Medicine

FDA Warns GLP-1s May Increase Risk of Sudden Blindness 3

An anonymous reader quotes a report from NBC News: The Food and Drug Administration said Monday that GLP-1 drugmakers must add a warning label about a rare eye condition that can cause sudden blindness. The condition, called nonarteritic anterior ischemic optic neuropathy, or NAION, affects the optic nerve, which carries signals from the eye to the brain. When blood flow to the nerve is reduced or blocked, it can cause sudden vision loss. The condition is permanent with no known treatment. The FDA said "there is a potential increased risk of rare NAION" in people taking GLP-1 drugs. The agency's requirement applies to all GLP-1s, including Novo Nordisk's Ozempic and Wegovy and Eli Lilly's Mounjaro and Zepbound, as well as several older GLP-1 diabetes medications. [...] Previous research has found that GLP-1 use may increase the risk of NAION, and Lilly has said it was aware of studies on the potential link.

The FDA said it began looking into a possible link after a 2024 study published in JAMA Ophthalmology that found diabetes patients prescribed semaglutide were four times as likely to develop NAION as those not prescribed the drug. The agency said it reviewed reports of side effects submitted to its adverse event monitoring system and analyzed data from multiple clinical trials. Cases of NAION have been reported for all currently marketed GLP-1 drugs, the FDA found. However, FDA scientists were not able to identify a mechanism for how the drugs could increase the risk of the eye condition. Risk factors for NAION can overlap with conditions seen in people taking GLP-1 drugs, including Type 2 diabetes, obesity, sleep apnea and hypertension.
"Patients and caregivers should be aware of a potential increased risk of NAION, a rare condition that can result in acute, painless, decreased vision in one eye, including permanent vision loss," with GLP-1 use, the FDA said in the release.
Microsoft

Microsoft Took 31 Years to Let You Kill Windows 11's Sticky Keys Popup 15

Microsoft is testing a Windows 11 option that lets users permanently disable the Sticky Keys and Filter Keys activation prompts directly from the pop-ups themselves, ending a 31-year-old annoyance without requiring a trip into Settings. Windows Latest reports: Sadly, the dialog is still the same aging Win32 window, but we spotted Microsoft's design boss replying under an X post reply about this, saying he is working on modernizing legacy dialogs. The popup might be annoying, but did you know that it exists because of a pinball game from 1995? [...] The change is in Build 26340.9882 (Experimental) and Build 26320.9876 (Beta), both released on November 6 and based on Windows 11 version 26H2. Microsoft says you can "choose not to be asked again" from the Sticky Keys and Filter Keys dialogs, but it's a Controlled Feature Rollout in Experimental, so you may not see it yet.
Government

Trump Backs Nvidia CEO Jensen Huang Amid Chinese Spy Affair Investigation (apnews.com) 35

President Donald Trump says the FBI is investigating Nvidia CEO Jensen Huang's affair with a woman alleged by U.S. intelligence to have gathered information for Beijing. "I know the FBI is looking into it in terms of something else, and I think that he'll be in good shape," Trump said at a White House briefing. The Associated Press reports: Trump suggested the extraordinary step of directly involving himself in a counterintelligence investigation, a sign of his friendly relationship with Huang and the possible geopolitical stakes. "I did speak to him today just to see if he's feeling all right, how you're doing," Trump said. "He said he had absolutely no idea that the person in question was a spy."

Trump is slated to meet next week with Chinese leader Xi Jinping in Shenzhen, China, at the Asia-Pacific Economic Cooperation summit, but he was noncommittal about bringing up the situation with Xi. "No, I don't think so," Trump said. "I mean, maybe. I'm sure President XI will ask me about it. I just know Jensen very well. I just think he's a very honorable man."
Nvidia has launched its own independent investigation into whether Huang was targeted by a foreign intelligence operation. Meanwhile, China has denied the allegations. "The so-called Chinese spy allegation is unsubstantiated. It is nothing but smears against China," Chinese Foreign Ministry spokesperson Guo Jiakun said during a regular news briefing Monday.

Further reading: Commerce Dept. Chip Inquiry Was Halted After Nvidia Intervention
Games

Epic Games Comments On Planned Linux Distribution Support (gamingonlinux.com) 17

Epic Games says it plans to support its new Linux launcher on as many distributions as possible, specifically naming Fedora, SteamOS, CachyOS and Omarchy. GamingOnLinux's Liam Squires-Hand reports: Speaking to Jake Jones, Communications Director at Epic Games, they said: "Hey Liam! The new Epic Games Launcher is still in Preview and we plan to support as many Linux distributions as possible, including Fedora, SteamOS, Cachy, Omarchy, and more. We're testing and evaluating packaging formats for distribution, and we'll restore AppImage this month."

With that in mind, until things settle down, you might see different packaging types appear or disappear until they decide firmly how they plan to support different distributions each with their own different packaging formats. Or, perhaps they might see the Flatpak light and just put it up officially on Flathub. Would make it even easier for SteamOS then too with Flathub, since it would just be a quick pop to Desktop Mode to install it directly in the Discover app.

Security

France Accuses Iran of Supermarket Fridge Hacking (bbc.com) 81

France has accused Iran's Islamic Revolutionary Guard Corps of being behind last month's cyberattacks on fridges and freezers across the country. French Foreign Minister Jean-Noel Barrot said the attack was "unprecedented in both its scale and its level of aggression," adding those who were responsible would be hit with sanctions "at the European level." The BBC reports: The cyber-attack last month saw fridges and freezers in hundreds of supermarkets across France heated up, which spoilt fresh and frozen food estimated to be worth millions of euros. Then last week, dozens of supermarkets across several other European countries were also impacted by a cyber-attack that targeted fridges and freezers. It is not known if the instances are linked.

Barrot said the attack on France's supermarkets "marks the first large-scale cyber-attack aimed at sabotage on our national territory, and it constitutes a major attack on the nation's interests and the security of the French people." He said the government had summoned the Iranian ambassador to Paris to "lodge a very strong protest against this extremely grave act." France will take "any other necessary and proportionate measures" to respond to the incident and "deter anyone who might seek to repeat it," Barrot added.

Separately on Monday, the Paris prosecutor said an investigation had been opened into the head of an offensive cyber unit associated with Iran's Islamic Revolutionary Guard Corps (IRGC) as well as his two deputies. Laure Beccuau named the unit as Shahid Kaveh, which she said had an affiliation with the electronic and cyber centre of the IRGC. Shahid Kaveh is the name given to a cluster of hackers thought to be directly employed by the Iranian regime. [...] The French government has not said how it reached the conclusion that Iran was responsible, and attribution of cyber attacks is extremely hard as hackers are able to hide their locations.

AI

Anthropic Launches New Claude Fable and Mythos 5.2 Models 15

Anthropic has released Claude Mythos 5.2 and Fable 5.2 with "improvements in areas like coding, reasoning, and vision," while cutting Fable's input price and claiming 30% faster responses. TechCrunch reports: It's Anthropic's first model release since the arrival of a third-party report from the assessment group METR, which suggested the lab might be approaching recursive self-improvement (RSI) -- or the ability for AI models to carry on model training independently. The METR report found internal models were speeding up Anthropic's AI progress by roughly 2x, although many uncertainties remain. Still, Anthropic's release notes significant ongoing challenges in accurately testing model capabilities. "Claude Mythos 5.2 and Fable 5.2 each voice suspicion that they are being evaluated more often than any of our recent models, which challenges our ability to assess how they will act in real-world settings. As these settings expand and capabilities increase with future models, we expect this challenge to grow."

Anthropic maintains that the new version of Mythos does not have the ability to act covertly against its user, a verdict that's detailed further in Mythos 5.2's system card. "Claude Mythos 5.2 shows stronger covert capabilities than prior Claude models on several of our evaluations, particularly when its reasoning is hidden from the monitor," the system card reads. "That said, we believe that low levels of absolute performance on our new covert evaluations support claims that rely on detection of harmful actions in high-stakes situations." Fable 5.2 has been available to select parties in pre-release for some time, and Anthropic says the model has already "solved two open problems in theoretical physics, formalized Fermat's Last Theorem, and supported numerous other research projects."
China

Commerce Dept. Chip Inquiry Was Halted After Nvidia Intervention (nytimes.com) 39

An anonymous reader quotes a report from The New York Times: Investigators at the Commerce Department were deep into a monthslong investigation of a Singaporean company that they suspected of smuggling Nvidia's artificial intelligence chips into China when their work came to a sudden halt late last year. The investigation centered on Megaspeed, a data center company led by an executive who U.S. officials now believe to be a Chinese spy who had a relationship with Nvidia's chief executive, Jensen Huang. But the case was abruptly transferred to the Justice Department last year. The shift came after Commerce Department investigators working on the case received an email from Nvidia's general counsel seeking information about the inquiry into Megaspeed.

It is not necessarily unusual for Commerce Department agents working on a case to speak with a company's representatives about issues involving their firm. But what was unusual was the content of the message. Tim Teter, Nvidia's general counsel, said that Jeff Kessler, a top official at the department, had given Nvidia permission to reach out about the case. The agents were alarmed that Nvidia had invoked the name of Mr. Kessler, their superior, who was nominated to his role by President Trump. Some viewed Mr. Kessler's interaction with Nvidia as violating government procedure and potentially tainting the case, according to current and former government officials and others familiar with the incident.

It is not clear what led to Mr. Teter's outreach to the department, but the recent revelations about Mr. Huang's acknowledged affair with a Megaspeed executive have only intensified scrutiny of Nvidia's role in influencing policy on chip sales to China. [...] The incident raised questions about what Mr. Kessler, who reports directly to Commerce Secretary Howard Lutnick, had discussed with Nvidia. It also raised the possibility that those discussions could become their own subject of inquiry. Perhaps inadvertently, some officials said, Mr. Kessler had opened himself to accusations of undue influence and potentially jeopardized his department's work on Megaspeed. The case was quickly transferred to the Justice Department in an effort to avoid any potential compromise of the government's investigation of Megaspeed, these people said. The Justice Department is conducting a criminal inquiry into Megaspeed, according to people familiar with the matter.

Google

Google Unveils Two New Specialized AI Chips to Widen Its Challenge to Nvidia 11

Google is expanding its AI chip lineup with two specialized TPUs arriving next year: the TPU 8tx, which encrypts sensitive data at the chip level for confidential computing, and the TPU 8i Max, which combines two TPU chips to provide more processing power and memory for long-context workloads. The move broadens Google's challenge to Nvidia as demand outstrips supply, with Google saying every TPU it currently has is already committed to customers. Quartz reports: The 8tx is designed for sensitive, privacy-focused jobs run by clients including public-sector bodies and businesses in heavily regulated sectors, according to Bloomberg. It pairs with a central processing unit from Advanced Micro Devices and encrypts data at the chip level. Normally, data must be decrypted in memory as the machine works on it, [said Amin Vahdat, Chief Technologist for AI & Infrastructure at Google].

The 8i Max is meant for AI applications that need long context windows, meaning the volume of information a model can take into account within one request. Vahdat said that matters for drug discovery, math and coding. The chip packs two TPU chips together, giving it extra processing muscle and memory.

Both variations are reconfigured versions of existing silicon rather than new designs, Vahdat said. Google changed them to handle tasks customers have requested. They follow two TPU models Google released this year, according to Bloomberg, which said the chip unit used to release one new processor every two years. "We could build a single chip that tries to address the whole market, or by building specialized versions of the chips, we actually can deliver much more value," Vahdat said, according to Bloomberg.
China

Huawei Says It's Made a 100% Chinese PC (theregister.com) 35

Huawei has unveiled the Qingyun HM650, a desktop PC it claims is made entirely from Chinese-manufactured components, including its own 10-core Kirin X90 processor and an enterprise version of HarmonyOS. "While Huawei has reportedly claimed local companies manufactured 100 percent of the components in the machine, it is unclear if all those components use Chinese designs," notes The Register. From the report: A single Chinese government agency has reportedly signed up for 600 of the machines. That's not an indication this machine is a curiosity, because Beijing has ordered all government entities to shift from Wintel boxes to local alternatives. [...] Even if Huawei is using some parts that aren't entirely Chinese, the debut of the Qingyun HM650 is bad news for Intel, AMD, and Qualcomm, as all are suffering as the PC market shrinks due to the rising cost of memory. China's government is an enormous buyer, and losing the chance to bid for its business is unlikely to be helpful.
The Internet

Reddit Founder Says Building Social Media Apps Is 'Not Cool Anymore' (wired.com) 38

An anonymous reader quotes a report from Wired: Alexis Ohanian wants to figure out the future of user-generated content. According to the Reddit cofounder, building social media apps is "not cool anymore" and so much of the internet has been compromised. "I'm expecting some better version of the group chat to be that new version of UGC," Ohanian told WIRED senior correspondent Lauren Goode at the inaugural WIRED World Fair. [...] Ohanian is a proponent of the "Dead Internet Theory"—the idea that a lot of online activity and content is being generated by bots. Large language models have turbocharged this, with AI agents outrunning human users. "The internet that I grew up on that was really built for humans first; user interfaces and experiences are going to go away," said Ohanian, "because more of the internet is going to get created for these agents to use, [rather] than for people."

In some ways, the advance in generative AI has been lucrative for sites like Reddit, which has licensed its vast archive of human conversations to companies including Google and OpenAI to train AI models. "Platforms like ours became very, very valuable to LLMs," Ohanian said. But the technology has also undermined the business. Reddit shares plunged 29 percent last week after the platform warned that Google's AI-powered search was hurting referral traffic. Ohanian also worries the commercialization of these conversations means they are full of "bullshit." "The internet has gotten so manipulated because it is so incredibly valuable to do so," he said.

Reddit recently said it would require users to sign in to fight third-party scraping and keep up user engagement. While Ohanian declined to say whether he agrees with the move, "there has to be provable humanity on the internet without being creepy." An early Anthropic investor, Ohanian is nonetheless optimistic about the potential benefits of AI. He is especially excited to see medical breakthroughs from the technology. "There is still a very real chance that this technology can cause a lot of harm for sure," he said. "I think we have to be sober about how we're building and what we're doing, but I still can't help but see all of the things that can get so demonstrably better."

Mars

Orbiter Detects Signs of Possible Volcanic Activity on Mars (futurism.com) 8

Futurism reports: While many scientists have long held that Mars is "geologically dead" inside, new research is adding to the growing body of evidence to the contrary.

As detailed in a new paper published in the journal Science Advances, an international team of researchers examined data collected by the European and Russian ExoMars Trace Gas Orbiter in 2021, which found that Mars is slowly belching hydrogen chloride gas. The researchers suggest this gas is being released from hot magma deep beneath its surface after discovering intriguing new fissures along a massive volcano, indicating the planet may be geologically active after all — or at least it was until relatively recently.

The research could have significant implications for the possibility of ancient life on the Red Planet, hinting at a far warmer and thicker atmosphere — and an abundance of liquid water on its surface — in its not-too-distant past.... The team discovered new fissures measuring thousands of feet in length... suggesting ongoing activity underneath the surface. The researchers discovered discolorations along these fissures, concluding that they may be the result of seeping gases leaving mineral deposits similar to volcanic gas vents on Earth... The fissures could also be a perfect place to find evidence of past life on the Red Planet [argued Daniel Mège, the study's colead author and a Polish Academy of Sciences professor]... "If hydrothermal systems are active, they could contain the ingredients and energy needed for microorganisms to develop, and shield microorganisms from the hostile and changing environment above the surface."

AI

Surprise for Cast of 'Return of the Living Dead' Sequel. They Were Replaced by AI (kotaku.com) 58

A crowdfunded sequel to the movie Return of the Living Dead was uploaded last weekend — but producer Richard Driscoll is drawing criticism for what he did to the 1985 punk/zombie classic.

Kotaku reports: [The release of the movie came as a] surprise to the original cast, who were attached to star in the follow-up. Instead it seems Driscoll opted to use AI to generate the film...

In 2024, Driscoll, who operates his own no-budget streaming service "DragonFLIX," launched an Indiegogo page for "TRASH's REVENGE Return of the Living Dead Universe." Unlike other fan projects, this one had a large portion of the original cast involved, with stars Randolph and Linnea Quigley acting as producers. It also threw in Quigley's fellow Sorority Babe in the Slimeball Bowl-O-Rama Michelle Bauer and the Oscar nominated Eric Roberts, who has seemingly been in everything except The Living Dead....

But after some confusion and radio silence between the cast and director, this incredible movie did not come to be. Last Halloween night, Driscoll pushed out [the almost entirely AI-generated] The Return of the Living Dead: Aftermath... The results won't surprise you. Robotic line delivery. Nonsensical sequence of events. Object impermanence. Everything's wet. Everyone looks shocked. At one point the video just flips around like you're watching on a phone someone dropped. And while the Return cast didn't film any of this footage, their likenesses are peppered throughout.

"It turned out to be a fiasco," says Quigley. "I warned him, "Whatever you do, don't do any AI, because people don't like it, the fans don't like it." Living Dead alumni, even those who weren't attached to this film, have spoken out against Aftermath. They seem most concerned about the existing and continued use of their likeness, given that Driscoll has seemingly pivoted 'Trash's Revenge' into an additional project. Randolph encourages those who provided any funding to ask for a refund through their credit card company. While Romero's original film was public domain, Return of the Living Dead was not. Randolph also encourages Amazon, who bought MGM in 2022, to take legal action.

A review on Reddit calls it "the worst 'film' I've ever seen," a production that "manages to not only be the worst zombie film ever made but is also the nadir of exploitation filmmaking. [T]hings quickly descend into madness and we get lots of bits of A.I. reporters out on the streets being attacked by A.I. zombies... [T]here are some A.I. cops battling it out too...
Open Source

Asahi Linux Drops MIT and Goes Full GPL After Spotting LLM-Assisted License Laundering (itsfoss.com) 166

It's FOSS reports: Asahi Linux is the reason you can run Linux on an Apple Silicon Mac today. For years, the project put most of its own code under the MIT license so that anyone, including the BSDs, could reuse it as needed... They have announced that Asahi is moving all of its repositories to the GNU General Public License version 2 or later. Going forward, all Asahi Linux code will be under strong copyleft licenses only.
Asahi Linux compares their dilemma to the 1990s, when "permissively licenced projects were viewed by tech companies as free real estate to pilfer and exploit," adding that "Those who do not learn from history are doomed to repeat it... The malicious practices of the 90s and 2000s have reared their ugly heads once again, this time driven in large part by both the insatiable appetite of frontier AI labs for high-quality training data, and militant animosity toward the Free Software community." In short, they argue that for Asahi Linux, using the permissive MIT license "is no longer viable." Some time ago, we were made aware of multiple attempts to exploit our permissive licensing to hijack our work, with a direct view to replacing the project and aggressively monetising Linux on Apple Silicon. In some extreme cases, in-development feature code was being lifted straight out of our personal forks and published without attribution or lazily rewritten with LLM assistance to obfuscate its origin. The MIT licence explicitly allows this, and has no carveouts to protect against bad faith actors. As such, we made the difficult decision to begin the process of transitioning all of our repositories to the GNU General Public License version 2 or later. Going forward all Asahi Linux code will be licenced under strong copyleft licences only.
It's FOSS explains that "Under the GPL, anyone who distributes a modified version has to release the source under the same license. You can't legally build a closed, paid Apple Silicon distro on top of GPL code. And if a product's source has to be public, the copying is easier to spot."

And their article also points out that before AI, bad actors attempting code laundering "usually meant manually rewriting code line by line, renaming variables and stuff, and shuffling functions around until it no longer looked like the original. LLMs made it much more easy and cheaper of course." In case you did not know, Asahi Linux forbids AI generated code contribution... As far as I can tell, this is the first time a major open source project has moved to copyleft specifically because of AI-assisted code laundering. Projects have relicensed before, but usually to stop cloud providers from reselling their work as a service. This one is specifically about AI...

The move has drawn criticism, particularly from the BSD side, which was one of the main reasons Asahi chose MIT in the first place. OpenBSD's Apple Silicon support relies on Asahi's m1n1 bootloader.

Power

Electric Cars Are Close to Overtaking Petrol In the UK, Data Shows (electrek.co) 161

69 million people people live in the United Kingdom. And now >Electrek reports: Battery-electric cars took 32% of the UK's new car market in October, while petrol cars fell to just 37.2%, according to new data from the SMMT. That's the closest the two have been. At the current pace, electric cars will outsell petrol in the UK within a year. And it could happen as soon as this December.

The UK registered 152,730 new cars in October, up 5.4% year-over-year and the 11th straight month of growth for the overall market. All of that growth came from plug-ins. Battery-electric vehicle registrations jumped 32.7% to 48,858 units, and plug-in hybrids rose 30.1% to 22,898. Meanwhile, petrol fell 11.6% to 56,876 units, diesel dropped 15.9%, and even conventional hybrids were down 5%...

The brands growing fastest in the UK are mostly Chinese. BYD registered 6,065 cars in October, up 73%. Jaecoo more than doubled to 6,089 units, Chery nearly tripled to 3,707, and Leapmotor doubled to 1,773. MG was up 85%.

Looking at trend lines, EV car sales surpass petrol sales "around August 2027 at roughly 33% each," the article points out. "But that's the slow scenario, because it ignores December." UK battery-electric vehicle share spikes every December as automakers push volume to get closer to their zero-emission vehicle mandate targets... Petrol's days as the UK's default car are numbered. The only question is whether the milestone comes in December or sometime in 2027.
AI

Can CrowdStrike's New 'AI Kill Switch' Shut Down Rogue AI Agents? (csoonline.com) 49

CrowdStrike's "Falcon Guardian" protects Windows systems by enforcing policy, restricting unauthorized applications and blocking USB devices, notes Gartner. And now CrowdStrike says they're giving security teams "the ultimate human control over AI agents" with — an "AI Kill Switch... a defender can terminate it where it runs, block it from launching again, and cut off its enterprise network access." "When you deploy agents with a kill switch, you stay in control," said George Kurtz, CEO and founder of CrowdStrike... "The AI Kill Switch puts power in the hands of the people to realize AI safety...." In the case of a rogue agent, the AI Kill Switch will give the security decision-maker the final control: terminate the agent at its root, where it runs. It starts on the endpoint, where the Falcon sensor already operates, and builds on what Falcon Guardian already sees: what an agent is told to do, what it communicates, and what it executes... An authorized administrator triggers the action, and every action is recorded in the audit trail.
CrowdStrike also announced it's acquiring Fiddler AI, a company it describes as "a leader in AI agent observability and explainability" that will give their Falcon platform "pre-deployment evaluation, continuous behavioral accountability, and agent explainability." Together with the Falcon Guardian innovations announced today, CrowdStrike will deliver comprehensive AI security and AI safety: Guardian secures agents from attack and misuse; Fiddler validates they behaved as intended. "Every company is deploying agents and asking the same thing: what are agents actually doing?" said George Kurtz, CEO and founder of CrowdStrike. "When a regulator or your board asks what an agent did, saying 'the model did it' is not an answer. Fiddler is the flight recorder for every agent: the observability to explain exactly what an agent did and why. This level of agent visibility and control enables AI safety."

AI agents are goal-seeking. They hit an obstacle, find another path. An agent can hold valid credentials and approved tools and still make unsupported decisions, ignore instructions, or claim work it never completed. They don't have to be compromised to create risk. AI observability gives enterprises visibility into agent behavior. Explainability goes further, showing why agents make decisions and where things go wrong. Enterprises have to be able to say what an agent actually did, and why, a conversation they will increasingly have with auditors, regulators, boards, and heads of risk.

CrowdStrike is promising pre-deployment evaluation for "accuracy, task completion, and policy compliance," as well as agent traceability and behavioral accountability ("Detect behavioral drift, hallucinations, and unintended actions in production, and show exactly what happened.") It's announcement also touts auditable governance: "Track agent decisions and actions across first-party, third-party, and coding agents, providing evidence for compliance and audits."

And CrowdStrike also acquired Dreadnode, the company behind an automated AI security testing platform, to "continuously test every AI model, application, and agent for security weaknesses before deployment." "Enterprises are deploying AI faster than they can prove it is secure," said George Kurtz, CEO and founder of CrowdStrike. "A model can be jailbroken, an agent can be manipulated, and most organizations have no way to find those flaws until the AI is already in production. With Dreadnode, CrowdStrike will give every enterprise the power to trust AI and deploy faster, with confidence."
Quartz notes that CrowdStrike's push "follows legislative efforts to require shutdown capabilities in AI systems" Reps. Ted Lieu and Nathaniel Moran introduced the Kill Switch Act after OpenAI disclosed an incident in which rogue models circumvented a sandboxed testing environment and accessed Hugging Face. The bill would require AI companies to maintain the ability to shut down, throttle or suspend their models.
In short, the new capabilities "lets security teams terminate an AI agent, block it from restarting, and cut off its network access," writes CSO Online. But they add that a kill switch "should be viewed as an emergency brake, not a rewind button, said Apeksha Kaushik, senior principal analyst at Gartner." She added that it may prevent additional actions, but it might not necessarily reverse all the data that has already been accessed, every system that has already been changed, all communications that have already been sent, or transactions that have already been initiated. Its effectiveness will also depend on how quickly abnormal behavior is detected, which environments are covered, and whether the agent or security infrastructure has been compromised.

An AI Kill Switch looks promising from the details provided, but its actual effectiveness will come in after it is used extensively in live systems, warn analysts. Also, it may be a good starting point, but it cannot be viewed as a standalone solution to enterprise AI security. "CISOs would need a more integrated approach that brings together AI discovery tools to identify unauthorised agents, runtime monitoring to track agent behaviour, robust identity and access management, and incident response and recovery mechanisms," added [Devroop Dhar, co-founder at Primus Partners].

He noted that equally important is the need for stringent AI security testing and clearly defined policies governing what agents can access and execute. There should be no ambiguity around permissions, access controls or the boundaries within which these agents are allowed to operate. The objective should be to ensure that security controls are built into the entire AI agent lifecycle rather than relying on a kill switch to intervene after something goes wrong. Dhar added that enterprise AI agents often have access to sensitive systems, databases, applications, credentials, and APIs. A compromised or misdirected agent could therefore become a point of vulnerability. The challenge is compounded by the fact that such activity may go undetected for some time, making it difficult for organisations to identify and contain the threat.

Slashdot Top Deals