News · Hacker News (security terms)
-
Hacker News (security terms)
One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux
-
Hacker News (security terms)
OpenCode has a security breach last that impacted 1.4% of console users
-
Hacker News (security terms)
Burger King Japan data breach exposes 11 million customer records
-
Hacker News (security terms)
BAE Systems cyberattack disrupts US federal court operations
-
Hacker News (security terms)
One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux
-
Hacker News (security terms)
X purges 13,000 accounts linked to suspected meddling ahead of US midterms
67 points · 105 comments
-
Hacker News (security terms)
US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
13 points · 3 comments
-
Hacker News (security terms)
Europe's reliance on US gas is as serious a risk as Russian gas used to be
15 points · 8 comments
-
Hacker News (security terms)
Claude Code Desktop Vulnerability: Preview Pane Data Exfiltration
16 points · 0 comments
-
Hacker News (security terms)
Containment and monitoring failures are to blame for AI hacking reports: experts
951 points · 626 comments
-
Hacker News (security terms)
Ask HN: Are you hesitant to install vibe-coded apps?
The thing is in the past there can be supply chain attacks but when its an actual programmer creating the software there is at least a chance for them to notice if something is up. But if the app is not even created by a programmer whats stopping prompt injection from including some virus in the app? Aren't we completely blind to security issues at that point?
-
Hacker News (security terms)
An Open Letter on AI and Cybersecurity from the Scientific Community
12 points · 3 comments
-
Hacker News (security terms)
Major security regression merged into OpenCode V2
18 points · 9 comments
-
Hacker News (security terms)
Launch HN: Consus (YC F24) – LLM gateway for companies handling sensitive data
Hey Hacker News! I'm Eric, the founder of Consus. We route all AI requests to ITAR restricted and controlled unclassified information (CUI) compliant infrastructure. Consus itself satisfies ITAR restrictions, and we recently completed our FedRAMP equivalency audit against the 410 FedRAMP High controls. FedRAMP High is the U.S. government’s strictest security baseline for cloud services handling s…
-
Hacker News (security terms)
Hackers activate automatic defrosting in supermarket fridges across Europe
https://www.reuters.com/business/retail-consumer/french-supe..., https://www.bbc.com/news/articles/crq5nzxv9q4yo, https://www.lemonde.fr/en/france/article/2026/10/12/french-s... Related: https://www.claroty.com/team82/research/freeze-the-controlle... I think the military commissary's freezers were hacked - https://news.ycombinator.com/item?id=49508506 - Aug 2026 (239 comments)
-
Hacker News (security terms)
Ledger confirms spy chip implant behind wallet crypto thefts
https://www.heise.de/en/news/Crypto-thieves-sell-hardware-wa... https://crypto.news/ledger-confirms-hidden-chip-in-crypto-wa... https://www.youtube.com/watch?v=8JnHdr30v4g https://www.youtube.com/watch?v=Nf4FEFlgv3Q https://www.tibane.net/research/ledger-nano-x-implant
-
Hacker News (security terms)
YouTuber builds 'Flock-like' camera to track police vehicles, gets police visit
84 points · 31 comments
-
Hacker News (security terms)
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
32 points · 8 comments
-
Hacker News (security terms)
Vitalik Buterin backs crypto ‘bunker mode’ amid rapid AI math advances
68 points · 65 comments
-
Hacker News (security terms)
Hackers obtain counterfeit TLS certificates for Google and other large services
141 points · 51 comments
-
Hacker News (security terms)
Chrome's Response to Recent ccTLD Registry Hijacks
28 points · 2 comments
-
Hacker News (security terms)
Ask a model if code is malicious and it reaches for its morals
15 points · 3 comments
-
Hacker News (security terms)
Meta’s Muse is an adorable privacy and security dumpster fire
392 points · 290 comments
-
Hacker News (security terms)
Show HN: MailAccess – the true Email OSINT framework
Im a security engineer and i built mailaccess. When i started learning pentesting, i came across multiple lectures and notes of people listing out tools and websites, which gives the emails for a particular domain, and almost all of them mentioned that the tool might not stick, so its better to learn the methodology, rather than learning a tool- that stuck with me. As i was beginning to really ge…
-
Hacker News (security terms)
Ask HN: My Apple ID is locked for a week, Apple is a single point of failure
My Apple ID was locked by Apple Oct 3rd. I got an automated email stating that I will receive further instructions for account recovery Oct 10th, a week of pain. There is zero human escalation path, no phone number to call, the iforget link leads to same message as email and no further escalation. Because my Apple ID is frozen, the App Store is completely bricked. I can’t update any apps. Living…
-
Hacker News (security terms)
Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped
439 points · 316 comments
-
Hacker News (security terms)
Tell HN: Uceprotect is extorting website owners
I recently discovered by accident that our website was being blocked by Orange's security filters. After a quick check, I found that our IP address is listed on UCEPROTECT Level 3. The listing is based on the reputation of the entire ASN 14061 (DigitalOcean, US) [1]. In other words, even if your IP did nothing wrong, it will still be listed because of its ASN. If your site is innocent and listed…
-
Hacker News (security terms)
Greg Kroah-Hartman – Security in the LLM Age [video]
346 points · 128 comments
-
Hacker News (security terms)
19 Out of 21 Late-Model Cars Tested Shared Data with 3rd Parties
16 points · 1 comments
-
Hacker News (security terms)
OpenAI whines that Chinese model stole its IP that it stole from everybody else
11 points · 1 comments
-
Hacker News (security terms)
16-year-old found Microsoft bug, got admin access to 17.3T-row databases
29 points · 1 comments
-
Hacker News (security terms)
Show HN: Token compression CLI to save Codex/Astra costs
Hey HN! Yolanda and Spencer here - wanted to share a token compression tool that we’ve built for ourselves to save 30% costs on codex! After maxing out sub and burning $700/day per person on api, we fine tuned a compression model to trim codex's tool call output to reduce input token + cache. It cut down tokens by 29.6% and now I just leave it on by default in Codex. To avoid messing up w/ cache,…
-
Hacker News (security terms)
Understanding the Impact of LLM Watermarking on AI Agent Behavior
59 points · 72 comments
-
Hacker News (security terms)
Uncle's frozen Mac says it's infected after viewing a Google ad. Now what?
31 points · 11 comments
-
Hacker News (security terms)
Security headers on 4,688 small-business websites: 49.7% met none of 7 criteria
18 points · 15 comments
-
Hacker News (security terms)
Forging 1024-bit RSA signatures in nearly SNFS time [pdf]
https://arstechnica.com/security/2026/09/theres-a-new-way-to...
-
Hacker News (security terms)
ShinyHunters claims FBI hack: 'This is NOT financially motivated'
22 points · 0 comments
-
Hacker News (security terms)
WordPress: Unauthenticated path traversal leading to conditional RCE
240 points · 132 comments
-
Hacker News (security terms)
ECB will invest in tokenised securities, and settle trades on its own new rail
14 points · 0 comments
-
Hacker News (security terms)
Security auditing in the age of (good enough) AI
96 points · 16 comments
-
Hacker News (security terms)
A restored PDP-11/83 serving this page on 211BSD Unix
The box is a restored Q-bus PDP-11/83 named minerva: Mentec M11 CPU, two chassis tied with M9404/M9405, RQDX3, 2xEmulex UC07, KDA50, RLV12, DEQNA, M3104. Storage is RA82 + dual RA92, MFM boot/swap, dual RL02, RX50s, and a TKZ50. OS is 2.11BSD. The live panel is top. /cgi-bin/webtop is the raw snapshot. A 16-bit httpd will not survive the front page, so Varnish/Caddy/Cloudflare cache the HTML and…
-
Hacker News (security terms)
OpenAI's Sam Altman to Brief UN Security Council Next Week
49 points · 69 comments
-
Hacker News (security terms)
Show HN: I created an open source locally usable full fledged AI platform
hi to all the readers this post is for my recent opensource project called ENZO now answering what is enzo so enzo is an opensource platform where i clubbed all the free available api for anyone use under one hood with more than 2000 models available to use for chatting coding researching and much more now answering the most common question of why you should put your time looking the project so i…
-
Hacker News (security terms)
OpenAI and Anthropic oversold AI security breaches
39 points · 25 comments
-
Hacker News (security terms)
Google's Gemini AI hacked three companies in security test
27 points · 13 comments
-
Hacker News (security terms)
US and Denmark reach deal over Greenland security
35 points · 8 comments