High-signal, raw disclosures spanning threat actor activity, zero-day exploits, foundation models, and open-source infrastructure without fluff or clickbait.
Article URL: https://github.com/ucsandman/SideTap Comments URL: https://news.ycombinator.com/item?id=49912306 Points: 1 # Comments: 0...
Article URL: https://www.theregister.com/ai-and-ml/2026/09/29/open-source-tool-distills-jev-so-you-can-run-it-locally/5299856 Comments URL: https://news.ycombinator.com/item?id=49912498 Points: 1 # Comments: 0...
Article URL: https://techcrunch.com/2026/09/30/reddit-is-killing-rss-feeds-ending-public-api-access-because-of-ai-bots/ Comments URL: https://news.ycombinator.com/item?id=49912499 Points: 6 # Comments: 1...
Article URL: https://fsdatalab.github.io/blog/introducing-quail/ Comments URL: https://news.ycombinator.com/item?id=49912536 Points: 3 # Comments: 0...
Article URL: https://www.youtube.com/watch?v=DlTNN0gvkLM&lc=UgwcT1Ye7kzJV9UaRAN4AaABAg Comments URL: https://news.ycombinator.com/item?id=49912598 Points: 1 # Comments: 0...
Article URL: https://www.fermionresearch.com/research/phonon-2/ Comments URL: https://news.ycombinator.com/item?id=49912639 Points: 1 # Comments: 0...
Article URL: https://github.com/Splinters-io/blinder Comments URL: https://news.ycombinator.com/item?id=49912640 Points: 2 # Comments: 3...
Article URL: https://www.anthropic.com/research/your-thoughts-on-ai Comments URL: https://news.ycombinator.com/item?id=49912678 Points: 2 # Comments: 0...
I created an open source alternative to tools like Instantly or Smartlead, which charge huge amounts of money per lead for basic cold email campaign management. The emails are sent from your inbox, and you get open rates...
Article URL: https://github.com/zie1ony/jev-talks/blob/main/demo.gif Comments URL: https://news.ycombinator.com/item?id=49912895 Points: 1 # Comments: 1...
Learn how OpenAI disrupted a campaign to extract protected model reasoning and is strengthening defenses against adversarial distillation....
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data. [...]...
Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and o...
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack expl...
Proof of concept for watermarking AI-generated proteins while preserving biological function....
OpenAI is partnering with America’s SBDC to expand hands-on AI training and local support for small businesses, alongside a new report on how small teams are using AI....
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition. [...]...
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed th...
Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504,...
...
Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month. [...]...
Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were not designed to handle. Token Security explains why these agents need their own identities...
Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges. [...]...
Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products. [...]...