulia Sevciuc, has established a new blueprint to tackle this problem. She spoke to us in Business.

AI Agents Are Rewriting the Rules of Lateral Movement

Sep 22, 2026

AI Agents Are Rewriting the Rules of Lateral Movement

Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how can we determine which paths an autonomous system can discover, given the access it already has? A person may try several ways to complete a task. A deterministic application follows the flow its developer wrote. But an AI agent is relentless in its pursuit of done. In May

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Sep 22, 2026

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on September 22. The flaw, tracked as CVE-2026-93952, may allow a remote attacker with no login access to privilege internal functions and affect the VCO host. Only orchestrators set up to authenticate their Edges with certificates are

Why is it still so warm in the UK? Met Office predicts temperatures could hit 26C in late-September heatwave - as furious Brits plead 'please give us a break'

Sep 22, 2026

Why is it still so warm in the UK? Met Office predicts temperatures could hit 26C in late-September heatwave - as furious Brits plead 'please give us a break'

The Met Office predicts that southern areas could reach 26°C today, while people in the north can expect balmy highs of 22°C.

Holibob launches SDK that cuts experience-booking integration from six months to three days

Sep 22, 2026

Holibob launches SDK that cuts experience-booking integration from six months to three days

New developer toolkit lets any travel brand stand up a live, bookable experiences storefront in days rather than quarters, permanently removing the engineering-roadmap blocker that has kept the £300bn experiences opportunity out of reach for much of the industry.

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.