The Palantir's Stasi Protocols(professorsigmund.com)

72 points by Prof_Sigmund 6 months ago | 19 comments

Launch HN: MindFort (YC X25) – AI agents for continuous pentesting

55 points by bveiseh 1 year ago | 18 comments

Flock Hardcoded the Password for America's Surveillance Infrastructure 53 Times(nexanet.ai)

456 points by fuck_flock 9 months ago | 147 comments

Nexanet threat intel blog post reporting that Flock Safety hardcoded a password 53 times across its surveillance infrastructure software.

I have recordings proving Coinbase knew about breach months before disclosure(jonathanclark.com)

600 points by jclarkcom 11 months ago | 179 comments

A personal blog post arguing, with recordings and emails, that phishing attacks tied to the Coinbase data breach began in January 2025, months before Coinbase's disclosure.

What IAEA docs say about Iran's nuclear program, before the bombs fell(meetdewey.com)

16 points by lambdabaa 6 months ago | 7 comments

Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps

38 points by XiaHua 3 months ago | 18 comments

Azure hit by 15 Tbps DDoS attack using 500k IP addresses(bleepingcomputer.com)

464 points by speckx 11 months ago | 291 comments

News report that Microsoft Azure mitigated a record 15.72 Tbps DDoS attack from the Aisuru botnet using about 500,000 IP addresses.

GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos(noma.security)

487 points by ColinEberhardt 3 months ago | 187 comments

Noma Labs vulnerability research post describing how a crafted GitHub issue could trick GitHub's AI agent into leaking private repository contents.

Devs say AI crawlers dominate traffic, forcing blocks on entire countries(arstechnica.com)

329 points by LinuxBender 1 year ago | 232 comments

Ars Technica article reporting that open source developers face overwhelming AI crawler traffic, leading some to block entire countries to keep FOSS sites online.

GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

Data accidentally exposed by Microsoft AI researchers(wiz.io)

661 points by deepersprout 3 years ago | 212 comments

Wiz Research blog post describing how a misconfigured Azure SAS token in a Microsoft AI GitHub repository exposed 38TB of internal data, including Teams messages.

Espionage Against the European Parliament(citizenlab.ca)

381 points by ledoge 3 months ago | 92 comments

Citizen Lab research report finding that a member of the European Parliament committee investigating spyware was hacked with NSO Group's Pegasus.