Unvetted AI Agents Are Accessing US Bank Accounts

An anonymous reader quotes a report from Axios: Major U.S. banks are detecting unauthorized third-party AI agents operating inside customer accounts, with some agents attempting to take actions that appear to be independent of user instructions, sources tell Axios. The difficulty in distinguishing between a human and an unauthorized bot is forcing banks to block the technology and rapidly rewrite their terms of service. […] This presents significant security risks: banking executives fear the steps agents with login access might take, especially if a user has granted purchase authority or the ability to shift funds. In other instances, some banks have tracked activity when agents — programmed to fulfill requests or complete tasks on a user’s behalf — contact call centers or appear to take actions independent of user instructions, the people said.

Bank executives described the situation as horrifying, with one official saying the industry has grave concerns about agents gaining access to customer accounts and taking steps that could impact user finances. The concerns are at the root of the decision by several banks to restrict third-party AI agent access, the people said. Morgan Stanley has begun blocking third-party agents from accessing its platforms, sources familiar with the decision said. JPMorgan, Bank of America and Citi are also restricting agents. […] Many banks are broadly not able to parse whether agent account activity is user-directed, sources said.

[…] On one hand, banks are best positioned to respond to the threats and opportunities of AI given their cash on hand and experience as critical infrastructure. But money isn’t necessarily enough to solve this problem, one source said, because of how quickly the technology is developing and revealing new weaknesses in real time. Banks are investing in preventing worst-case scenarios, but they are also preparing for when those could happen, including with “day after” scenario planning that would allow them to quickly secure or restore customer access, sources said.


Read more of this story at Slashdot.

Switch 2 security takes a hit as hackers unlock homebrew access

A security researcher has demonstrated a software-only partial jailbreak of the Switch 2, gaining “userland” access that he says “lets us run homebrew, reverse engineer and mod Switch 2 games, back up save files off the Switch, and access most of the Switch 2’s peripherals through MMIO.”

The hack relies on the original Switch version of SmileBasic 4, the latest in a long-running series of programming environments and interpreters that run on Nintendo hardware. The so-called “tethered” hack also requires access to a macOS or Linux PC on the same network to run a node.js package that helps enable privileged system access.

Researcher Sammy Hajhamid writes that he used OpenAI’s Codex to poke at SmileBasic’s language interpreter, using a custom harness that could send USB commands to the system and view results via HDMI (as well as power cycling via a Bluetooth light switch flipping device). After “substantial effort for ~2 weeks,” that harness discovered a 32-bit integer overflow that occurs when removing items from an array in SmileBasic. That error gives access to an array pointer, which in turn allows read and write access to portions of system memory.

Read full article

Comments

Moderna and Merck say their mRNA cancer vaccine cut death, recurrence by 42%

Personalized mRNA vaccines against melanoma—the deadliest form of skin cancer—reduced the risk of death or recurrence by 42 percent compared to standard treatment in a late-stage trial, pharmaceutical partners Merck and Moderna announced Thursday.

The results are a significant advance in melanoma treatment; Merck and Moderna are already engaging with regulatory authorities to get the vaccine approved. More broadly, the vaccine’s success bolsters hope that mRNA vaccines and individualized cancer-targeting medicines offer a new paradigm for cancer therapies.

“From the beginning, we believed mRNA technology could make it possible to develop cancer treatments uniquely matched to each patient’s tumor,” Moderna CEO Stéphane Bancel said in a statement. The trial results “mark a defining moment for that vision and show what’s possible when we rethink how medicines are made.” They also “reinforce our conviction that mRNA has the potential to fundamentally change how we treat cancer,” he said.

Read full article

Comments

Latest estimate for Starship launches required to support a Moon landing? 22.

NASA does not have, nor want, nuclear weapons. But when it comes to a particular metric that is part of the Artemis Program to land people on the Moon, NASA guards a particular number like they are trying to prevent outsiders from cracking nuclear codes.

I am speaking of the number of Starship launches required to fuel a Starship-based lunar lander in low-Earth orbit such that it can fly out to the Moon, land there, and return to lunar orbit.

This number has been a moving target over the years. The general response from NASA has typically been, ‘We don’t know for sure, so we’re not going to say.’ In 2023, for example, the then-director of NASA’s Human Landing System, Lisa Watson-Morgan, told Ars, “We have a general idea, but I’m reluctant to say exactly what that is.”

Read full article

Comments

Comcast loses more customers, claims other ISPs’ cheap prices are “irrational”

Comcast reportedly plans significant job cuts in its cable division as the firm continues to lose residential broadband and TV customers. Comcast lost 144,000 residential broadband customers in Q3 2026, up from a 91,000-customer loss in the same quarter a year ago, the company said in its earnings report today.

Comcast historically capitalized on a lack of competition for high-speed wired broadband. But now it faces stronger competition from fixed wireless providers and from fiber providers in parts of its cable territory.

“Fixed wireless remains aggressive and continues to take share, while fiber construction remains elevated, with pockets of irrational pricing and promotional activity,” Comcast co-CEO Mike Cavanagh said today in an earnings call.

Read full article

Comments

To Make Way For Data Centers, Google Will Pay Others to Use Less Power

Google is funding one of the nation’s largest “virtual power plants,” paying homes and businesses indirectly to reduce electricity consumption during periods of peak demand so more grid capacity can be available for data centers. Under its expanded deal with Voltus, the program could provide up to 1,070 megawatts in the Mid-Atlantic PJM grid — roughly the output of a large nuclear reactor. The New York Times reports: That electricity won’t come from new power plants. Instead, Voltus will sign up homes and businesses and give them financial incentives to curb their usage when local power demand is high or the grid is strained. Many of these reductions could occur automatically, such as through smart thermostats that dial back air-conditioning during peak summer hours or batteries that can provide temporary on-site power.

Each of these tweaks frees up only a small amount of power on its own. But by aggregating them across thousands of businesses and homes, Voltus says it can reliably provide lots of extra capacity when it’s most needed, and do so within a few years. While tech companies will likely ultimately need to build traditional power plants if they want to keep building large data centers, this approach could be a faster, cheaper and less-polluting option in the interim. “We really see virtual power plants as a critical short-term solution,” said Ellen Zuckerman, head of energy market development for North and South America at Google. “It’s a way to invest in our communities, really double down on our clean energy ambition, but also meet capacity at speed and scale.”


Read more of this story at Slashdot.

Microsoft Says October Updates Didn’t Actually Fix VPN Issues

joshuark shares a report from BleepingComputer: Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. Always On VPN replaced the legacy DirectAccess technology and supports domain-joined, non-domain-joined, and Microsoft Entra ID-joined devices running Windows 10, Windows 11, and Windows Server. It runs in the background and establishes secure tunnels back to the user’s corporate network whenever their device connects to the internet.

Microsoft first acknowledged the issue in a service alert sent to IT administrators in late September, saying it was triggered on systems running Windows 11 24H2 and later after installing the September 2026 security updates when the initial Always On VPN connection failed (e.g., when using automatic protocol selection with IKEv2 and SSTP). “When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed,” it said. “In some cases, subsequent connection attempts could display the error, ‘The specified port is already in use.'”

After releasing the October 2026 Patch Tuesday Windows 11 cumulative updates, Microsoft marked the bug as resolved, but in a Tuesday update it said the issues weren’t actually addressed and that a fix would ship later. “This disclosure was mistakenly updated to Resolved status on October 13, 2026. We have returned its status to Mitigated,” it said in a service alert sent to IT admins. “A resolution for this issue is planned to be included in an update to be released in the coming weeks. We apologize for any inconvenience or confusion.” While Microsoft continues working on a permanent solution, it shared a temporary fix that requires affected customers to choose one of two VPN tunneling protocols to work around the issue.


Read more of this story at Slashdot.

The Browser Company Retires Its Arc Browser, Pushes Users to Dia

The Browser Company is shutting down its Arc browser on December 22 and encouraging users to migrate to Dia, its newer AI-powered browser for Apple Silicon Macs and Windows 11 PCs. Thurrott reports: In the message explaining why it was sunsetting Arc, The Browser Company explained that maintaining two separate browsers was difficult to justify, especially from a security perspective. “Dia was built from the ground up to meet today’s security standards, so that’s where our engineering and security teams will focus moving forward,” the company wrote.

The retirement of Arc will be gradual: While nothing changes for existing Arc users, it’s no longer possible to create new Arc accounts as of today. On November 23, tab sync, Browse for Me, and other AI features will be disabled on the iOS and Android versions of Arc. Lastly, the desktop version of Arc will stop working on December 22, and Arc accounts will be deactivated.


Read more of this story at Slashdot.

Omarchy 4.0.5 Released With Better NVIDIA Laptop Support

The Omarchy project has released Omarchy 4.0.5, introducing a substantial collection of hardware compatibility improvements, desktop performance optimizations, security fixes, and package updates for the Arch Linux-based operating system. Released on October 18, 2026, the update focuses on refining the existing desktop experience while preparing the distribution for its next major feature release.

Leaked Mass Effect: Universe trailer gives a taste of what we’re all missing

Those mourning yesterday’s shuttering of highly praised and influential developer BioWare also had to deal with the cancellation of the next Mass Effect game, which was first teased back in 2020. Today, we got our best look at what that game could have been with a short, leaked trailer for Mass Effect: Universe.

In the roughly two-minute montage—which describes itself as “in-engine footage from our small team” that “uses our pre-production assets”—an ex-military officer wearing an N7 trenchcoat (similar to the one seen in that 2020 teaser) encounters an Asari at a bar. He talks of his frustration with military life—”by the time you put out one fire, another had already started”—before discussing his new line of work “stopping [the fires] before they start” and “making the choices no one else is willing to make. Going where others are afraid to go.”

Mass Effect: Universe Trailer
by
u/Random_Hyabusa_Ninja in
masseffect

Read full article

Comments

Moderna Shares Plunge After Leak of Cancer Vaccine Data

Moderna shares plunged as much as 25% after partial clinical trial data leaked for its personalized cancer vaccine developed with Merck, despite the full results showing promising outcomes for melanoma patients. Analysts attribute the selloff largely to inflated investor expectations rather than disappointing clinical results. CNBC reports: The personalized vaccine, known as intismeran autogene, paired with Merck’s immunotherapy Keytruda reduced the risk of recurrence or death in certain melanoma patients by 42% compared with Keytruda alone. The data also showed the shot along with Keytruda reduced the risk of cancer spreading to distant parts of the body or death by 38%, compared with just the immunotherapy. The companies say about 82% of patients who received the personalized cancer vaccine alongside Keytruda were alive without their melanoma returning at two years, compared with 70% of those who received Keytruda alone.

[…] Investors see the targeted vaccine as a possible breakthrough treatment, with the potential to be used in other forms of cancer in the future. It could also offer Moderna a critical additional commercial product in its pipeline, following vaccines for Covid-19, the flu and respiratory syncytial virus. “We assert this relative reduction in recurrence/death is clinically meaningful,” said BMO Capital Markets analyst Evan Seigerman. “Such a reaction likely reflects inflated expectations into the full data release, rather than a true indictment on the efficacy of the combo therapy.”

UBS analysts said “this is overall a strong data set” and gives more confidence in upcoming studies of the vaccine in kidney and bladder cancers. They added the stock reaction may be due more to massive expectations than disappointing data.


Read more of this story at Slashdot.