Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

Northrop Grumman to Produce the Next-Generation Precision Guidance Kit with Anti-Jamming Technology

Northrop Grumman Corporation (NYSE: NOC) will produce the PGK E5, a next-generation of the M1156 Precision Guidance Kit (PGK) featuring critical anti-jam capabilities, enabling U.S. Army and allied forces to maintain artillery operations in GPS degraded environments. The PGK E5 transforms existing 155 mm high-explosive projectiles into cost-effective, GPS-guided weapons, delivering precise, reliable indirect fires in current threat environments. Upgraded capabilities of the PGK E5 include advanced anti-jam technology to overcome emerging electronic threats, ensuring accuracy even in contested battlefield environments, while maintaining the same trusted reliability, form factor and user experience as the current PGK. In recent testing conducted in GPS-degraded environments, PGK E5 demonstrated accuracy exceeding both threshold and objective requirements. This precision reduces collateral damage and rounds per engagement, increasing warfighter survivability.

Dave Fine, vice president, armament systems, Northrop Grumman: “Today’s threat environment demands speed and innovation and we’re working closely with the U.S. Army to ensure the PGK E5 keeps maneuver forces ready to win in GPS degraded environments. With decades of proven performance and growing production, PGK continues to deliver reliable, mission-ready technology that warfighters can count on.”

As GPS jamming becomes more prevalent, Northrop Grumman has collaborated with the U.S. Army to innovate and deliver a solution for PGK, all without altering the fit, form or factor to integrate with 155mm artillery. Production is underway at Northrop Grumman’s Plymouth, Minnesota facility with first deliveries expected in early 2028. Compatible with existing 155 mm projectiles and fielded howitzers, the PGK E5 requires minimal retraining or system changes, enabling rapid fielding and deployment.

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Docker Sandboxes runs each AI coding agent in its own small virtual machine with the project directory shared in. The code that could escape is whatever runs inside that machine, such as a coding agent that has been turned against its user, or anything malicious the agent installs and runs.

Docker has not reported any exploitation. CISA’s added assessment on the CVE record lists exploitation as none, and the flaw is not in CISA’s Known Exploited Vulnerabilities catalog as of the catalog version released on September 16.

The flaw needs malicious code inside the sandbox, and protecting the host from what an agent runs is what the sandbox is for. The agent installs packages and runs commands with sudo inside the virtual machine, and Docker’s isolation documentation says the hypervisor boundary “is the isolation control, not in-VM privilege separation.”

New RatHat Android malware uses AI to automate device control

A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices.

Zimperium zLabs researchers analyzed the malware and believe it is linked to threat actors from China after finding it using LLM prompts written in Chinese.

The researchers say the malware is distributed through malvertising, SMS, and phishing sites promoting APK downloads from outside Google Play.

Brevo supply-chain attack injected ClickFix scripts on customer sites

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.

The customer relationship management and digital marketing company says the attackers used the API key to create a malicious Cloudflare Worker that modified content at the CDN edge for approximately five and a half hours on September 14.

The attack affected pages on brevo.com, sendinblue.com, login/account/my/onboarding.brevo.com, and sibforms.com. The Cloudflare worker also modified the Brevo forms script, Brevo Conversations widget, and the Brevo SDK loader scripts that customers embed on their websites.

Discovery of Novel Glycosidase-Derived Cell-Penetrating Peptides Encoded by Human Gut Commensals

Post et al. develop a screening method to identify cell-penetrating peptides (CPPs) encoded by human gut microorganisms. They thereby discovered a peptide which preferentially enters cancer cell lines over healthy cell lines.


Abstract. Intracellular delivery of therapeutics remains a major challenge for modern medicine. To enhance intracellular uptake, therapeutics can be delivered with carrier proteins possessing an inherent cell-penetrating activity. There is an increasing need for new cell-penetrating carriers with diverse biophysical properties and mechanisms of action to transport a wide range of therapeutic cargo. As many cell-penetrating proteins and peptides derive from natural proteins, we sought to mine a previously unexplored community, the human gut microbiome, for cell-penetrating sequences. Here, we performed a high-throughput functional metagenomic screen to identify cell-penetrating protein fragments from the human gut microbiome. We identified protein fragments encoded within glycosidase enzymes from members of the Bacteroidetes phylum that mediate internalization into human cell lines when displayed on the surface of nonpathogenic, noninvasive Escherichia coli. We investigate one fragment, dubbed Gh_112, that adheres to human fibronectin, activates multiple endocytic pathways, and specifically promotes uptake of E. coli into multiple cancerous epithelial cell lines rather than healthy epithelial tissue in vitro. Overall, this work demonstrates that the human gut microbiome is a source of cell-penetrating sequences and expands the known repertoire of cell-penetrating carrier systems.

CMU School of Computer Science

To bridge this gap, researchers have developed greCAPTCHA—a proctored testing system designed to measure an author’s “capacity to verify.” Instead of just checking who wrote the text, greCAPTCHA tests whether the authors possess the deep knowledge and critical reasoning required to understand and defend the core ideas in their manuscript.


School of Computer Science is at the forefront of all facets of computing research and education.

/* */