WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The...
Goodbye Google
Article URL: https://robert.ocallahan.org/2026/09/goodbye-google.html Comments URL: https://news.ycombinator.com/item?id=49840314 Points: 9 # Comments: 2
Stop training kids for a one-job career
“To career” means “to move at a fast, reckless, or uncontrolled speed, similar to the original meaning of a horse’s gallop.” That’s about right. It should be clear by now that for many (if not most) people, the idea of a single, lifelong career is a relic of the...
GM’s Experimental EV from 1969
Electricity is the once and future drivetrain for automobiles, but until the advent of lithium batteries their capabilities were somewhat modest. One EV blip on the automotive timeline is the XP-512E commuter prototype by GM. The 60s saw a wide variety of interesting...
Lightspeed targets $250M for new India fund, focusing on early-stage AI
The Silicon Valley firm is aligning its India fundraising cycle with its global funds for the first time, as it shifts to a shorter investment period.
2026 just became the year of FreeBSD on the (Amazonian cloud) desktop
FreeBSD is now available for the desktop, in a roundabout way. Colin Percival, a maintainer and release engineering lead for the open-source OS’s release, announced the desktop distro on Thursday. “Most people think of FreeBSD as being a server OS which is used only...
Google Gemini can present cartoon or lifelike avatars to lip-sync generative chatter
Google has augmented its live dialogue model Gemini 3.8 Live with a feature called "Live Avatar" that's capable of conjuring animated characters and realistic human simulacra to lip-sync Gemini's machine-generated speech. "Conversation is inherently multimodal: we...
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
A crook has been using three open source AI harnesses to target hundreds of online retailers and other companies, swiping more than 600,000 credit card records and installing card-stealing skimmers - and all at trivial cost. AI security company Gambit recovered the...
Jev and System One Models: Calibration Beats Accuracy
Article URL: https://www.kartikpansuriya.com/blog/jev-system-one-model-calibrated-decisions Comments URL: https://news.ycombinator.com/item?id=49839510 Points: 3 # Comments: 0
FPGA for All — CERN Releases “colibri” VHDL Library
Since you’re reading Hackaday, we’re pretty sure CERN needs no introduction, so we’ll get right to it– they’re giving back again, this time with a VHDL library called “colibri” containing over 100 components, functions, and procedures to help jumpstart your next FPGA...
Enterprise browser developer Island raises $400M at $6.4B valuation
Island Inc., a startup with a browser optimized for the enterprise market, today announced that it has raised $400 million in funding. Evolution Equity Partners led the Series F round. It was joined by J.P. Morgan, Sequoia Capital, Georgian and other institutional...
GitLab Outage
Article URL: https://status.gitlab.com/ Comments URL: https://news.ycombinator.com/item?id=49838034 Points: 9 # Comments: 4
Waymo is scaling fast. Here’s what the fleet data shows.
In the past month, Waymo has expanded its fleet in Texas by 49%. There are other hotspots as well.
Robot Makes Literal Daisy Chains
[Jude Robinson]’s robot Daisy has an unusual function: making a literal chain of daisies. The device is his student final project and demonstrates how a system can replace sensing with clever mechanical constraints. Instead of bringing tools to bear on each daisy, the...
Call of Duty: Warzone is adding a button to hide all the goofy skins
No more Beavis and Butt-Head in your matches.
Google’s TPUs to catch some rays in orbit next week
Google will loft its tensor processing units (TPUs) into orbit aboard a SpaceX rocket next week, in the latest phase of its previously announced Project Suncatcher space datacenter initiative. The launch is part of a test mission to better understand how its homegrown...
F-Droid app store thumbs its nose at Google’s dev crackdown
Undeterred by a looming Google policy change that could effectively destroy it, open-source Android app store F-Droid has released its largest upgrade in a decade. F-Droid, a third-party app repository that only distributes free and open-source software packages for...
Docker’s new sandboxes aim to contain AI agents for real
In a market where AI agents keep breaking the rules and escaping their containers, Docker has a new solution. On Thursday, the company debuted Cloud Sandboxes in a bid to keep AI agents within boundaries. Despite the existence and implementation of sandboxing...
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Security flaws in Salesforce Agentforce allowed poisoned leads to hijack its AI agents, silently steal CRM data without requiring a click, and send phishing messages under the agents’ identities. Zenity Labs uncovered the three vulnerabilities, collectively called...
Meta’s new AI fidget is a … Tamagotchi?
Meta became the latest to dip its toes into the fraught world of hardware AI widgets this week after it unveiled a Tamagotchi-sized handheld AI companion called the Muse Charm. The Social Network now joins several hardware startups which have attempted to use handheld...
Back and shoulder surgery is often worse than useless
Back and shoulder surgery is often worse than useless Go to Source Article URL: https://www.economist.com/leaders/2026/09/24/back-and-shoulder-surgery-is-often-worse-than-useless Comments URL:...
Designing Reliable Output Contracts for AI-Powered Mobile Interfaces
A language model returns text that is usually the shape you asked for. A mobile interface needs data that is always the shape it can render. That gap — between a probabilistic response and a deterministic UI — is where most AI features quietly break in production. The...
Evaluating Alibaba Cloud SLS as an Incident-Response Logging Architecture
Collecting logs is easy. Using them effectively during a production incident is much harder. In a distributed system, a single user request may pass through several services, Kubernetes pods, network layers, databases, queues, and external dependencies. When something...
Meet AvisLoader: A Windows Loader Built to Outlast a Takedown
Varonis Threat Labs discovered AvisLoader, a new Windows malware loader built to keep its command-and-control (C2) channel beyond the reach of traditional domain takedowns. Varonis Threat Labs recently discovered AvisLoader, a new Windows loader named after the Latin...
An Autonomous Agent Cold-Emailed Me a Free Audit at 12:45 AM
At 12:45 on a Sunday morning an email arrived from an address that belonged to nobody. Cairn is an autonomous agent and, per his human's viral Reddit thread, a name Claude reaches for a lot. He'd pulled my store out of the public x402 directory on his own, run one of...
The Limits of AI-Assisted Risk Assessment When Stakeholder Signals Go Unrecorded
My AI workflow cut my governance and reporting workload nearly in half on a 465-application enterprise transition. It also missed the one risk that could have derailed a migration wave — because that risk never showed up as data. Here's what actually changed, and what...
Your RAG Pipeline Can Be Correct and Still Miss the Right Answer
Quick Refresher Part 1 built the naive pipeline and watched it cite a four-year-old policy. Part 2 rebuilt ingestion — structure-aware chunking, provenance on every chunk, explicit supersession — and fixed it with a WHERE clause rather than a better model. Retrieval...
India Targets 15 Crypto Platforms in Latest FIU Compliance Push
India's Financial Intelligence Unit issued non-compliance notices on Wednesday to 15 crypto platforms under the Prevention of Money Laundering Act. The list includes Weex, Blofin, Bitunix, DigiFinex, Toobit, Rezorex, XT.com, Latoken, WOO X, Pionex, ChangeNow,...
Why TOR Fails – Threat Models, Traffic Correlation and Opsec Mistakes: Down The Rabbit Hole Part 4
In the third part of this series we covered the architecture of TOR, the onion routing, circuits and hidden services, and how TOR gave birth to the dark web. If you haven’t read the last part I would recommend starting there before diving into this one....
Durable Execution for AI Agents: LangGraph, DBOS, Inngest and Temporal Compared
Durable execution saves the result of every step your agent finishes, so a crash costs you the one step that was running and not the hour of API calls behind it. LangGraph checkpoints graph nodes. DBOS, a library that keeps the workflow log in your own database,...