Best Security stories of 2026

Security, privacy, vulnerability, and infrastructure risk discussions.

OpenAI and Hugging Face address security incident during model evaluation

OpenAI and Hugging Face experienced a security incident involving model evaluation, with concerns about containment and potential exploits.

1632 points · 1157 comments · Add your take →

Mozilla to UK regulators: VPNs are essential privacy and security tools

808 pts, 356 comments

808 points · 356 comments · Add your take →

Read this before you buy that TV streaming stick

808 pts, 552 comments

808 points · 552 comments · Add your take →

'VPNs are lawful technical tools,' says EU Court in landmark copyright ruling

716 pts, 143 comments

716 points · 143 comments · Add your take →

My security camera shipped a GitHub admin token in its login page

645 pts, 242 comments

645 points · 242 comments · Add your take →

Gmail registration now requires scanning a QR code and sending a text message

637 pts, 517 comments

637 points · 517 comments · Add your take →

Codex Security

596 pts, 229 comments

596 points · 229 comments · Add your take →

Google fixed more Chrome bugs in June than over the past two years, thanks to AI

550 pts, 609 comments

550 points · 609 comments · Add your take →

Government orders GitHub to remove Bluetooth-based chat app Bitchat: Jack Dorsey

542 pts, 448 comments

542 points · 448 comments · Add your take →

#10

US holds off blacklisting DeepSeek, more than 100 firms deemed security risks

537 pts, 603 comments

537 points · 603 comments · Add your take →

#11

FBI Probes Service Selling 153M+ Drivers Licenses

485 pts, 299 comments

485 points · 299 comments · Add your take →

#12

I Inspected My Take-Home Interview Project. It Was a Whole Operation

482 pts, 125 comments

482 points · 125 comments · Add your take →

#13

LG to ban residential proxies from smart TV apps

468 pts, 525 comments

468 points · 525 comments · Add your take →

#14

Malware developers added nuclear and biological weapons text to to their spyware

460 pts, 239 comments

460 points · 239 comments · Add your take →

#15

A 0-click exploit chain for the Pixel 10

448 pts, 241 comments

448 points · 241 comments · Add your take →

#16

An American Privacy Emergency

Debates around privacy measures like differential privacy in the 2020 census highlight concerns about data security and transparency.

413 points · 139 comments · Add your take →

#17

I found a WordPress RCEs with GPT5.6 and $25

404 pts, 227 comments

404 points · 227 comments · Add your take →

#18

CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq

378 pts, 243 comments

378 points · 243 comments · Add your take →

#19

I turned my security cameras into an automatic bird identification system

371 pts, 172 comments

371 points · 172 comments · Add your take →

#20

Countries are competing to see which can carry out mass surveillance the best

314 pts, 128 comments

314 points · 128 comments · Add your take →

#21

HuggingFace: Security.txt

278 pts, 72 comments

278 points · 72 comments · Add your take →

#22

OpenBSD has a use-after-free allowing local privilege escalation to root

OpenBSD has a use-after-free vulnerability that allows local privilege escalation.

277 points · 165 comments · Add your take →

#23

Kimi K3 exploited the latest Redis server

271 pts, 100 comments

271 points · 100 comments · Add your take →

#24

Investigating three real-world incidents in our cybersecurity evaluations

240 pts, 199 comments

240 points · 199 comments · Add your take →

#25

Malicious Rust crate Arrayref runs a build-time payload

218 pts, 511 comments

218 points · 511 comments · Add your take →

#26

About the security content of macOS Tahoe 26.6

211 pts, 150 comments

211 points · 150 comments · Add your take →

#27

Just the rumour of a bug is enough to find an exploit these days

209 pts, 129 comments

209 points · 129 comments · Add your take →

#28

Cloudflare/Security-Audit-Skill

208 pts, 38 comments

208 points · 38 comments · Add your take →

#29

Turning a dumb AC unit smart (without losing my security deposit)

207 pts, 170 comments

207 points · 170 comments · Add your take →

#30

Hook, hold, harvest and hide: Meta's alleged strategy laid out in first week

205 pts, 197 comments

205 points · 197 comments · Add your take →

#31

Brits would quite like their private messages to stay private

196 pts, 286 comments

196 points · 286 comments · Add your take →

#32

Usbliter8: an A12/A13 SecureROM Exploit

194 pts, 37 comments

194 points · 37 comments · Add your take →

#33

Revolut confirms customer data breach through fake government requests

188 pts, 132 comments

188 points · 132 comments · Add your take →

#34

Six curl CVEs after OpenAI and Anthropic came back with zero

183 pts, 66 comments

183 points · 66 comments · Add your take →

#35

Web Security is Too Hard

178 pts, 119 comments

178 points · 119 comments · Add your take →

#36

When str.lower() is a security vulnerability in Python

174 pts, 75 comments

174 points · 75 comments · Add your take →

#37

Tile's security is so bad it's a feature for stalkers

171 pts, 46 comments

171 points · 46 comments · Add your take →

#38

EU fines Google €890M for competition breaches over search and apps

171 pts, 186 comments

171 points · 186 comments · Add your take →

#39

Greg Kroah-Hartman – Security in the LLM Age [video]

168 pts, 127 comments

168 points · 127 comments · Add your take →

#40

Original Sony PlayStation 2 security chip 'broken wide open' after 26 years

166 pts, 91 comments

166 points · 91 comments · Add your take →

#41

Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles

162 pts, 61 comments

162 points · 61 comments · Add your take →

#42

Google's Beyond Zero: Enterprise Security for the AI Era

160 pts, 83 comments

160 points · 83 comments · Add your take →

#43

Online ad giant Adform was hacked, proving once again why ad blockers are needed

154 pts, 103 comments

154 points · 103 comments · Add your take →

#44

EFF letter to FTC on X consent order [pdf]

The EFF submitted a letter to the FTC regarding X, emphasizing privacy concerns and the importance of computing freedom.