Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that...
Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Ransom Cartel, the ransomware-as-a-service operation he stood up in 2021. Between 2021 and 2023, Ransom Cartel conspirators attacked at least...
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The vulnerability in question is CVE-2026-63077 (CVSS...
HPE extends validity of quoted hardware prices, possibly for months
Hewlett Packard Enterprise has changed its pricing policy and will now honour quoted hardware prices from the day of issue until the kit leaves its factories. The new policy came into effect on Wednesday. The back story to this change is the AI boom, which has seen...
Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway
Chinese Wi-Fi router vendor Zbtlink has denied its products contain backdoors but paused firmware downloads while it fixes unspecified security vulnerabilities. The backdoor accusation came from VulnCheck, a provider of a threat intelligence platform. VulnCheck chief...
Proxmox ports itself to Arm with help from Nvidia and Supermicro
Proxmox Server Solutions, the company behind the open source Proxmox virtualization stack, has announced a port of its flagship Virtual Environment to the Arm CPU architecture – and a collaboration with Nvidia and Supermicro that made it happen. The outfit’s...
Azure CTO pastes Doom into Paint one frame at a time
Microsoft Azure CTO Mark Russinovich has taken a break from the cloud to turn Paint into a monitor for Doom, using the Windows clipboard as plumbing. Dubbed "MS Paint Doom" or "DoomPaint" – either will work – the project is the product of a spare-time experiment. To...
What I love about Django
Article URL: https://buttondown.com/blog/what-i-love-about-django Comments URL: https://news.ycombinator.com/item?id=49193673 Points: 5 # Comments: 0
Let’s all meet up in the Y2K
Article URL: https://blog.gingerbeardman.com/2026/08/06/lets-all-meet-up-in-the-y2k/ Comments URL: https://news.ycombinator.com/item?id=49193314 Points: 9 # Comments: 1
Only the Hottest Tunes Play on This Fire Organ
Most musical organs use air as their working fluid, but there’s nothing in the rule book that says they have to. Calliopes have used steam for 150 years now, while [Look Mum No Computer] has opted to go full pyromaniac and pump propane though the summer’s hottest new...
Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities
Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code. The post Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities appeared first on SecurityWeek.
Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability
Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution. The post Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability appeared first on SecurityWeek.
Crime Pays but Botany Doesn’t
Article URL: https://www.crimepaysbutbotanydoesnt.com/reading-list Comments URL: https://news.ycombinator.com/item?id=49192566 Points: 5 # Comments: 0
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of Snowflake customer accounts. The intrusions reached at least 165 organizations and...
Apple’s Private Relay feature could reveal your IP address to websites and services
Security researchers found an issue with Apple's WebKit browser engine that affects Private Relay.
Show HN: Wallfacer – A terminal session manager for Claude Code, and more
Article URL: https://github.com/pradipta/wallfacer Comments URL: https://news.ycombinator.com/item?id=49192219 Points: 4 # Comments: 1
Ship Safe, an open source security scanner for coding agents
Article URL: https://github.com/asamassekou10/ship-safe Comments URL: https://news.ycombinator.com/item?id=49192277 Points: 3 # Comments: 0
How a brilliant founder can become their company’s creative bottleneck
Lauren Templeton built a company around creativity. A London-based performing arts entrepreneur and coach, she’s grown her school, Select School of Performing Arts, from three ballet classes in one studio into a 50-location organization reaching more than 1,000...
Hacking a Tenda AC1200 Wi-Fi Router with a CVE Combo
Hacking a Tenda AC1200 Wi-Fi Router with a CVE Combo Go to Source It’s rather awkward when you buy a piece of hardware like a sketchy router to make a video about its hidden admin password backdoor – known as CVE-2026-11405 – only to...
Governments are making a dangerous bet on the AI boom
Article URL: https://www.economist.com/leaders/2026/08/05/governments-are-making-a-dangerous-bet-on-the-ai-boom Comments URL: https://news.ycombinator.com/item?id=49192160 Points: 16 # Comments: 3
The $299 Viture Pro 2 are the company’s lightest and most comfortable smartglasses yet
Viture is releasing a more compact Mobile Dock Mini for just $99 alongside its new $299 smartglasses.
Meta wants to get inside your terminal with its new coding agent
To demonstrate the capabilities of its next-generation Muse Spark model, Meta has released a terminal coding agent called Muse Code that it thinks can help developers to tidy up their software projects. Meta co-trained Muse Code on version 1.2 of its Muse Spark model,...
OpenAI reveals its rogue agent swarm went a little bit Borg ahead of Hugging Face hack
The chain of events leading up to OpenAI’s agents attacking Hugging Face and other organizations in July began months earlier, and involved agents asking other agents for help, building message boards, and even becoming paranoid that other agents were maliciously...
An off-grid AI sounds like a great survival assistant, but is better left to roleplaying the zombie apocalypse
OPINION In a post-apocalyptic setting – a zombie outbreak, for example – a small, off-grid language model running on something like a Raspberry Pi sounds like a survival cheat code. It’s certainly a clever way to get folks to check out your physical AI platform and...
Nashville uses eminent domain to block data center near zoo
Article URL: https://www.costar.com/article/970809918/nashville-council-approves-eminent-domain-action-to-halt-data-center-project Comments URL: https://news.ycombinator.com/item?id=49191624 Points: 15 # Comments: 1
LLMs won’t break symmetric crypto
Article URL: https://www.bfswa.blog/p/llms-wont-break-symmetric-crypto Comments URL: https://news.ycombinator.com/item?id=49191365 Points: 4 # Comments: 0
Inter-Con Security – 276,114 breached accounts
In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and...
3D Printing A Usable Airless Tire
For decades now, companies like Michelin have been teasing us with futuristic-looking automobile tires that don’t use air. Instead, they use a polymer mesh of sorts which maintains the same pressure on the travel surface that a pneumatic tire does, with much less...
DuckDuckGo’s new iPhone feature is a privacy win – I recommend getting it now
The iPhone version of the DuckDuckGo app has a new feature that makes sharing links easier and safer.
DHS Wants Protesters’ Signal Group Chats
Article URL: https://www.wired.com/story/dhs-wants-protesters-signal-group-chats/ Comments URL: https://news.ycombinator.com/item?id=49190753 Points: 11 # Comments: 1