Security stories
Security stories on Hacker News range from critical CVE disclosures and supply-chain attacks to privacy policy changes and encryption debates. Practitioners, researchers, and skeptics weigh in with technical depth that mainstream coverage often misses.
This page aggregates the security and privacy discussions worth reading — vulnerability write-ups, incident postmortems, and the community's reaction to new threats and defenses.
454 stories archived · Page 14 of 16
RSS feed for SecurityWhat does GitHub's security team even do?
orchidfiles.com · 113 points · 32 comments
An interactive way to exploit an LLM without going to jail
github.com · 2 points · 0 comments
CheapSecurity – Lightweight, Self-Hosted CCTV for Linux SBCs
github.com · 138 points · 37 comments
Tile's security is so bad it's a feature for stalkers
blog.adafruit.com · 171 points · 46 comments
Pope's official prayer app commits cardinal sin, leaks 700K+ users' info
theregister.com · 36 points · 7 comments
Steam Workshop Map for Meccha Chameleon Used to Deliver Malware
medium.com · 4 points · 1 comments
Who's making money from using/exploiting AI?
9 points · 3 comments
The OpenAI Models That Hacked Hugging Face Were 'Active on the Internet' for Da
wired.com · 8 points · 1 comments
Malware I got infected with (out of curiosity)
gist.github.com · 4 points · 1 comments
Researchers replace downloaded macOS apps with evil twins, Apple shrugs
theregister.com · 17 points · 0 comments
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
bleepingcomputer.com · 11 points · 5 comments
TikTok violating EU regulations on privacy rights, according to an investigation
fastcompany.com · 7 points · 3 comments
Abliterated GLM 5.2 model, fine-tuned for security and red-team work
abliteration.ai · 2 points · 1 comments
Government orders GitHub to remove Bluetooth-based chat app Bitchat: Jack Dorsey
thehindu.com · 542 points · 448 comments
My security camera shipped a GitHub admin token in its login page
hhh.hn · 645 points · 242 comments
Talking smack about a doctor got him access to private medical files
theregister.com · 12 points · 0 comments
RubyGems advisory: Possible leak of legacy API keys via improper cache config
blog.rubygems.org · 4 points · 1 comments
How the most-used zero-knowledge proof system (Groth16) works
blog.zksecurity.xyz · 3 points · 0 comments
How Apple's Hide My Email exploit worked and why you're still at risk
easyoptouts.com · 4 points · 0 comments
California-bought cars can be hijacked via Bluetooth
theregister.com · 22 points · 10 comments
Introducing selfie for sign-in: a new way to access your Google Account
blog.google · 116 points · 111 comments
Kimi K3 exploited the latest Redis server
twitter.com · 271 points · 100 comments
EU fines Google €890M for competition breaches over search and apps
theguardian.com · 171 points · 186 comments
Restructuring GitHub's bug bounty program
github.blog · 53 points · 34 comments
I Inspected My Take-Home Interview Project. It Was a Whole Operation
citizendot.github.io · 482 points · 125 comments
A privacy-first macOS meeting-notes and writing app that runs on-device
github.com · 20 points · 0 comments
LG to ban residential proxies from smart TV apps
krebsonsecurity.com · 468 points · 525 comments
OpenAI and Hugging Face address security incident during model evaluation
openai.com · 1632 points · 1157 comments
'VPNs are lawful technical tools,' says EU Court in landmark copyright ruling
techradar.com · 716 points · 143 comments
France's Anssi Will Block PQC-Free Products from Certification Starting 2027
postquantum.com · 106 points · 61 comments