All topics

Security stories

Security stories on Hacker News range from critical CVE disclosures and supply-chain attacks to privacy policy changes and encryption debates. Practitioners, researchers, and skeptics weigh in with technical depth that mainstream coverage often misses.

This page aggregates the security and privacy discussions worth reading — vulnerability write-ups, incident postmortems, and the community's reaction to new threats and defenses.

567 stories archived · Page 1 of 19

RSS feed for Security

US Air Force pilots used malware-laden USB drives to plan Afghanistan missions

theregister.com · 3 points · 0 comments

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across ECos, Linux

quentinkaiser.be · 7 points · 1 comments

OpenCode has a security breach last that impacted 1.4% of console users

twitter.com · 7 points · 5 comments

OpenCode: Potential provider key breach [Reddit]

reddit.com · 13 points · 2 comments

OpenAI models hacked a crypto wallet and breached more websites

arstechnica.com · 7 points · 1 comments

Android gets AI defenses against messaging scams, fake calls

bleepingcomputer.com · 7 points · 0 comments

Burger King Japan data breach exposes 11 million customer records

bleepingcomputer.com · 9 points · 6 comments

BAE Systems cyberattack disrupts US federal court operations

bleepingcomputer.com · 12 points · 0 comments

China moves to curb tech exports, including AI, citing national security risks

apnews.com · 10 points · 0 comments

The Lawful Access Act threatens to blow a hole in Canada's national security

theglobeandmail.com · 3 points · 0 comments

Guest-to-Host KVM Escape (CVE-2026-99999) Critical

ubuntu.com · 6 points · 1 comments

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD

calif.io · 30 points · 68 comments

AegisKernel – Zero-trust deterministic security runtime for AI agents

github.com · 2 points · 0 comments

Qualcomm Legally Proves Arm Breached Its License, Wins $2

techpowerup.com · 5 points · 9 comments

MadMoon Shield – single-server DDoS defense, no CDN. Round 3 live

challenge.madmoonsecurity.com · 2 points · 1 comments

U.K. Sanctions Cryptomus for RU Money Laundering

krebsonsecurity.com · 4 points · 4 comments

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

bleepingcomputer.com · 3 points · 0 comments

Dexcom forces ToS\Privacy Policy acceptance to see glucose levels

reddit.com · 6 points · 4 comments

Netlumi – Cloud and AI agent security with auto-remediation(Live demo)

app.netlumi.com · 2 points · 0 comments

X purges 13,000 accounts linked to suspected meddling ahead of US midterms

theregister.com · 46 points · 107 comments

Europe's reliance on US gas is as serious a risk as Russian gas used to be

euobserver.com · 15 points · 8 comments

Claude Code Desktop Vulnerability: Preview Pane Data Exfiltration

noma.security · 6 points · 0 comments

Canadian ransomware negotiator arrested amid FBI hacker crackdown

ctvnews.ca · 8 points · 0 comments

Flock CEO: If you want a crime-free society, be ready to give up your privacy

neowin.net · 10 points · 49 comments

Gauteng to open criminal case against student who reported a security flaw

mybroadband.co.za · 6 points · 1 comments

AI agents aren't 'going rogue.' Frontier labs are skipping security basics

csoonline.com · 241 points · 620 comments

Vghost: A 9-year-old Linux vhost bug enabling local root and VM escape

matrix.tencent.com · 8 points · 1 comments

Global takedown hits network behind 1B phishing messages

bleepingcomputer.com · 6 points · 2 comments

Cve.earth – Open-Source Environmental Destruction Tracking

cve.earth · 2 points · 1 comments

An Open Letter on AI and Cybersecurity from the Scientific Community

ai-security-letter.org · 12 points · 3 comments