Lab worker built a fake PC to nuke his lunch
The office sink is always a horror. Managers worried this one glowed
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks
Also called Copy Fail 2 and tracked as CVE-2026-43284 and CVE-2026-43500, the exploit was disclosed before a patch was released. The post New ‘Dirty Frag’ Linux Vulnerability Possi…
Resurrected ‘Crimenetwork’ Marketplace Taken Down, Administrator Arrested
The second iteration of the German-speaking online crime marketplace had over 22,000 users and more than 100 sellers. The post Resurrected ‘Crimenetwork’ Marketplace Taken Down, Ad…
Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads
A malicious Hugging Face repository managed to take a spot in the platform's trending list by impersonating OpenAI's Privacy Filter open-weight model to deliver a Rust-based inform…
Mythos Finds a Curl Vulnerability
Article URL: https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=48091737 Points: 703 # Comments: 282
Sovereign cloud is only possible if you’re Chinese or American: Gartner
Which is awkward for European orgs who fear US clouds might leave the continent
Over 500 Organizations Hit in Years-Long Phishing Campaign
Victims span across the aviation, critical infrastructure, energy, logistics, public administration, and technology sectors. The post Over 500 Organizations Hit in Years-Long Phish…
ASIA IN BRIEF: China’s agentic AI policy wants to keep humans in the loop
PLUS: Robot becomes Buddhist monk in Korea; TikTok spending $25bn in Thailand; Baidu floating chip biz; and more!
Yes, local LLMs are ready to ease the compute strain
In The Register's Kettle podcast we discuss how Anthropic might be thinking about space to ease computing pain, but Claude Code on your laptop is way more practical
Hackers abuse Google ads, Claude.ai chats to push Mac malware
Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searching for "Claude mac download" may come across sponsored searc…
Incident Report: CVE-2024-YIKES
Article URL: https://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes.html Comments URL: https://news.ycombinator.com/item?id=48086082 Points: 712 # Comments: 179
Police shut down reboot of Crimenetwork marketplace, arrest admin
German authorities have shut down a relaunch version of the criminal marketplace 'Crimenetwork' that generated more than 3.6 million euros, and arrested its operator. [...]
Memory godboxes could offer relief from the RAMpocalypse
Amid the AI-fueled memory crunch, will Compute Express Link finally have its moment to shine?
Both Fedora and Ubuntu will get AI support – soon
Furores are fermenting in the forums
Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker to leak its ent…
HP stuffed a PC into a keyboard. We took it for a spin
It's not much cheaper than an equivalent laptop, so who's this for, exactly?
JDownloader site hacked to replace installers with Python RAT malware
The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows and Linux installers, with the Windows payload found depl…
Google tweaks Chrome AI privacy wording, insists processing stays on-device
Deletion of a longstanding privacy assurance sparks concerns
Fake OpenAI repository on Hugging Face pushes infostealer malware
A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project to deliver information-stealing malware to Windows user…
macOS 27 threatens to bury Time Capsule, FOSS brings a shovel
Apple's old backup boxes only speak AFP and SMB1, but NetBSD under the hood gives them one last shot
London’s BT Tower to get rooftop swimming pool
Imagine taking a dip 177m above the streets of London’s West End
UK wants fresh fingerprints on £300M biometrics platform
Home Office probes supplier interest as core police and immigration system heads for support shake-up
cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now
cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager (WHM) that could be exploited to achieve privilege escalation, code execution, and denia…
Akamai surges on big LLM deal as Cloudflare dims
Good times, bad times
GPT-5.5 may burn fewer tokens, but it always burns more cash
It’s not just gas prices skyrocketing. Frontier-model pricing keeps climbing too
Friday Squid Blogging: Giant Squid Live in the Waters of Western Australia
Evidence of them has been found by analyzing DNA in the seawater. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. …
ShinyHunters Claims Second Attack Against Instructure
The edtech company is struggling to wrest control from its hackers. PII belonging to hundreds of millions of people is on the line.
Tech is now rolling out the old grievance grift
Not just for hated US Presidents, now even tech bros lament their foes
TNO062: SONiC for Open Networking with Jeff Doyle
Scott Robohn is joined by networking legend Jeff Doyle to help us understand SONiC: Software for Open Networking in the Cloud. SONiC is an open-source network operating system and …
TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms
Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of targeting 59 banking, fintech, and cryptocurrency platforms. The a…