Business
BBC Reporter Exposed to Cyber Attack Due to Vulnerabilities in AI Coding Tool
The demand for vibe-coding tools, which enable individuals without coding experience to develop applications using artificial intelligence, is experiencing rapid growth.
A significant and unresolved cyber-security vulnerability has been identified in a popular AI coding platform, according to information provided to the BBC.

The platform, known as Orchids, utilizes a "vibe-coding" approach, enabling individuals without technical expertise to create apps and games by inputting text prompts into a chatbot.
In recent months, such platforms have gained widespread popularity, often being touted as an early example of how AI can rapidly and affordably perform various professional tasks.
However, experts warn that the ease with which Orchids can be compromised highlights the risks associated with granting AI bots extensive access to computers in exchange for autonomous task execution.
Despite repeated requests for comment, the company has not responded to the BBC's inquiries.
Orchids claims to have a user base of one million and boasts partnerships with top companies, including Google, Uber, and Amazon.
According to ratings from App Bench and other analysts, Orchids is considered the top program for certain aspects of vibe coding.
Cyber-security researcher Etizaz Mohsin demonstrated the platform's security flaws to the BBC.
To test the platform's security, a spare laptop was used to download the Orchids desktop app and initiate a vibe-coding project.
A request was made to the Orchids AI assistant to generate code for a computer game based on the BBC News website.

The AI assistant automatically compiled code on the screen, which, without prior experience, was unintelligible.
By exploiting a specific cyber-security weakness, Mohsin was able to access the project and view and edit the code.
Mohsin then added a line of code to the project, which went unnoticed.
This action apparently allowed him to gain access to the computer, as evidenced by the subsequent appearance of a "Joe is hacked" notepad file on the desktop and a changed wallpaper featuring an AI hacker image.
The potential implications of this hack on the platform's numerous projects are significant.
A malicious hacker could have easily installed a virus on the machine without any action required from the victim.
Sensitive personal or financial data could have been compromised.
An attacker could have accessed internet history or even used the computer's cameras and microphones for surveillance.
Most cyber-attacks involve tricking victims into downloading malicious software or divulging login credentials.
This particular attack was carried out without any involvement from the victim, known as a zero-click attack.
Mohsin stated that the vibe-coding revolution has introduced a new class of security vulnerabilities that did not previously exist, highlighting the risks associated with relying on AI to handle tasks.
The concept of AI handling tasks autonomously comes with significant risks, according to Mohsin.
Mohsin, a 32-year-old from Pakistan currently residing in the UK, has a history of discovering dangerous software flaws, including work on the Pegasus spyware.

Mohsin discovered the flaw in December 2025 while experimenting with vibe-coding and has since attempted to contact Orchids through various channels, sending around a dozen messages.
The Orchids team responded to Mohsin this week, stating that they may have missed his warnings due to being overwhelmed with incoming messages.
According to the company's LinkedIn page, Orchids is a San Francisco-based company founded in 2025 with fewer than 10 employees.
Mohsin has only identified flaws in Orchids and not in other vibe-coding platforms, such as Claude Code, Cursor, Windsurf, and Lovable.
Nonetheless, experts caution that this discovery should serve as a warning.
Professor Kevin Curran of Ulster University's cybersecurity department notes that the main security implications of vibe-coding are the potential for code to fail under attack due to a lack of discipline, documentation, and review.
Agentic AI tools, which perform complex tasks with minimal human input, are increasingly gaining attention.
A recent example is the Clawbot agent, also known as Moltbot or Open Claw, which can execute tasks on a user's device with little human intervention.
The free AI agent has been downloaded by hundreds of thousands of people, granting it deep access to computers and potentially introducing numerous security risks.
Karolis Arbaciauskas, head of product at NordPass, advises caution when using such tools.
Arbaciauskas warns that while it may be intriguing to see what an AI agent can do without security measures, this level of access is also highly insecure.
He recommends running these tools on separate, dedicated machines and using disposable accounts for experimentation.
To stay informed about the latest tech stories and trends, sign up for the Tech Decoded newsletter, available outside the UK as well.
(Removed to maintain the same number of paragraphs)

Business
Artist Alleges AirAsia Used His Work Without Permission
A street artist from Penang has reported that one of his artworks has been replicated and featured on the design of an airplane.
A lawsuit has been filed by a Malaysian-based artist against AirAsia and its parent company, Capital A Berhad, alleging unauthorized use of the artist's designs on one of the airline's planes.

According to the lawsuit, Ernest Zacharevic, a Lithuanian-born artist residing in Penang, claims that his 2012 street mural, Kids on Bicycle, was reproduced and displayed on an AirAsia aircraft in late 2024 without his permission.
Zacharevic states that the use of his design was unauthorized, and no licensing agreement or consent was obtained, adding that the livery was removed after he publicly expressed concerns about the matter.
The BBC has reached out to AirAsia for a statement regarding the allegations.
In an interview with the BBC on Thursday, Zacharevic recalled that he first became aware of the alleged copyright infringement in October 2024, when he discovered that an AirAsia plane was featuring a livery resembling his artwork.
With over a decade of experience in Malaysia, Zacharevic is known for his roadside murals in Penang, which have become a staple of the local art scene.
One of Zacharevic's notable works is the 2012 street mural Kids on Bicycle, created for a local festival, which features two children on a bicycle integrated into the mural, located in George Town's heritage district.
The mural has become a popular tourist attraction, with many visitors taking photos in front of the iconic artwork.
Zacharevic alleges that his work was reproduced on an AirAsia plane without his knowledge or consent, and he personally witnessed the plane in operation at an airport.
Recalling the incident, Zacharevic expressed his discomfort with the situation, which occurred in 2024.
He took to social media to address the issue, posting a photo of the plane and tagging the airline, suggesting that they needed to discuss the use of his artwork.

Since then, Zacharevic has engaged in discussions with the company, but they have been unable to come to a mutually agreeable resolution.
This is not the first instance of Zacharevic's work being used in connection with AirAsia, as he claims the airline has also used his artwork on a delivery bag for its food services arm.
Court documents reveal that Zacharevic had previously discussed a potential collaboration with AirAsia in 2017, where he would create art for the airline's jets and a mural in one of their offices.
According to the documents, Zacharevic had informed the airline of his work and business rates during these discussions.
The lawsuit asserts that despite being aware of Zacharevic's work and rates, the airline proceeded to reproduce and publicly display one of his notable works, thereby infringing on his copyright and moral rights.
As the largest low-cost carrier in Asia, AirAsia operates over 200 jets to more than 100 destinations, and has recently announced plans to resume flights from Kuala Lumpur to London via Bahrain.
Zacharevic has stated that he will leave it to the court to determine any potential compensation he may be entitled to.
The artist emphasized that he does not consider the use of his artwork to be a mere reference to cultural or geographical associations, but rather a distinct artistic creation.
Zacharevic stressed that his artwork is the result of years of professional training, skill, and labor, and should be recognized as such.
Business
US Businesses and Consumers Bear Brunt of Trump Tariff Costs, According to NY Fed
In 2022, the United States saw a significant increase in collective import tariff rates, with rates rising by more than 300 percent for a range of imported goods.
The modification of tariff agreements by President Donald Trump with several countries had a consistent outcome: increased costs for US-based companies and consumers.

According to a study released on Thursday by the Federal Reserve Bank of New York, the average tariff rate on imported goods increased significantly, rising from 2.6% at the beginning of the year to 13% in 2025.
The New York Fed's research revealed that US companies absorbed approximately 90% of the costs associated with the higher tariffs imposed by Trump on goods from countries such as Mexico, China, Canada, and the European Union.
The Federal Reserve Bank of New York stated that "the majority of the economic burden of the high tariffs imposed in 2025 continues to be borne by US firms and consumers."
When tariff rates changed and increased in the previous year, exporting countries did not adjust their prices to mitigate potential declines in US demand.
Instead of lowering prices, exporters maintained their existing prices and transferred the tariff costs to US importers, who subsequently increased the prices of these goods for consumers.
The response of exporters in 2025 was similar to their reaction in 2018, when Trump introduced certain tariffs during his first term, resulting in higher consumer prices with minimal other economic effects, as noted by the New York Fed at the time.
The New York Fed's findings on Thursday are consistent with the results of other recent analyses.
The Kiel Institute for the World Economy, a German research organization, reported last month that its research indicated "nearly complete pass-through of tariffs to US import prices."
By analyzing 25 million transactions, Kiel researchers discovered that the prices of goods from countries like Brazil and India did not decrease.
The Kiel report noted that "trade volumes declined" instead, indicating that exporters preferred to reduce the quantity of goods shipped to the US rather than lower their prices.
The National Bureau of Economic Research also found that the pass-through of tariffs to US import prices was "nearly 100%", meaning that the US bears the cost of the price increase, not the exporting countries.
Similarly, the Tax Foundation, a Washington DC-based think tank, found that the increased tariffs on goods in 2025 resulted in higher costs for American households.
The Tax Foundation considered tariffs as a new tax on consumers and estimated that the 2025 increases resulted in an average cost of $1,000 (£734.30) per household, with a projected cost of $1,300 in 2026.
The Tax Foundation reported that the "effective" tariff rate, which accounts for decreased consumer purchases due to higher prices, is now 9.9%, representing the highest average rate since 1946.
The Tax Foundation concluded that the economic benefits of tax cuts included in Trump's "Big Beautiful Bill" will be entirely offset by the impacts of the tariffs on households.
Business
Post-January Bookings Surge for Mid-Term Breaks Amid Weather-Weary Travelers
Travel agents attribute the current surge in demand to a combination of factors, including inclement weather and the political climate, which they believe is fostering a strong desire among people to get away.
A surge in February half-term holiday bookings has been reported by travel agents, with a 9% increase compared to the same period last year, partly attributed to the recent gloomy weather.

According to the Advantage Travel Partnerships, the combination of prolonged rainfall and the current political climate has created a strong desire among people to take a break, leading to a significant rise in bookings.
Manchester Airport is expecting its busiest February half-term on record, with nearly 50,000 passengers set to fly out on Friday, while Jet2 has also seen an increase in bookings, indicating a strong demand for travel during this period.
However, travellers heading to Europe are being cautioned about potential security delays upon arrival due to the ongoing implementation of the European Entry Exit System.
The increase in passenger numbers is putting pressure on the government to proceed with airport expansion plans, despite concerns from critics that this could contribute to higher carbon emissions.
The Met Office has found that the current level of global warming, caused by greenhouse gases, has made extremely wet winters more likely, as warmer air can hold more moisture.
Many parts of the UK have experienced their wettest January on record, and the rain has continued into February, leading to a rise in bookings for warmer destinations.
Jet2 has reported an increase in bookings for this February half-term, with many people opting to fly to southern Europe to escape the UK's poor weather.
Julia Lo Bue-Said, chief executive of the Advantage Travel Partnership, noted that higher prices have not deterred people from booking holidays, indicating a strong demand for travel.
The coincidence of Valentine's Day with the start of the half-term weekend has also contributed to the rise in travellers, with 1,000 people flying from Manchester to Paris on Valentine's Day alone.
The top destinations from Manchester Airport during half-term week include Dublin, Amsterdam, Paris, Dubai, and Tenerife.
Geneva, a popular destination during the winter ski season, has seen an increase in travellers, while Milan is experiencing a surge in bookings due to the Winter Olympics.
Approximately one in seven families with children plan to take a foreign holiday during the half-term period, according to travel association Abta, with city breaks, cruises, winter sun, and skiing being popular options.
The Port of Dover is expecting a peak of 4,000 cars on Saturday morning, with an increase of around 50 cars per hour compared to last year, and has implemented enhanced traffic management to ensure smooth processing.
The domestic tourism sector is also anticipating its first economic boost of the year during the half-term break.
A Visit Scotland spokesperson highlighted the benefits of tourism for rural communities, stating that visitors help support local jobs and economies.
The spokesperson added that tourism "shines a spotlight on Scotland as a year-round destination," supporting local businesses and communities.
Tourism Northern Ireland's Eimear Callaghan identified three key school holidays – February half-term, St Patrick's Day, and Easter – as prime targets for promoting short breaks to families.
UK passport holders travelling to Europe are being warned about potential delays caused by the continued rollout of the European Entry Exit System, the EU's new digital border system.
While the system aims to enhance security and streamline travel, UK travellers have reported long queues at passport control in destinations such as Geneva and Tenerife.
Airport trade body ACI Europe has complained to the EU Commission about border control understaffing and technology issues, leading to "massive delays and inconvenience" for travellers.
Mark Tanzer, Abta chief executive, advised travellers to be aware of the changes and allow extra time for passport control checks to avoid delays.
The European Entry Exit System is being gradually introduced for travellers using Eurotunnel and the Port of Dover, currently applying to coach passengers and lorry drivers.
The strong growth in demand for travel is driving renewed calls for expansion at several UK airports.
Heathrow Airport reported its busiest January on record, with 6.5 million passengers, a 2% increase compared to the same month last year.
Heathrow chief executive Thomas Woldbye emphasized the need for expansion, stating that the airport may lose its position as Europe's largest airport in 2026 without increased capacity.
However, recent government decisions to support expansion at Heathrow, Gatwick, and Luton Airports have faced opposition due to concerns about their impact on local communities, climate, and the environment.
London Mayor Sir Sadiq Khan opposes Heathrow expansion, and campaigners have challenged the expansion of Gatwick Airport in the High Court, citing climate and noise concerns.
Climate scientist Dr Ella Gilbert noted that air travel is one of the most carbon-intensive forms of transport, contributing to rising temperatures and extreme weather events.
She explained that every degree of heating leads to a 7% increase in the atmosphere's water-holding capacity, resulting in wetter winters and more frequent extreme events.
Dr Gilbert warned that this pattern is expected to continue as the climate shifts, with the UK already experiencing wetter winters due to global warming.
-
News7 hours agoAustralian Politics Faces Questions Over Gender Equality Amid Sussan Ley’s Appointment
-
News4 hours agoFarage Says Reform to Replace Traditional Tory Party
-
News4 hours agoWrexham Pair Seek Win Against Former Team Ipswich
-
News9 hours agoLiberal Party Removes Australia’s First Female Leader
-
News7 hours agoUK Braces for Cold Snap with Snow and Ice Alerts Expected
-
News4 hours agoHusband’s alleged £600k theft for sex and antiques blamed on drug side effects
-
News2 days agoSunbed ads spreading harmful misinformation to young people
-
News15 hours agoUkraine Athletes Show Support for Barred Competitor with On-Field Gesture
