Security stories
Security stories on Hacker News range from critical CVE disclosures and supply-chain attacks to privacy policy changes and encryption debates. Practitioners, researchers, and skeptics weigh in with technical depth that mainstream coverage often misses.
This page aggregates the security and privacy discussions worth reading — vulnerability write-ups, incident postmortems, and the community's reaction to new threats and defenses.
454 stories archived · Page 15 of 16
RSS feed for SecurityI found a WordPress RCEs with GPT5.6 and $25
slcyber.io · 404 points · 227 comments
Dashlane Loses List of Subprocessors
dashlane.com · 5 points · 0 comments
1-in-2 phones sold in Africa exfiltrate whole-device activity to China
nowsecure.com · 6 points · 0 comments
A Roomba recorded a woman on the toilet. How did screenshots end up on Facebook? (2022)
technologyreview.com · 23 points · 6 comments
North Korean Hackers Compromise Go and PHP Packages
opensourcemalware.com · 3 points · 1 comments
Reframing smart glasses as 'pervert glasses'
this.weekinsecurity.com · 14 points · 16 comments
China tells devs to ditch Claude Code over 'backdoor code' fears
theregister.com · 3 points · 1 comments
Meta's glasses will turn off the camera if you tamper with the privacy light
theverge.com · 4 points · 15 comments
China Says It Has Found Security Vulnerabilities in Anthropic's Claude Code
wsj.com · 4 points · 4 comments
OpenBSD has a use-after-free allowing local privilege escalation to root
nvd.nist.gov · 277 points · 165 comments
Hackers can use 9 of the most popular AI tools to assemble botnets
arstechnica.com · 4 points · 0 comments
Private Messaging App Isn't WhatsApp or Signal, It's Delta Chat
lifehacker.com · 8 points · 1 comments
AI Meets Cryptography 1: What AI Found in Cloudflare's Circl
blog.zksecurity.xyz · 111 points · 12 comments
Apache Shiro security framework releases 3.0.0
shiro.apache.org · 4 points · 0 comments
Quiet Sky, a weather app built for privacy
github.com · 2 points · 1 comments
An American Privacy Emergency
scottaaronson.blog · 413 points · 139 comments
EFF letter to FTC on X consent order [pdf]
eff.org · 153 points · 93 comments
Countries are competing to see which can carry out mass surveillance the best
mullvad.net · 314 points · 128 comments
The AI shift in cyber risk: why leaders must act now
cyber.gov.au · 12 points · 5 comments
White House delays US voting-machine vulnerability report
reuters.com · 125 points · 143 comments
Usbliter8: an A12/A13 SecureROM Exploit
ps.tc · 194 points · 37 comments
US holds off blacklisting DeepSeek, more than 100 firms deemed security risks
reuters.com · 537 points · 603 comments
How memory safety CVEs differ between Rust and C/C++
kobzol.github.io · 141 points · 252 comments
Exploiting Slack's video embeds to achieve E2EE communication
v1c.rocks · 31 points · 3 comments
Malware developers added nuclear and biological weapons text to to their spyware
twitter.com · 460 points · 239 comments
Chopped, Stored, Secured – The Story of the Hash Function
0xkrt26.github.io · 42 points · 17 comments
Mozilla to UK regulators: VPNs are essential privacy and security tools
blog.mozilla.org · 808 points · 356 comments
A 0-click exploit chain for the Pixel 10
projectzero.google · 448 points · 241 comments
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq
lists.thekelleys.org.uk · 378 points · 243 comments
Gmail registration now requires scanning a QR code and sending a text message
discuss.privacyguides.net · 637 points · 517 comments