Security / Privacy (2025-09)

LLM security agent finds vulnerability in LLM engineering platform (depthfirst.com)

HN 1 pts 0 comments by ponderwonder Sep 30, 2025 AI / Machine Learning Security / Privacy thread

Android 16 public tags don't match security patch level (issuetracker.google.com)

HN 10 pts 1 comments by zb3 Sep 30, 2025 Security / Privacy thread

Mind the encryptionroot: How to save your data when ZFS loses its mind (sambowman.tech)

HN 158 pts 58 comments by 6581 Sep 30, 2025 Security / Privacy thread

Book: Advanced Windows Exploitation and Defense: A Bottom-Up Approach (zenodo.org)

HN 1 pts 2 comments by thevieart Sep 30, 2025 Security / Privacy Culture / Philosophy / History / Reading thread

Zeroday.cloud – the first cloud open-source hacking competition (zeroday.cloud)

HN 2 pts 0 comments by niroc Sep 30, 2025 Programming (General)Security / Privacy thread

Ruby Central's "security measures" leave front door wide open (joel.drapper.me)

HN 28 pts 0 comments by zorpner Sep 30, 2025 Security / Privacy thread

Shellshock (2014, 2025) (dwheeler.com)

L 8 pts 3 comments by jmiven Sep 30, 2025 historicalsecurity Security / Privacy Culture / Philosophy / History / Reading thread

Claude in Cyber Competitions (red.anthropic.com)

L 2 pts 0 comments by bryce Sep 30, 2025 securityvibecoding AI / Machine Learning Security / Privacy thread

How Deno protects against NPM exploits (deno.com)

HN 5 pts 1 comments by emschwartz Sep 30, 2025 Web Development Security / Privacy thread

Warnings about Cisco vulns under active exploit are falling on deaf ears (theregister.com)

HN 8 pts 0 comments by rntn Sep 30, 2025 Security / Privacy thread

Surreptitious Surveillance (blog.cr.yp.to)

HN 5 pts 0 comments by nabla9 Sep 30, 2025 Security / Privacy thread

Strengthening NPM security: Important changes to authentication and tokens (github.blog)

HN 1 pts 0 comments by di Sep 30, 2025 Security / Privacy thread

Principles of Proactive Cybersecurity (youtube.com)

HN 1 pts 0 comments by marcusfrex Sep 30, 2025 Security / Privacy thread

The UK constitution is more vulnerable than the US constitution (prospectmagazine.co.uk)

HN 4 pts 1 comments by robtherobber Sep 30, 2025 Security / Privacy thread

VMScape: Exposing and Exploiting Incomplete Branch Predictor Isolation in Cloud (comsec.ethz.ch)

HN 3 pts 0 comments by mpweiher Sep 30, 2025 Security / Privacy thread

Google CTF 2025 – webz : Exploiting zlib's Huffman Code Table (velog.io)

HN 107 pts 21 comments by rot22 Sep 30, 2025 Security / Privacy thread

Cyber attacks: '80%' of ransomware victims pay up, insurer says (news.sky.com)

HN 4 pts 0 comments by austinallegro Sep 30, 2025 Security / Privacy thread

Private Cloud Compute: A new frontier for AI privacy in the cloud (security.apple.com)

HN 2 pts 0 comments by vednig Sep 30, 2025 AI / Machine Learning Security / Privacy thread

Submarine cable security is all at sea, and UK govt too timid to act says report (theregister.com)

HN 6 pts 1 comments by Bender Sep 29, 2025 Security / Privacy thread

What Is Zero Trust Security? A Simple Guide for Businesses (polygraf.ai)

HN 4 pts 1 comments by sarvarjafarov Sep 29, 2025 Security / Privacy thread

Tile Tracking Tags Can Be Exploited (wired.com)

HN 3 pts 0 comments by mspecter Sep 29, 2025 Security / Privacy thread

Privacy loophole: don't even "Dismiss" the "How is Claude doing this session?" (keydiscussions.com)

HN 4 pts 0 comments by spenvo Sep 29, 2025 AI / Machine Learning Security / Privacy thread

Security folks, which would you feel more comfortable with?

HN 3 pts 4 comments by hellosecpeeps Sep 29, 2025 Security / Privacy thread

Hi all,<p>I work at a SaaS company that needs to securely connect our cloud control plane to customer on-premise infrastructure in order to run orchestration and automation tasks. We’re trying to avoid requiring customers to open inbound firewall rules or stand up full VPNs.<p>We’ve narrowed it down...

Show HN: AirAuth – Modern Authentication for NextJS (github.com)

HN 2 pts 0 comments by n10l Sep 29, 2025 Web Development Security / Privacy thread

Learn Kubernetes Security book, second edition just published (amazon.com)

HN 4 pts 0 comments by bernardoortega Sep 29, 2025 Data / Databases / Infrastructure Security / Privacy Culture / Philosophy / History / Reading thread

Show HN: DataXLator – Client-Side JSON ↔ YAML Converter (Privacy-First) (kcreed713.github.io)

HN 1 pts 1 comments by kevinreed Sep 29, 2025 Security / Privacy thread

Hi HN, I'm launching DataXLator, a utility I built to solve a problem many of us face: needing quick, reliable conversion between JSON and YAML for config files (Kubernetes, Ansible, etc.) without trusting a random server with sensitive data. The core feature is that all free conversions run 10...

Offensive Security After the Price Collapse (medium.com)

HN 1 pts 0 comments by danieltk76 Sep 29, 2025 Security / Privacy thread

Flock Safety says AI surveillance could stop all crime (san.com)

HN 1 pts 2 comments by Kaibeezy Sep 29, 2025 AI / Machine Learning Security / Privacy thread

Google Says Android PKVM Earns Highest Level of Security Assurance (securityweek.com)

HN 1 pts 0 comments by transpute Sep 29, 2025 Security / Privacy thread

Let's Encrypt Production ACME API Disruption (status.io)

HN 1 pts 1 comments by moebrowne Sep 29, 2025 Programming (General)Security / Privacy thread