331
US Government wants DNA and social media from visitors
Yesterday the Trump Administration announced a proposed change in policy for travellers to the U.S. It applies to the powers of data collection by the Customs and Border Police (CBP).
New
The latest blog posts to take off on Hacker News. 4,439 posts.
332
ICE using Palantir tool that feeds on Medicaid data
ICE is using a Palantir tool that uses Medicaid and other government data to stalk people for arrest. This is exactly the kind of data privacy abuse that EFF has been warning about.
333
We X-Rayed a Suspicious FTDI USB Cable
That cheapo cable you bought online? Probably a counterfeit. We x-rayed a suspicious cable to show you exactly what that means, and why counterfeits work worse and wear out faster.
334
Route leak incident on January 22, 2026
An automated routing policy configuration error caused us to leak some Border Gateway Protocol prefixes unintentionally from a router at our Miami data center. We discuss the impact and the changes we are implementing as a result.
335
Internet voting is insecure and should not be used in public elections
All internet voting systems are insecure. The insecurity is worse than a well-run conventional paper ballot system, because a very small number of people may have the power to change any (or all) votes that go through the system, without detection.
336
Threat actors expand abuse of Microsoft Visual Studio Code
Jamf Threat Labs uncovers North Korean hackers exploiting VS Code to deploy backdoor malware via malicious Git repositories in the Contagious Interview campaign
337
TrustTunnel: AdGuard VPN protocol goes open-source
Today is a big day for us, and for everyone who cares about transparency, privacy, and having full control over their own traffic. We’re finally open-sourcing the protocol that powers AdGuard VPN. And it now has a name: TrustTunnel.
338
Meta's legal team abandoned its ethical duties
From Big Tobacco to Menlo Park — and the collapse of legal ethics
339
Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC
Desoldering a drone's flash chip and reconstructing the firmware from broken data.
340
Releasing rainbow tables to accelerate Net-NTLMv1 protocol deprecation
Mandiant aims to lower the barrier for security professionals to demonstrate the insecurity of Net-NTLMv1.
341
6-Day and IP Address Certificates Are Generally Available
Update: March 11, 2026 If you use Certbot, see Six-Day and IP Address Certificates Available in Certbot for details on requesting these certificates. Short-lived and IP address certificates are now generally available from Let’s Encrypt. These certificates are valid for 160 hours, just over six days. In order to get a…
342
CVEs affecting the Svelte ecosystem
Time to upgrade
343
Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console
Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.
344
Claude Cowork exfiltrates files
Claude Cowork is vulnerable to file exfiltration attacks via indirect prompt injection as a result of known-but-unresolved isolation flaws in Claude's code execution environment.
345
Sending Data over Offline Finding Networks
The following is a summary of an internal research project conducted by Hudson H. and Andrew G.
346
So, you’ve hit an age gate. What now?
EFF is against age gating and age verification mandates, and we hope we’ll win in getting existing ones overturned and new ones prevented. But mandates are already in effect, and every day many people are asked to verify their age across the web, despite prominent cases of sensitive data getting leaked in the process.
347
Using proxies to hide secrets from Claude Code
How to use HTTP proxies to prevent credential exposure in Claude Code sandboxes.
348
Superhuman AI Exfiltrates Emails
Superhuman AI was able to exfiltrate sensitive emails from user accounts - without the user even being aware. This vulnerability was rapidly remediated by the Superhuman team.
349
Flock Hardcoded the Password for America's Surveillance Infrastructure 53 Times
A responsible disclosure write-up on an organization-wide ArcGIS API key embedded across multiple public front-end bundles.
350
Fixing a Buffer Overflow in Unix v4 Like It's 1973
This blog post shows how to fix a buffer overflow in the su progam of UNIX v4
351
IBM AI ('Bob') Downloads and Executes Malware
Vulnerabilities in IBMs Bob AI allow attackers to trigger the download and execution of malware via indirect prompt injection if users select auto-approve for even one known trusted command.
352
A closer look at a BGP anomaly in Venezuela
There has been speculation about the cause of a BGP anomaly observed in Venezuela on January 2. We take a look at BGP route leaks, and dive into what the data suggests caused the anomaly in question.
353
Kernel bugs hide for 2 years on average. Some hide for 20
What I learned mining 125,000 vulnerabilities from Linux git history. The average kernel bug lives 2.1 years before discovery, but some subsystems are far worse.
354
355
ICE Is Going on a Surveillance Shopping Spree
We need to have a hard look at the surveillance industry. It is a key enabler of vast and untold violations of human rights and civil liberties, and it continues to be used by aspiring autocrats to threaten our very democracy. As long as it exists, the surveillance industry, and the data it generates, will be an…
356
Tailscale state file encryption no longer enabled by default
View changes to the Tailscale client and service.
357
Notion AI: Unpatched data exfiltration
Notion AI was susceptible to data exfiltration via indirect prompt injection due to a vulnerability in which AI document edits are saved before user approval.
358
Locating a Photo of a Vehicle in 30 Seconds with GeoSpy
This is just a short description for your post which you can edit depending on your needs via the Framer CMS.
359
There were BGP anomalies during the Venezuela blackout
The Low Orbit Security Radar is a weekly security newsletter from an offensive practitioner's perspective. One idea, curated news, and links worth your time. News: There Were BGP Anomalies During The Venezuela Blackout When watching the situation in Venezuela unfold, the phrase "It was dark, the lights of Caracas
360
Eurostar AI vulnerability: When a chatbot goes off the rails
TL;DR Introduction I first encountered the chatbot as a normal Eurostar customer while planning a trip. When it opened, it clearly told me that “the answers in this chatbot are generated by AI”, which is good disclosure but immediately raised my curiosity about how it worked and what its limits were. Eurostar…