Hacker News

I Don't Understand Quantum Physics (2018) OBS Studio 33 Kimi K3.1 Pro and K3.1 Pro Highspeed Physicists trap a single antimatter particle for a month Today, we hacked what we'd set out to hack: the iPhone Around a dozen banking apps began specifically permitting GrapheneOS Twelve years of distributed SQLite How close can pure functional programming get to C? Apple Music 404 Not Found How to run a city builder on 16 MHz Local Wikipedia: Wikipedia, but only for things a half hour walk from you Node2Shell evolves to HTTP2Shell, blast radius affects many HTTP libs and apps A practical guide to AI image generation, from diffusion to agents Bringing uv and ty together Dessa: Conversation Model trained only on speech

Bleeping Computer

Abandoned Popcorn Time app exposed millions of devices to RCE attacks Microsoft Teams to get AI-powered, context-aware phishing detection Microsoft: Windows Server 2016 reaches end of support in January Quest Diagnostics confirms data breach exposed patient records PHP shares mitigation for new RCE vulnerability with no patch You gave your AI agent access, but who is giving it orders? HPE patches eight max severity RCE and auth bypass AOS flaws Railway warns devs to rotate secrets after potential breach Capcom confirms data breach affecting 11.7 million accounts LiteLLM release pipeline hacked to distribute info-stealer malware Arista patches new VeloCloud Orchestrator zero-day exploited in attacks Microsoft shares how to fix broken Exchange Online EWS apps Machine speed attacks require machine speed detection and response Amazon says PHP2Shell exploitation began 4 days before patches GitLab warns of new max severity code execution vulnerability

Ars Technica

Hegseth warns prediction market bets warp military judgment, endanger troops Knicks sent employees fake offer of championship rings in phishing test: Report The reactor meant to showcase nuclear’s comeback keeps hitting problems Comcast loses more customers, claims other ISPs' cheap prices are "irrational" Meta shocked by $25B fine after N.M. refused to join multistate settlement UN says we're going to blow past 1.5º warming, offers a "now what?" answer FCC chair warns media not to run the "fake polls" Trump keeps complaining about Report: Musk ordered Starlink slowdown in Ukraine, then blamed it on Trump Judge rejects Trump’s wild claim EPA can dismiss data center pollution lawsuits Meta drops the word "train" from its commercial TOS after AI backlash TP-Link tries to appease Trump admin with pledge to assemble routers in US Meta tries to scapegoat staff who downloaded torrents to spare execs Accused OpenAI spy had folder called “Saudi Gov Docs,” FBI says Florida DMV hacked after police dept insecurely stored login info Disney found a way to buy Character.AI without buying its lawsuits

Slashdot

Greece Enacts Social Media Ban For Kids Under 15 UN Says Breaching 1.5C Warming Limit Is 'Imminent and Unavoidable' Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List Google Staff Resign In Backlash Over Its AI Contracts With Military More Than 1.5 Million Canadian Crime Stoppers Tips Leaked Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy On Facebook Judge Orders Meta To Name Employees Who Approved Torrenting Anna's Archive, Libgen DHS Lied About Why It Wanted To Search Activist's GrapheneOS Phone Meta Muse Exposes Users' Personal, Business Secrets When They Share Conversations US Bans DeepSeek From Government Use TP-Link Moves to Assemble Routers In the US Following Import Ban Trump DHS Officials Asked CISA To Secretly Aquire and Hack a Voting Machine Florida DMV Hacked After Police Dept Insecurely Stored Login Info New Video Game Law Proposed: 'If You Pay For It, You Own It' Planned UK Data Center Delayed Until 2030s Over Power Grid Delays. Microsoft Pulls Out

Events

The Verge

Abandoned Popcorn Time apps had to be disabled to prevent a zombie army The disastrous PHP vulnerabilities were exploited days before the patch PHP: The three little letters wreaking havoc across the web 1Password lets AI agents use your passwords without seeing them Eiliko maker says it’s hiring an ‘independent security firm’ after Verge report on its insecure robots PHP: The three letters that shut down sites all over the internet today OpenAI says an AI agent lied about disabling its safety monitoring system A critical PHP vulnerability may take websites down today Meta pauses Muse sharing after researchers find AI chats on the web Chrome will now show a warning before you visit ‘suspicious’ sites

Cipher Brief

Turkey Has Outsourced Its Censorship to American Companies Technology Is Outrunning the Way We Fight Hybrid Threats: Why Awareness Must Transcend Individual Cyberattacks America's Counter-Drone Authority Is Real, The Capacity Isn't Yet The U.S. Army’s Pacific Strategy Depends on Allies The Hidden Risks of AI-Powered Intelligence What a Russian Hybrid Attack Might Look Like Muhammad bin Salman’s Humbling and the Return of the Ottomans The Day We Cannot Choose How Far Should the U.S. Go to Defend Saudi Arabia? Who Really Makes Decisions in Tehran? The Soviet Roots of Russia’s Modern Disinformation War Europe’s Changing Politics and the Future of U.S. Leadership What Beijing Calls Open, Washington Should Call an Operation Washington Cannot Outsource Saudi Security to the Mecca Pact

Blogs

Cory Doctorow

Critique and writing (23 Oct 2026) Adversarial interoperability is a team sport (21 Oct 2026) The death of history's most successful publisher (20 Oct 2026) The technopolitics of ad-tech (19 Oct 2026) Israeli ad-tech company was a delivery system for "mercenary spyware" (17 Oct 2026) Load-bearing (16 Oct 2026) Expedia amazoned hotel rooms (15 Oct 2026) Bundestrojaner (13 Oct 2026) How labor rights rescued Ultima from a monopolist (12 Oct 2026) Thwarted (09 Oct 2026) Disloyalty (07 Oct 2026) Swapping money for expertise (06 Oct 2026) Scrutinized (05 Oct 2026) Economic probabilities for our grandchildren (03 Oct 2026) Voting is to politics as shopping is to boycotts (01 Oct 2026)