How we hacked McKinsey's AI platform(codewall.ai)

420 points by mycroft_4221 7 months ago | 168 comments

CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.

HackEurope 2026: A short rant on AI and hackathons(duti.dev)

48 points by mindracer 2 months ago | 39 comments

Ken Shirriff Tracks Down Intel's Infamous Pentium FDIV Bug in the Silicon Itself(hackster.io)

24 points by voxadam 1 year ago | 8 comments

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 9 months ago | 27 comments

MIT Technology Review has confirmed that posts on Moltbook were fake(technologyreview.com)

243 points by helloplanets 8 months ago | 115 comments

Exposed DeepSeek database leaking sensitive information, including chat history(wiz.io)

608 points by talhof8 1 year ago | 423 comments

Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.

Exposed DeepSeek database leaking sensitive information, including chat history(wiz.io)

608 points by talhof8 1 year ago | 423 comments

Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.

GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos(noma.security)

487 points by ColinEberhardt 3 months ago | 187 comments

Noma Labs vulnerability research post describing how a crafted GitHub issue could trick GitHub's AI agent into leaking private repository contents.

Show HN: Books mentioned on Hacker News in 2025(hackernews-readings-613604506318.us-west1.run.app)

550 points by seinvak 10 months ago | 193 comments

A web app listing books mentioned in Hacker News comments during 2025, ranked by mention count with the related comments shown alongside.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

Leaking the email of any YouTube user for $10k(brutecat.com)

1548 points by brutecat 1 year ago | 439 comments

A security researcher's write-up of a vulnerability chain that exposed the email address of any YouTube channel owner, earning a $10,000 Google bug bounty.

Rook to XSS: How I hacked chess.com with a rookie exploit(skii.dev)

379 points by el_duderino 2 years ago | 120 comments

A blog post describing how the author found and exploited a cross-site scripting (XSS) vulnerability on chess.com.