2821
Hacking Google's HVAC Systems
Arctic Wolf®, the leader in security operations, has acquired Cylance, a pioneer of AI-based endpoint security.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2822
Play Framework Security Advisory
Play Framework - The High Velocity Web Framework For Java and Scala
2823
2824
Hidden warning message found in Samsung’s Galaxy tablet
The authoritative information platform for the semiconductor industry. Learn why TechInsights is the most trusted source of actionable, in-depth intelligence to the semiconductor industry.
2825
Fuzzing PCI express: security in plaintext
Google recently launched GPUs on Google Cloud Platform (GCP), which will allow customers to leverage this hardware for highly parallel workloads. These GPUs are connected to our cloud machines via a variety of PCIe switches, and that required us to have a deep understanding of PCIe security.
2826
2827
GPT‑5.5 Bio Bug Bounty
Details about the OpenAI Bio Bounty program
2828
Time to Encrypt the Cloud
From typing a business letter to taking pictures with friends, the internet has changed every part of our lives. We don't just share information with people, we also want it synced across our computers, tablets, and phones.
2829
Detecting AI agent use and abuse
The key question is: Can you detect AI agent traffic on your application today? We tested multiple AI agent toolkits across high-traffic consumer sites, and the results were clear—legacy detection techniques (CAPTCHAs, IP blocking, user-agent filtering) are largely ineffective. Here’s what we found.
2830
Office Drama on macOS
infecting macOS via macro-laden documents and 0days
2831
The security paradox of local LLMs
Local LLMs prioritize privacy over security. Our research reveals a 95% backdoor injection success rate.
2832
Drupal 7 SQL Injection Vulnerability
SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Drupal - pre Auth SQL Injection Vulnerability Release Date: 2014/10/15 Last
2833
What a one line change did to the Chrome sandbox
Posted by James Forshaw, Project ZeroThe Chromium sandbox on Windows has stood the test of time. ...
2834
CrowdSec Source Code Leak
CrowdSec update on a source code exposure that occurred in May 2026, including the scope, impact, investigation, and security measures taken.
2835
2836
Another Vulnerability in the LPC55S69 ROM
The discovery of an undocumented hardware block in the LPC55S69.
2837
Czech police forced to turn off facial recognition cameras at the Prague airport
The shutdown of the facial recognition cameras at the Václav Havel Airport in Prague came after years of criticism from EDRi member IuRe.
2838
Chaos Computer Club saves the German healthcare system 400M Euros
Zur Verbindung mit dem Gesundheitsdatennetz „Telematik“ sind in deutschen Arztpraxen spezielle Router vorgeschrieben. Nach nur fünf Jahren Laufzeit soll nun ein Gerätetausch alternativlos sein – so...
2839
Securing access to Wikimedia sites with HTTPS by default
The Wikimedia Foundation is happy to announce that we are implementing HTTPS to encrypt all traffic on Wikimedia sites. With this change, nearly half a billion monthly visitors on Wikipedia and its…
2840
Microsoft Certificate used to sign "Flame"
Microsoft Emergency Bulletin: Unauthorized Certificate used in "Flame" , Author: Johannes Ullrich
2841
Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console
Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.
2842
Ransomware as a Service
Ransomware as a Service, Author: Xavier Mertens
2843
HardenedBSD Is Now Officially on Radicle
Over the past week, I have been working on bringing HardenedBSD's code repositories on Radicle (as most/all of you already know by now.) We are now at the point where Radicle is usable for us. There are still some sharp edges and some things to work out, but the core functionality is working.
2844
2845
Mullvad Privacy Companion is now open source
Mullvad Privacy Companion, a free Firefox extension helping to improve your online privacy – is now open source.
2846
2847
Guidance to developers affected by effort to block less secure browsers, apps
We are always working to improve security protections of Google accounts. Our security systems automatically detect, alert and help protect our users against a range of security threats. One form of phishing, known as “ man-in-the-middle ”, is hard to detect when an embedded browser framework (e.g., Chromium Embedded…
2848
Triple Flaw in Nest's Dropcam
Secure your Internet-connected home and family devices with advanced IoT solutions from Bitdefender Smart Home Cybersecurity.
2849
2850
A 100k Botnet Turns Home Routers to Email Spammers
This article was co-authored by Hui Wang and RootKiter. Since September 2018, 360Netlab Scanmon has detected multiple scan spikes on TCP port 5431, each time the system logged more than 100k scan sources, a pretty large number compared with most other botnets we have covered before. The interaction between the