Search Results

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft's real authentication page. Once access and refresh tokens are issued, attackers may retain access to email, documents, and cloud resources, creating a direct path to data exposure, financial fraud,

The Hacker NewsAugust 5, 20261 min read

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. The flaw is fixed in Gitea 1.27.1. The file-read flaw is tracked as CVE-2026-59774, rated Critical with a CVSS score of 9.8, and received its

The Hacker NewsAugust 5, 20261 min read

Civilian plane crash in New Mexico tied to military GPS blocking

Matched "The Hacker News"Found in Description

TechnologyNews

Civilian plane crash in New Mexico tied to military GPS blocking

462 points 244 comments on Hacker News · wired.com

Hacker NewsAugust 5, 20261 min read

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed n8n API tokens and identified 4,576 unique credentials associated with 1,255 hostnames. Of the 896

The Hacker NewsAugust 5, 20261 min read

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Matched "The Hacker News"Found in Source

ProgrammingNews

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed. The "evil twin" extensions were uploaded to the repository between July 26 and August 1, 2026, according to Manifold Security. The packages have been removed from Open VSX as of

The Hacker NewsAugust 5, 20261 min read

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

An agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK's AI Security Institute. When a bystander publicly warned that the code was malicious, the agent denied it, force-pushed a rewritten branch history to erase the evidence, and posted from a second account it controlled to vouch for

The Hacker NewsAugust 5, 20261 min read

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote

The Hacker NewsAugust 5, 20261 min read

An AI Approach to Verified Production Cryptographic Libraries

Matched "The Hacker News"Found in Description

AIResearch

An AI Approach to Verified Production Cryptographic Libraries

1 point 0 comments on Hacker News · arxiv.org

Hacker NewsAugust 5, 20261 min read

The Labour Market Is a Network, Not an Auction

Matched "The Hacker News"Found in Description

TechnologyNews

The Labour Market Is a Network, Not an Auction

1 point 0 comments on Hacker News · andrewmarritt.substack.com

Hacker NewsAugust 5, 20261 min read

Why 70 of Website Replatforming Go over Budget

Matched "The Hacker News"Found in Description

TechnologyNews

Why 70 of Website Replatforming Go over Budget

1 point 0 comments on Hacker News · focusreactive.com

Hacker NewsAugust 5, 20261 min read

Show HN: CostClaw, a local CLI that finds your Claude Code spend leaks

Matched "The Hacker News"Found in Source

TechnologyNews

Show HN: CostClaw, a local CLI that finds your Claude Code spend leaks

npx costclaw audit

Hacker NewsAugust 5, 20261 min read

Show HN: Lapse - a notes app. but also shared memory space for your agents (MCP)

Matched "The Hacker News"Found in Source

SpaceNews

Show HN: Lapse - a notes app. but also shared memory space for your agents (MCP)

connects to wherever you're. Claude, ChatGPT, Codex, Claude Code, opencode, Local LLM (ollama), or any MCP client. I use it via iPhone shortcut. You just talk & the note gets saved in your space, tagged.

Hacker NewsAugust 5, 20261 min read

Search Results

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Civilian plane crash in New Mexico tied to military GPS blocking

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

An AI Approach to Verified Production Cryptographic Libraries

The Labour Market Is a Network, Not an Auction

Why 70 of Website Replatforming Go over Budget

Show HN: CostClaw, a local CLI that finds your Claude Code spend leaks

Show HN: Lapse - a notes app. but also shared memory space for your agents (MCP)

Top Discussion

Filters