The latest technology articles from TheMurrow. In-depth analysis and reporting on the topics that matter.
MCP makes connecting agents to tools feel effortless—so effortless that trust decisions get automated, outsourced, or skipped. As connector ecosystems explode, compromise scales with distribution.
Microsoft is shipping agent governance and agent acceleration on the same day. The bigger risk isn’t hallucinations—it’s the new “prompt traffic” layer where context, tool outputs, and clickable actions can turn one approval into a company-wide spill.
Google’s unusually explicit 2029 post‑quantum migration target reframes quantum risk as a present-day confidentiality problem—because attackers can harvest encrypted data now and decrypt later. The real danger isn’t a dramatic 2029 break; it’s the quiet breach that becomes readable years after you thought it was contained.
Google didn’t announce a countdown—it narrowed a resource estimate. The bigger risk isn’t secrecy lost, but signature forgery that unravels web identity: certs, updates, attestations.
E2EE locks the message body, not the envelope. Even with encrypted RCS, routing metadata can reveal relationships, routines, and “shadow chat” timelines—at scale.
When HTTPS certificates expire, browsers don’t “degrade”—they block. Starting March 15, 2026, the new 200‑day cap turns sloppy renewals into recurring, client-side “outages.”
As soon as an agent can call tools—APIs, plugins, browser controls—attackers can hide instructions in “harmless” tool metadata. The transcript will look competent, right up until money moves.
Attackers don’t need quantum computers yet—they just need your encrypted data to stay valuable long enough. The real bottleneck is discovering where RSA/ECC hide across apps, PKI, devices, and vendors before your ecosystem’s 2026–2028 clock forces change.
Passkeys shut down classic credential phishing—but attackers are cashing out by stealing sessions and routing around weak fallbacks. The real debate is synced vs device-bound keys, and whether “rollout” actually means enforcement.
Post‑quantum “upgrades” often change the TLS handshake, not the tunnel’s bulk encryption. That shift can make your ClientHello rarer—and your VPN traffic easier to recognize without decryption.
The EU AI Act has been in force since Aug. 1, 2024—and compliance arrives in waves. For GPAI vendors, obligations begin Aug. 2, 2025, and Aug. 2, 2026 is when enforcement (and fines) turns unmistakably real.
The breach risk isn’t “AI wrote bad code”—it’s that AI makes unreviewed change feel safe, especially when it quietly rewires your dependency tree under deadline pressure.
The DoD’s rare “supply chain risk” label is forcing contractors to certify they aren’t using Claude—turning an AI policy dispute into an ecosystem-wide compliance problem. At stake: whether private AI guardrails can constrain military use, or whether procurement power will override them.
NIST’s post-quantum standards made the locks official. But most real deployments still leave one brittle seam—often classical authentication or an un-upgraded last hop—where the promise collapses.
Founders fixate on Aug. 2, 2026, because that’s when enforcement gets loud. But the compliance paper trail for GPAI models started Aug. 2, 2025—made auditable by a Commission template published July 24, 2025.
The standards are real, the cryptography is elegant—and yet labels vanish in upload pipelines, reposts, and UI design choices. In 2026, “AI labeling” fails less at creation than in the supply chain.
Nvidia’s CEO just signaled prolonged scarcity—but the constraint isn’t simply “chip shortages.” In 2026, memory (GDDR vs HBM) and advanced packaging can decide whether GPUs ship at all.
When AI can see, hear, move, unlock doors, or initiate payments, the stakes stop being abstract. Here’s how to choose—and trust—Physical AI in everyday life.
Baidu is moving its strategically sensitive AI chip arm toward a Hong Kong listing—seeking capital and a market benchmark without giving up control.
Explore how Artificial Intelligence is reshaping the essence of journalism, enhancing efficiency, and presenting new ethical challenges.