Unmasking EncryptHub: Help from ChatGPT and Opsec Blunders(outpost24.com)

52 points by marcusb 1 year ago | 14 comments

FreeBSD pf bypass when using IPv6(enricobassetti.it)

53 points by todsacerdoti 3 years ago | 38 comments

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

Ivanti Sentry pre-auth RCE (CVE-2026-10520) – CVSS 10.0, public PoC, CISA KEV(hellorecon.com)

12 points by slvnx 4 months ago | 0 comments

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM(aikido.dev)

317 points by birdculture 11 months ago | 98 comments

Aikido Security blog post reporting a second Shai Hulud npm supply-chain attack compromising packages from Zapier, ENS, AsyncAPI, PostHog, and Postman.

Oh-Auth – Abusing OAuth to take over millions of accounts(salt.security)

205 points by skilled 3 years ago | 94 comments

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

AWS Bedrock to require sharing data with Anthropic for Mythos and future models

369 points by TomAnthony 4 months ago | 216 comments

Hacker News discussion of Anthropic requiring 30-day data retention for Mythos-class Claude models on AWS Bedrock, moving data outside AWS's security boundary.

QwQ-32B: Embracing the Power of Reinforcement Learning(qwenlm.github.io)

445 points by nwjsmith 1 year ago | 147 comments

Qwen Team blog post announcing QwQ-32B, a 32B-parameter reasoning model trained with scaled reinforcement learning.

Windows Notepad App Remote Code Execution Vulnerability(cve.org)

737 points by riffraff 8 months ago | 450 comments

CVE record CVE-2026-20841 published by Microsoft describing a remote code execution vulnerability in the Windows Notepad app.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

OpenClaw privilege escalation vulnerability(nvd.nist.gov)

493 points by kykeonaut 6 months ago | 232 comments

NVD entry for CVE-2026-33579, a privilege escalation vulnerability in OpenClaw; the captured screenshot shows a Reddit network-policy block page instead.