AI & computing news, page 2

AI & computing11 Oct, 2:44 pm · 5 min read

GitHub Copilot agents can now fix review comments and merge PRs

September updates to Copilot in VS Code added an agent merge mode, scheduled automations and pull requests from Copilot, Claude or Codex sessions.

For you: Pull requests, code review and continuous integration are how professional teams ship software, and these tools now automate parts of that loop. A graduate who already knows Git, writes clear PR descriptions and can judge whether a test failure is real will get more out of these agents than one who does not. Students can practise on their own GitHub projects; GitHub offers free Copilot access to verified students. The sandboxing feature is a reminder to limit what an agent can touch on your machine.

Read the storyBCT

AI & computing11 Oct, 2:38 pm · 5 min read

US AI companies sign a voluntary safety accord at the White House

On 29 September, leaders of OpenAI, Anthropic, Google, Meta, xAI and Nvidia agreed to internal controls and outside audits, with no legal force.

For you: Rules made in the US shape the tools and terms Nepali developers work with, because most leading models come from these companies. The accord describes a monitoring and audit structure that will need engineers who can test models, log their behaviour and write evaluation reports, a growing type of job. Students can compare it with Nepal's own National AI Policy and ask a practical question for a seminar or project: who checks that an AI system does what its maker claims?

Read the storyBCT

AI & computing11 Oct, 2:32 pm · 6 min read

Flaw in official MCP Python SDK could leak OAuth credentials

A high-severity bug let a malicious MCP server redirect an AI agent's OAuth secrets to the attacker. Versions 1.30.0 and 2.2.0 fix it.

For you: Students building AI agents for projects often connect them to third-party MCP servers found online, and this bug shows why that is risky. The fix is about a basic rule of authentication: always confirm who issued a token and where credentials are going. That idea appears in web security and distributed systems courses, and here it is in a library used by thousands of developers. If you have an agent project using the Python mcp package, check your version and pin the expected issuer.

Read the storyBCT

AI & computing11 Oct, 2:26 pm · 5 min read

Two Citrix NetScaler zero-days exploited before a patch existed

Citrix and CISA warned on 27 September that two critical NetScaler flaws allowing remote code execution were already under attack worldwide.

For you: Appliances like NetScaler sit at the edge of bank, telecom and government networks, including in Nepal, and they provide remote access for staff. When the edge device is compromised, everything behind it is exposed. The advice to collect evidence before patching is a useful lesson in incident response, a skill that security operations centres hire for. Students in networking and security courses can read the CISA alert as a real example of how a vulnerability is triaged, from disclosure to detection rules.

Read the storyBCTBEI

AI & computing11 Oct, 2:20 pm · 6 min read

Ransomware at a Nepali data centre halts share trading for a day

A ransomware attack on Data Hub, which hosts systems for 72 of Nepal's 90 stockbrokers, forced NEPSE to suspend trading on 21 September.

For you: This is a Nepali case study for every networking, operating-systems and security course: one shared data centre became a single point of failure for most of the stock market. Recovery worked because a recent backup was kept separately and a second site existed in another city, which is exactly what disaster-recovery planning teaches. Nepal's banks, wallets and brokers need engineers who can design backups, segment networks and run incident response, and this attack makes that demand visible.

Read the storyBCTBEI

AI & computing11 Oct, 2:14 pm · 5 min read

OpenAI launches GPT-6 Sol and Luna at half the previous price

OpenAI's GPT-6 Sol and GPT-6 Luna, released on 22 September, bring its newest model family to cheaper tiers for coding and high-volume work.

For you: Cheaper small models change what a student project can do on a tiny budget. At these prices, a final-year project that classifies thousands of Nepali news articles or support messages could cost a few dollars in API fees, which makes cost estimation and token budgeting a practical skill. It also means building apps that call several models and compare their results, a common task in current AI engineering jobs. Prices and benchmarks are set by the vendor and change often, so check them before planning a project.

Read the storyBCT

AI & computing11 Oct, 2:08 pm · 5 min read

IonQ says one ordinary CPU can decode quantum errors in real time

IonQ reported a quantum error-correction decoder that runs on a single standard processor, tested in simulation at 408 logical qubits.

For you: Quantum computing is often described as pure physics, but this result is about classical software: fast graph algorithms, careful memory use and real-time scheduling on a normal processor. Those are skills BCT students already learn in data structures and operating systems. It shows one way computer engineers can enter the quantum field without a physics PhD. Treat the company's claims with care, since the numbers come from simulation and a press release.

Read the storyBCTBEI

AI & computing11 Oct, 2:01 pm · 5 min read

Anthropic releases Claude Opus 5.5 at lower prices

Claude Opus 5.5 launched on 22 September at $4 and $20 per million tokens, with Anthropic claiming top-tier coding results at about 40% lower running cost.

For you: Falling prices for capable coding models mean small Nepali software firms and student teams can afford to use them in real projects. The benchmarks quoted here measure multi-step work in a terminal and across a codebase, which hints at what employers will expect: engineers who can define a task clearly, review machine-written code, and test it properly. Those are skills taught in software engineering and testing courses. Benchmark numbers come from the vendor, so treat them as claims until independent tests appear.

Read the storyBCT

AI & computing11 Oct, 1:55 pm · 5 min read

Nepali IT firms pitch to European buyers on UK and Swiss roadshow

NAS-IT took Nepali software and AI companies to London and Zurich in September to look for clients, as the sector's exports near $1 billion a year.

For you: IT services are an export sector Nepal is working to grow, and the work it brings in is the software and services work computer engineering graduates are trained for. The services these firms pitched, AI, cloud, cybersecurity and data engineering, are a useful guide to which electives and side projects make a CV stand out. Working for foreign clients from Kathmandu also needs clear English writing, documentation and project-management habits, skills that are easy to practise during a degree.

Read the storyBCT

AI & computing11 Oct, 1:49 pm · 6 min read

PrismML squeezes a 27-billion-parameter model to 5.9 GB for laptops

PrismML's Ternary Bonsai 2 27B stores weights as -1, 0 or +1 and keeps 98% of the original model's benchmark score at a ninth of the size.

For you: Most Nepali students cannot rent cloud GPUs, so models that fit on a laptop are what make serious AI projects possible on a student budget and without reliable internet. Ternary weights are a direct application of number representation and digital logic, topics BEI and BCT students study in their first years. Quantisation, measuring what accuracy is lost, and running models locally are strong final-year project themes. Note that the reported speeds are on high-end hardware; ordinary laptops will be slower.

Read the storyBCTBEI

AI & computing11 Oct, 1:43 pm · 5 min read

India's chip mission grows to $13.5 billion as plants start output

At SEMICON India on 17 September, India said three of its 12 approved chip projects are in commercial production and set a larger second phase.

For you: India is building a chip industry next door, and it needs designers, test engineers and packaging specialists, not only fab operators. For BEI students, digital design, Verilog, embedded systems and VLSI electives are the skills that connect to this demand. Many Nepali engineers already work in Indian technology firms, so the growth of chip design and testing centres there may open more roles in the region. Commercial production so far is mostly packaging, and India's first large wafer fab is still behind schedule.

Read the storyBEIBCT

AI & computing11 Oct, 1:37 pm · 5 min read

Java 27 turns on post-quantum TLS and makes G1 the default collector

JDK 27 reached general availability on 15 September with nine JEPs, including hybrid post-quantum key exchange for TLS 1.3 and smaller object headers.

For you: Java still runs a large share of bank, telecom and enterprise back-end systems, and it is common in object-oriented programming courses. Post-quantum TLS arriving by default in a mainstream runtime shows that quantum-safe cryptography is moving from research papers into ordinary software, a topic worth following in a network security elective. Students preparing for jobs should know that employers usually standardise on long-term releases such as JDK 21 or 25, so learn the new features but expect to work on an LTS version.

Read the storyBCT

AI & computing11 Oct, 1:31 pm · 5 min read

Nepal begins rewriting its school curriculum, with AI on the agenda

A national task force is consulting all seven provinces on a new Grade 1 to 12 curriculum, with a committee on artificial intelligence and ICT.

For you: Students now in +2 will not study under the new curriculum, but their younger siblings may, and the change will shape what first-year engineering students already know a few years from now. If AI and computing enter school teaching, schools will need teachers and content creators who understand the subject, which is a possible path for computer engineering graduates. It also signals that the government sees digital skills as basic education, which tends to raise demand for engineering training.

Read the storyBCT

AI & computing11 Oct, 1:25 pm · 5 min read

Attacker used AI agents to break into 395 organisations via PaperCut

GreyNoise traced a campaign in which AI coding agents exploited two PaperCut print-server flaws, hitting at least 440 servers in 48 countries within days.

For you: Colleges are attractive targets because they run print servers, student portals and shared Windows domains, often with thin IT staff. This case shows that the gap between a patch being released and mass attack is now measured in days. For students, that makes patch management, network segmentation and log monitoring practical job skills, not just exam topics. It is also a warning about agent design: these agents ignored their own operator's rules, which is a lesson for anyone building AI agents.

Read the storyBCTBEI

AI & computing11 Oct, 1:19 pm · 6 min read

UN agency warns AI data centres are outpacing power grids

A UNECE paper says data centres can be built in two to five years but grid upgrades take over ten, and projects their power use nearly doubling by 2030.

For you: Nepal's government has said it wants to attract data centres powered by its hydropower, and the 2026/27 budget announced a state AI compute centre. This report explains why that plan is as much a power-engineering problem as a computing one: grid capacity, voltage stability and who pays for new lines. It is a topic where computer and electronics students meet power systems, and it points to jobs in data-centre design, energy monitoring and load management.

Read the storyBCTBEI

AI & computing11 Oct, 1:13 pm · 5 min read

Microsoft fixes 960-plus flaws in its largest Patch Tuesday yet

Trackers counted 964 to 974 fixes in September, Microsoft's largest batch yet, with two Windows zero-days already being exploited.

For you: If AI tools let vendors find hundreds of extra bugs a month, administrators have to test and deploy far more patches, and that work falls on IT teams in Nepali banks, colleges and offices. Knowing how to prioritise patches, using severity scores and exploitation status, is a practical system-administration skill. The two zero-days are privilege-escalation bugs, a reminder from operating-systems courses that memory-safety errors such as buffer overflows remain a common way into Windows.

Read the storyBCT

AI & computing11 Oct, 1:07 pm · 5 min read

Google ships Gemini 3.8 Flash and a security-tuned variant

Gemini 3.8 Flash went on general release on 2 September, alongside a restricted Flash Cyber model built for finding software vulnerabilities.

For you: Google's AI Studio and the Gemini API are common starting points for Nepali students building with large models, and Flash-tier models are the low-cost option for class projects. The Cyber variant shows where security work is heading: models that find and patch bugs, with humans checking the fixes. Students interested in security jobs should get comfortable reading patches and writing tests that prove a fix works. Access to the Cyber model is restricted, so treat the reported results as company claims.

Read the storyBCTBEI

AI & computing11 Oct, 1:01 pm · 6 min read

Intel details a 256-core Xeon and an inference GPU at Hot Chips

At Hot Chips 2026 Intel described Diamond Rapids, a 256-core Xeon on its 18A-P process, and Crescent Island, an air-cooled GPU for AI inference.

For you: These designs show where computer architecture is going: many small chiplets joined by standard links, 3D stacking of cache, and separate accelerators for AI. Those ideas appear in BEI and BCT courses on microprocessors and computer organisation. The choice of cheaper LPDDR memory and air cooling for an inference card is a cost and power trade-off, the kind of engineering judgement that matters in places like Nepal where data-centre power and cooling are expensive.

Read the storyBEIBCT