The Register

Partner Content ZTE Corporation (0763.HK / 000063.SZ), a globally leading provider of integrated information and communication technology solutions, today shared its latest perspectives on broadband monetization at the FTTH Conference 2026, calling on operators to rethink how network investments translate into sustainable business growth. During the Voice of the Industry session "From Network Innovation to Measurable Business Value", ZTE emphasized that the industry is reaching a turning point.

A design flaw – or expected behavior based on a bad design choice, depending on who is telling the story – baked into Anthropic's official Model Context Protocol (MCP) puts as many as 200,000 servers at risk of complete takeover, according to security researchers.

North Korean criminals set on stealing Apple users' credentials and cryptocurrency are using a combination of social engineering and a fake Zoom software update to trick people into manually running malware on their own computers, according to Microsoft. Redmond's threat intelligence team tracks the Pyongyang-backed crew as Sapphire Sleet (aka APT38).

Partner Content GPU workloads are no longer the exclusive territory of research labs and hyperscalers. Engineering teams, data science groups, healthcare organizations, and financial services businesses are all deploying GPU-accelerated infrastructure for AI inference, simulation, visualization, and virtual desktops. For many IT teams, this is new ground. The hardware is familiar, because NVIDIA GPUs fit in standard server slots. But the software isn't. GPU virtualization has three distinct models.

While Larry was producing most of the content for the "Request/Reponse" chapter for the next edition of our book, I took the lead on writing a section on QUIC (Quick UDP Internet Connections), since I have closely followed its development. Our expectation is that the role of QUIC will be about as important as that of TCP in the coming years, which means it warrants more substantial coverage than we provided in the last edition.

Watch out for more Fortinet vulns! Two critical bugs in Fortinet's sandbox could allow unauthenticated attackers to bypass authentication or execute unauthorized code on vulnerable systems. Luckily, the security vendor has issued fixes - so patch now - and so far, there are no reports of active exploitation. But considering that the vulnerabilities are now public, both can be exploited without any authentication, and that attackers do love abusing Fortinet products, that is likely to change soon.

Exclusive Security researchers hijacked three popular AI agents that integrate with GitHub Actions by using a new type of prompt injection attack to steal API keys and access tokens, and the vendors who run agents didn’t disclose the problem. The researchers targeted Anthropic's Claude Code Security Review, Google's Gemini CLI Action, and Microsoft's GitHub Copilot, then disclosed the flaws and received bug bounties from all three.

Opinion Could the recent death of Meta's unloved and unused Horizon Worlds signal the demise of the wider metaverse? As someone who has a bit of prior art in the field – building networked consumer VR systems for Sega before Stephenson set pen to paper – I can tell you what Neal got right, what he got wrong, and how he's missed the point he himself made. Stephenson says no one will wear VR headgear. That's always been true, because crossing the boundary between digital and biology is never easy.

Sponsored Feature Organizations in Asia Pacific are achieving new levels of cloud maturity within their core infrastructure in tandem with growing use of AI and GenAI. However, even as cloud computing forms a foundation upon which enterprises build operating models and AI-driven services, they have to confront cybersecurity risks as well as data residency and sovereignty regulatory compliance.

Attackers exploited a spoofing vulnerability in Microsoft SharePoint Server before Redmond issued a fix as part of April's mega Patch Tuesday. And the bug under active exploitation, CVE-2026-32201, is due to improper input validation in SharePoint that allows an unauthorized attacker to perform spoofing over a network. This could allow someone to view sensitive information and make changes to disclosed information.