Incident Report: CVE-2024-YIKES(nesbitt.io)
658 points by miniBill | 156 comments
A satirical incident report by Andrew Nesbitt about a cascading software supply chain attack spanning JavaScript, Rust, and Python package ecosystems.
First screen, captured . Hover to scroll the page, or open the video.

Captured . Click for the whole screenshot.
658 points by miniBill | 156 comments
A satirical incident report by Andrew Nesbitt about a cascading software supply chain attack spanning JavaScript, Rust, and Python package ecosystems.
2406 points by imdsm | 1623 comments
Cloudflare status page incident report on a global network outage on Nov 18, 2025, now marked resolved.
184 points by supermatti | 95 comments
484 points by mooreds | 82 comments
Andrew Nesbitt's satirical incident report about a malicious package slipping past seven AI-powered security gates in a fictional future CVE.
236 points by sashk | 109 comments
Alpine Linux incident report on an attempted exploitation of a critical GitLab/Ruby Onigmo vulnerability against its GitLab instance, with timeline, impact assessment and remediation.
93 points by hising | 63 comments
GitHub status page incident report about a service disruption affecting GitHub Actions.
527 points by SpyCoder77 | 911 comments
GitHub status page incident report for a GitHub.com outage where users saw 'No server is currently available' errors; screenshot shows the HN discussion thread.
529 points by luispa | 380 comments
LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.
205 points by SondreDag | 40 comments
Bunny.net status page incident report on a security breach at an infrastructure provider hosting an Armenian CDN node, with TLS certificate revocation and reissuance updates.
162 points by sidcool | 131 comments
Anthropic status page incident report on elevated errors affecting claude.ai, Claude Code, Claude Cowork and the Claude API, with mitigation updates.