121
Mistral's Shieldstral: 3B open-weights model for multimodal moderation
Shieldstral introduces a 3B open-weights multimodal safety classifier that outperforms models up to 7x its size.
New
The latest blog posts to take off on Hacker News. 4,439 posts.
122
Keyv and friends compromised in active Shai-Hulud supply chain attack
Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account
123
SQLite Critical CVEs or LLM Slop?
The JFrog security research team recently identified a supply chain attack targeting the `xinference` package on PyPI. Versions 2.6.0, 2.6.1, and 2.6.2 were compromised and yanked by maintainers after users reported suspicious behavior. If you installed or imported these versions, you must assume your environment is…
124
What DMARC Protects You From, and What It Does Not
DMARC verifies a domain owner authorised an email; it does not verify the email is safe. Where DMARC helps, where it falls short, and why authentication is not trust.
125
Tailscale didn't stop the Hugging Face intrusion
An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.
126
Google fixed more Chrome bugs in June than over the past two years, thanks to AI
Chrome uses Gemini AI to automate vulnerability discovery, triage, and patching, accelerating updates to match modern security risks.
127
Investigating three real-world incidents in our cybersecurity evaluations
We found three cases where a Claude model reached the internet from an evaluation environment and accessed real systems. We share what happened and what we're changing.
128
1,741 "informed" consents with one click? GDPR complaint filed
dict.cc requests users to consent to the tracking by 1,741 "partner" companies. This makes it impossible for people to know what happens to their data
129
San Francisco: Don't Fall for Industry Defense of Surveillance Pricing
The concept of “surveillance pricing” is just one part of a much larger problem and business model: corporations maximizing their profits by invading our privacy. The all-too-common business model is to systematically harvest, collate, and store as much of our personal data as possible, and then...
130
Discovering Cryptographic Weaknesses with Claude
Anthropic researchers find weaknesses in cryptographic algorithms with Claude Mythos Preview
131
Italy Blocks Reproductive Health Websites Women on Web and Women Help Women
This report documents the blocking of Women on Web (WoW) and Women Help Women (WHW) domains in Italy based on OONI data.
132
DMARC has been public since 2012 but most company domains still don't enforce it
DMARC has been public since 2012. We checked 67,336 domains: 68.4% still have no policy or one that does not enforce it.
133
The relay market powering token resellers and fraud
A look inside the gray-market reseller economy that gives mainland China cheap, structured, B2B-grade access to OpenAI, Anthropic, Google, and beyond
134
135
Introducing selfie for sign-in: a new way to access your Google Account
Selfie video gives you more options if you’re ever locked out or don’t have access to your usual phone or computer.
136
OpenAI and Hugging Face address security incident during model evaluation
OpenAI and Hugging Face share early findings from a security incident during AI model evaluation, highlighting advanced cyber capabilities and lessons for defenders.
137
Firefox Containers Preview
Today, we’re excited to announce the Preview of Containers in Firefox version 153, which lets you keep separate parts of your online life (work, shopping
138
Flock Credibility Lost as It Repeatedly Lies to City Councils, Police, & Public
ACLU documents how surveillance camera company Flock has lied to local officials about its operations
139
The EU is about to sell our most sensitive data to the US for visa-free travel
The leaked draft text suggests that the Commission significantly caved in to US’s excessive demands for unfettered information access.
140
I found a WordPress RCEs with GPT5.6 and $25
Adam Kues used a $200 GPT5.6 Sol Ultra subscription to discover a pre-authentication SQL injection and full RCE exploit chain in WordPress Core – a chain that chains a batch API desync, cache poisoning, changeset abuse, and hook injection into a complete takeover.
141
We want Texans to know their rights
Last May, EFF reported that a sheriff’s office in Texas searched data from more than 83,000 automated license plate reader (ALPR) cameras to track down a woman suspected of self-managing an abortion. ALPRs are promoted as tools for keeping communities safe by finding missing persons and locating...
142
AI Meets Cryptography 2: What AI Found in OpenVM's ZkVM
We turned zkao (our AI auditor) on OpenVM, a state-of-the-art zkVM, and it found a critical soundness bug: the pairing check accepted a prover-supplied witness without proper subfield checking, which lets a malicious prover forge any pairing equality. It is fixed in OpenVM 1.6.0 and tracked as CVE-2026-46669. This is…
143
GrapheneOS recommended for domestic abuse victims
Looking for a DV safe phone in Australia? This 2026 guide covers tech abuse on normal phones, what a privacy phone can and cannot do, and where to get help.
144
Briar is in maintenance mode
This is a quick update about the status of Briar. Short version: the project is still active but we’re only making essential security updates and bugfixes for now. Long version: For several years we’ve been trying to find solutions to some of the longstanding issues with Briar, such as high battery usage and…
145
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
A seven-month-old arbitrary code execution vulnerability remains present in Cursor, leaving 1 million daily users to rely on public disclosure after months of unsuccessful attempts to obtain remediation updates.
146
Since Chromium 148, Math.tanh is now fingerprintable to link underlying OS
Math.tanh, every CSS trig function, and the Web Audio compressor all route through the host libm, so the rounding of a cosine betrays the OS a browser actually …
147
148
How the terrorist group Boko Haram uses frontier AI
The Cambridge Programme on AI Science & Policy (CASP) is an interdisciplinary research programme on frontier AI at the University of Cambridge.
149
GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebu that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in…
150
GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
Noma Labs found a prompt injection flaw in GitHub Agentic Workflows that let an unauthenticated attacker leak private repo data via a crafted GitHub Issue.