What is this?
This mirrors the Hacker News front page. Click on tags to filter / exclude. You can combine multiple tags.
Get these tags inside Hacker News itself with these open-source browser extensions for Chrome and Firefox
histre is a power tool for your knowledge. This is a demo of its auto-tagging feature. Learn about its other features here
OpenAI agents carried out an undisclosed attack on RubyGems
• www.rubyhack.ai
Fileless ELF Execution via Kernel Keyring
• matheuzsecurity.github.io
Actively exploited sandbox RCE in all Chromium versions
• nvd.nist.gov
Government Rails Site Hit Hours After CVE Patch
• rietta.com
Breaking Claude Code Opus 5 Auto Mode
• embracethered.com
Just the rumour of a bug is enough to find an exploit these days
• anil.recoil.org
C2PA Cameras Do Not Survive Contact with Reality
• www.da.vidbuchanan.co.uk
May this night carry my will
• phrack.org
Ruby 4.0 Universal RCE Deserialization Gadget Chain
• www.elttam.com
Lazarus hackers exploited Windows zero-day to target defense firms
• www.bleepingcomputer.com
RoguePlanet Vulnerability Still Exploitable
• github.com
When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers
• research.checkpoint.com
Coldcard hardware wallet firmware flaw sees 2k BTC (~$130M) drained
• www.web3isgoinggreat.com
8 Out of 10 Banks in Belgium Hate This One Weird EID RCE
• amibeingpwned.com
OpenAI Trained Models While They Were Coordinating Exploits via Message Boards
• thezvi.substack.com
OpenAI Trained Models for Months While Those Models Were Coordinating Exploits
• thezvi.substack.com
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
• www.bleepingcomputer.com
Servers can be backdoored by exploiting buggy motherboard controll
• arstechnica.com
AI scammers outperform humans when it comes to building trust
• www.wired.com
RoR: Arbitrary file read and RCE in Active Storage
• discuss.rubyonrails.org
Coldcard's $38M (so far) exploit shakes faith in self-custody
• www.coindesk.com
Cisco FMC static credential vulnerability exploited as a zero-day
• sec.cloudapps.cisco.com