Researchers at IIT Gandhinagar have built a flexible wearable patch that tracks your movements and compares them with expert athletes to help you fix your workout form.

WHOOP plans to test whether wearable coaching can help improve blood sugar and blood pressure. See how its Abu Dhabi study could affect future health wearables.

The post WHOOP to Study Wearable Coaching for Blood Sugar and Blood Pressure appeared first on TechRepublic.

Nvidia and Agile Robots unveiled Agile ONE SN, a compact humanoid with Jetson Thor computing and Isaac GR00T training tools. Here's what it can do, its specifications, and when it launches.

The post Agile ONE SN Humanoid Robot Bundles Nvidia’s Robotics Stack appeared first on TechRepublic.

NUS researchers develop a touchscreen garment using smart fibres that display images, play videos, respond to touch, and survive machine washing.

OpenAI used nearly 2,000 AI agents to analyze mouse brain-cell data in 32 minutes, uncovering possible links to neurological diseases for further study.

The post OpenAI Ran Nearly 2,000 AI Agents on Brain Data: What They Found in 32 Minutes appeared first on TechRepublic.

New study finds continuous glucose monitors improve blood sugar control in people with type 2 diabetes who don't use insulin. Here's what to know.

The post New Diabetes Study Finds Continuous Glucose Monitors Help Without Insulin appeared first on TechRepublic.

Artificial intelligence has changed cybersecurity permanently. While OpenAI’s inadvertent attack on Hugging Face brought AI-generated attacks to everyone’s attention, AI has been on security professionals’ radar for a long time. AI makes attacks possible at a scale that was hard to imagine a few years ago. Newly discovered zero-days can be exploited almost immediately. Deepfakes […]

Four Google DeepMind AI agents defeated Minecraft's Ender Dragon after 27 hours and 605 deaths, revealing both the promise and limitations of autonomous AI.

The post Google’s AI Agents Finally Beat Minecraft. It Took 27 Hours and 605 Deaths appeared first on TechRepublic.

When Peter Lee announced two weeks ago that he was leaving Microsoft, he said only that his next job would fulfill “a dream I’ve had since childhood.”

The dream, it turns out, comes with a pit crew.

The longtime Microsoft Research leader, who is leaving his post as president of Microsoft Science after more than 16 years at the company, plans to join the Mercedes Formula 1 team in a newly created AI advisor role, according to a report by Fortune.

As a career turn, it isn’t as much of a surprise as it might seem. Lee raced karts and Formula Ford as a kid, and he was once a licensed auto body technician, he told GeekWire last year. He had a replica 1955 Porsche 550 Spyder converted to electric and was in the middle of converting a 1968 Ford Mustang GT Fastback last year.

He called cars “a great laboratory” for AI models that decide an agent’s next move.

“The thing I’ve always loved about cars, and why I love to work on cars, is you actually finish something,” he said in that interview. “That never happens in software.”

At Mercedes, he’ll focus on using AI to tackle physics problems for the team’s car, breaking down organizational and data silos, building financial and predictive models, and advising the team on how F1’s regulators might govern AI. He’s expected to join on a one-year contract with an option for a second. His exact title is still being worked out, according to the report.

“I’m completely thrilled, and I’m in disbelief that they would think of me for something like this,” he told Fortune.

His exit is part of a broader wave of senior departures from Microsoft this year, including LinkedIn and Office chief Ryan Roslansky and communications chief Frank Shaw.

Two top Microsoft executives announced this week that they’re leaving the Redmond, Wash., tech giant:

— Peter Lee, the former head of Microsoft Research and most recently president of Microsoft Science, is resigning after more than 16 years.

“As for what I’ll be doing next, what I can say at this point is that it is a once-in-a-lifetime opportunity to join an elite team, fulfilling a dream I’ve had since childhood. It’s a major detour from what I’ve been doing over the past 2+ decades,” Lee said on LinkedIn.

At the same time, he said he would continue working with healthcare organizations including the Mayo Clinic, Kaiser Permanente Bernard J. Tyson School of Medicine and Seattle Children’s.

Before joining Microsoft, Lee spent 22 years at Carnegie Mellon University, where he served as head of its Computer Science Department. He was named one of Time magazine’s 100 most influential people in health and life sciences in 2024.

As a hobby, Lee enjoys converting classic cars into electric vehicles, including a replica 1955 Porsche 550 Spyder and a 1968 Ford Mustang GT Fastback.

— Ryan Roslansky is leaving Microsoft after nearly 18 years with LinkedIn and Microsoft. Last year, he was promoted from CEO of LinkedIn to Microsoft executive vice president overseeing both LinkedIn and Microsoft Office. In April, the company named Daniel Shapero the new LinkedIn CEO.

Roslansky thanked CEO Satya Nadella, noting that when Microsoft acquired LinkedIn a decade ago, “you gave us room to build, and then trusted many of us with a lot more. I’ve learned more from you than I can fit in an email, and I’m grateful for the friendship that came with it.”

Nadella in turn praised Roslansky, saying on the company blog, “I’ve always appreciated his clarity of thinking and I’m deeply grateful for everything Ryan has built, for the leaders and teams he has developed, and for his friendship and counsel.”

Roslansky joined LinkedIn in 2009 as chief product officer and became CEO in 2020. To continue in his role as Microsoft EVP would require relocating his family from the San Francisco Bay Area to the company’s Redmond headquarters.

“But my life and my family’s life are here in the Bay Area,” he said, adding, “The work now goes to leaders who are set up to take it further. I can’t wait to see what they do with it.”

Roslansky will leave the company at the end of the year.

At least four espionage groups, most with suspected links to China, are using a new exploit kit that chains two Chromium-based browser flaws and one Microsoft Windows bug to break into organizations' networks in the US and Southeast Asia. Mark Kelly, a threat researcher at email security shop Proofpoint, told The Register that the researchers don't know exactly who was targeted, nor how, and so far the damage appears limited. “In terms of organizations targeted, we saw fewer than 20 organizations globally targeted across the activity highlighted," he said. "However, the true number is almost certainly higher than this.” Proofpoint’s threat hunters spotted the new kit, which they named BlueMoon, and said its first observed use started on August 28. This is when a Beijing-backed crew they track as TA412, also known as Violet Typhoon and APT31, used BlueMoon to “repeatedly” target non-governmental organizations (NGOs), mining companies, and physical commodity trading firms in the US. TA412 is a cyberespionage group linked by US authorities to China's Ministry of State Security (MSS), and American prosecutors previously charged seven alleged members with conspiracy to commit computer intrusions and wire fraud, alleging they broke into computer networks, email accounts, and cloud storage belonging to numerous critical infrastructure organizations, companies, and individuals. Just days after Proofpoint documented the late-August activity, “several other espionage-motivated clusters began using BlueMoon, the majority of which have a suspected China nexus,” Kelly and fellow researchers Greg Lesnewich, Konstantin Klinger, Saher Naumaan, Julia Paluch, David Galazin, and Stuart Del Caliz said on Wednesday, noting that there may be other, non-China-nexus attackers using the exploit kit as well. “BlueMoon was developed and deployed rapidly, and shared across multiple threat actors within days,” Kelly told The Register. “This may reflect a reduced cost and barrier to entry for this class of capability, which has historically been rare and high value, as AI agents increasingly enable threat actor exploit development. That is particularly true for open-source codebases such as Chromium, where publicly accessible upstream patches create a ‘patch-gap’ window for rapid reverse engineering and exploit development ahead of downstream stable releases.” A Google spokesperson declined to comment beyond what Proofpoint wrote. Microsoft patched the Windows bug (CVE-2026-85880) on Tuesday, and a spokesperson reiterated that customers who applied that patch are protected. BlueMoon attack chain The kit chains together three vulnerabilities. The first is a V8 type confusion (CVE-2026-85046) flaw that allows remote code execution and affects all Chromium-based browsers, including Google Chrome and Microsoft Edge. Google patched this bug in Chrome on September 3, and at the time warned that it “is aware that an exploit for CVE-2026-85046 exists in the wild.” Microsoft published a security advisory saying it fixed the flaw in Edge Stable version 152.0.4191.62 on September 2. The second is a Chrome V8 sandbox escape. This one also affected all Chromium-based browsers. It does not have a CVE because Google doesn’t issue them for sandbox escapes. Finally, the third bug is a privilege escalation vulnerability in Windows Advanced Local Procedure Call (CVE-2026-85880) that Microsoft patched on Tuesday, as noted above. Redmond also warned that this flaw had been exploited as a zero-day prior to the security update. The Proofpoint researchers also note that both V8 vulnerabilities are what’s called "patch-gap" zero-days at the time of the observed activity. This means they were known and fixed in upstream Chromium source code – a change containing the fix for CVE-2026-85046 was committed on August 7. But they remained unpatched in the latest stable releases of Chrome and Chromium-based browsers available to the public for weeks. “It is likely that the exploit kit developer used these publicly available Chromium patches to weaponize the browser exploit chain,” the researchers note. From phishing to browser surveillance The attacks start with a phishing email that tricks victims into clicking on an actor-controlled URL. This triggers the two V8 bugs to allow remote code execution and escape the browser sandbox. The attack chain then exploits the Windows bug to download multiple payloads including browser-surveillance malware, credential-stealing backdoors, and others, depending on the group using the exploit kit. TA412’s first campaign, which began on August 28, used a range of lures. Some of the emails purported to come from university students interested in internships at the targeted organizations, and some were more target-specific exchanges, intended to build trust with the individual before ultimately sending a malicious link via email. In these instances, the exploit chain “ultimately downloaded and ran a loader executable on the infected host, which then installed a malicious browser extension disguised as Google Gemini on the victim's Chromium-based browser,” the team wrote. This browser extension, which Proofpoint tracks as GemStone, allowed the Beijing spies to issue commands through a command-and-control (C&C) channel, steal cookies and other sensitive data, take screenshots, and inject a keylogger into a browser tab. The malware also contains a keyword monitor, which injects an attacker-specified keyword list into the top frame of each page, scans the HTML body for these keywords, and triggers a screenshot if it finds any. A few days later, beginning on September 2, a second China-aligned spy crew that Proofpoint tracks under the temporary group designator UNK_LateNight used BlueMoon to target multiple US aerospace companies. The phishing emails used request-for-quotation lures specific to defense industry organizations, and included links to attacker-controlled domains spoofing a variety of US aerospace companies. These websites also served the BlueMoon exploit kit and ultimately loaded a backdoor called ShadowPad, which has been shared among multiple China-aligned groups since 2019. Around this same time, on September 2, another suspected espionage group that Proofpoint tracks as UNK_DoubleCheck targeted a Vietnamese manufacturing firm with messages sent from a compromised Southeast Asian government email address. The fourth campaign began a day later, and involved suspected China-linked spy crew UNK_QuietRacket using BlueMoon to target government, consulting, and financial-sector organizations in Indonesia and Singapore. These phishing emails used lures related to Indonesian conferences, such as the Indo Startup Expo and Forum 2026 and the World Conference on Creative Economy (WCCE 2026). Proofpoint warns that BlueMoon will likely be used by both cyberspies and financially motivated attackers. “The broader dynamic revealed by this activity - rapid exploit development that leverages the open source patch-gap – is likely to recur beyond BlueMoon as this development model becomes accessible,” the team wrote. ®

Data theft and extortion crews are stealing companies’ proprietary AI data and threatening to leak it if the victim organizations don’t pay a ransom, according to Google’s threat hunters. In one case that Google’s Mandiant incident response team investigated, the crooks broke into a healthcare company and exfiltrated corporate data and drug research, including AI research and a proprietary AI model. The criminals then threatened to publish the data unless the company met their extortion demand. In another breach at a company that specializes in AI media generation, attackers stole sensitive AI data including source code, prompts, skills, model scripts, and secrets before demanding a payment and threatening to dump the AI assets publicly if the ransom wasn’t paid. Google detailed these two intrusions for the first time in its most recent AI Threat Tracker, published Tuesday and shared in advance with The Register. “But it's certainly not limited to that,” John Hultquist, chief analyst at Google Threat Intelligence Group, said in an interview with The Register. Mandiant responded to several of these data-theft-and-extortion operations during the second quarter of 2026, he said. The intrusions affected companies in the technology, healthcare, pharmaceutical, and media and entertainment sectors in North America and Europe. “It’s become a really valuable target where organizations are spending a lot of money and investment, and they don't necessarily want their IP exposed to the open world, so they're willing to pay in an extortion scheme,” Hultquist said. “Criminals attacking AI systems is an area that's not received as much attention as it probably should, and as we incorporate these systems, it’s going to come with brand-new risks,” Hultquist added. “There are certainly threat actors who are ahead of others when it comes to that problem – TeamPCP has been extremely successful.” Since March, TeamPCP has pulled off several very large scale open source supply chain attacks targeting ecosystems including PyPI, npm, and Docker Hub. After compromising these open source packages and registries, TeamPCP, which Google tracks as UNC6780, typically deploys stealers to scoop up cloud and AI system credentials. “Evidence indicates that UNC6780 created a malicious GitHub Actions workflow for the company’s proprietary AI repository, and that the extortion actor exfiltrated a copy of this AI repository,” the report says. “Beyond these demonstrated tactics, UNC6780 has also implemented more than half a dozen different methods to target or exploit AI tools and open source software development practices.” While Google’s earlier AI tracker, published in February, documented attackers experimenting with agentic AI to support certain pieces of the attack chain, in the past quarter they’ve gone on to integrate agentic capabilities into multiple stages of an attack lifecycle, according to the researchers. In one example, Mandiant observed miscreants who compromised an organization’s cloud infrastructure in an autonomous, multi-agent credential-harvesting attack that took less than six hours. During that time, the agents autonomously scanned for vulnerabilities, performed real-time troubleshooting, and executed IP rotation logic without manual intervention. “Like scanning – but with a brain,” Hultquist said. In another case detailed in the report, Google Threat Intelligence observed a China-linked espionage group using Gemini to design a dynamic, automated penetration-testing framework that could reason through actions, execute tasks, and change course as needed in unpredictable environments. Google disabled the assets associated with this particular crew. “That’s where we are headed,” Hultquist said. “We're kind of in this interim place where threat actors are inserting agentic AI into certain parts of their operations, but we've not gotten to the place where they are able to sort of remove themselves entirely. We're right on the precipice of that.” ®

Coauthored with Claude Unrestricted global access to frontier AI technology is ending. The US government has taken steps to control who can use the most advanced models developed by American companies. While Claude Fable and the GPT-5.6 models are now open to all users, Anthropic and OpenAI are both complying voluntarily with a program that […]