@hacker.at.thenote.appFake CAPTCHAs are tricking users into running malware on their own devices
Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, a…
#hackernews #news
@hackernewstop5.bsky.socialI Love Software Rendering
https://www.jamesfmackenzie.com/2026/10/13/i-love-software-rendering/
@hacker.at.thenote.appMicrosoft: Windows Server 2022 reached end of mainstream support
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]
#hackernews #microsoft #news
@hacker.at.thenote.appGoogle’s new Universal Cart tracks prices on items you want now – plus 3 other tricks
Google unveiled two new shopping tools ahead of the holiday buying season. Here’s what to know.
#hackernews #news
@hacker.at.thenote.appNGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.
There are three memory bugs that F5, the company b…
#hackernews #news
@kdmsnr.com🌐ジェブがトロッコ問題に遭遇する
https://zachlandes.com/trolley-problem/
via #HackerNews
@hacker.at.thenote.appX purges 13,000 accounts linked to suspected meddling ahead of US midterms
Platform points to Iran, Russia, and China but provides no public evidence for attribution
#hackernews #news
@hacker.at.thenote.appPrice Comparison Is More of a Data Problem Than a Pricing Problem
Discover how AI & data normalization make product price comparisons more accurate by comparing unit costs, package sizes, & active ingredients across retailers.
#hackernews #news
@hacker.at.thenote.appNext.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.
…
#hackernews #news
@hacker.at.thenote.appAnthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI…
#anthropic #hackernews #news
@hacker.at.thenote.appDrupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.1…
#hackernews #news
@hacker.at.thenote.appPolice arrests 95 suspects in international CSAM crackdown action
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through onli…
#hackernews #news
@hacker.at.thenote.appFake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns betwee…
#hackernews #news
@hackernewstop5.bsky.social
@hackernewstop5.bsky.socialYet another way to invoke functions without parentheses
https://blog.ikaes.de/yet-another-way-to-invoke-functions-without-parentheses/
@kdmsnr.com🌐私がセルフホストしているもの
https://viceconsole.fyi/blog/2026/10/10/what-i-self-host/
via #HackerNews
@hacker.at.thenote.appLegal Aid Agency hackers made off with records dating back to 1978
Nearly 50 years of data caught up in breach, with probation service records also among the haul
#hackernews #news
@hacker.at.thenote.appWhy AI Confidence Is Not Validation
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable w…
#hackernews #news
@hacker.at.thenote.appCISA flags exploited flaws in Palo Alto, Cisco and Ahsay products
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vul…
#hackernews #news
@hackernewstop5.bsky.socialThe insider trading you're allowed to do
https://coached.com/essays/the-insider-trading-youre-allowed-to-do/
