11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to bypass Secure Boot on most systems using the modern firmware standard. "An attacker exploiting one of these vulnerable...
How Pentera Turns AI Security Workflows into Validation Engines
AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat...
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and validate stolen credentials in Microsoft Entra ID...
Show HN: I RL-trained an agent that trains models with RL (for –$1.3k)
Article URL: https://github.com/Danau5tin/ai-trains-ai Comments URL: https://news.ycombinator.com/item?id=48905919 Points: 7 # Comments: 0
Beautiful Type Erasure with C++26 Reflection
Article URL: https://ryanjk5.github.io/posts/rjk-duck/ Comments URL: https://news.ycombinator.com/item?id=48905914 Points: 8 # Comments: 3
1Password moves into AI cost management, betting that token spend is the next enterprise budget crisis
1Password on Tuesday launched AI Spend and Consumption Management, a new capability embedded in its SaaS Manager platform that gives IT and finance teams a unified, real-time view of how their organizations consume and spend on AI services from vendors including...
Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar
A ClaudeBleed-linked vulnerability reportedly persists across eight patches, exposing potentially sensitive data to other extensions. The post Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar appeared first on SecurityWeek.
‘Talk to Spotify’ lets you create playlists and learn about songs with voice commands
Spotify is finally letting users control the app with their voice to create playlists or learn about songs.
Windows Search just got a faster, cleaner overhaul – how to try it today
I tried the new Windows Search, and it offers a refreshing change with an updated layout that makes it easier to find what I need.
Coding agents think ahead of time
Article URL: https://arxiv.org/abs/2607.05188 Comments URL: https://news.ycombinator.com/item?id=48905764 Points: 5 # Comments: 0
Delivering on time is harder than companies admit
I’m genuinely proud when we commit to something at the start of the month and deliver by the deadline. People take on-time delivery for granted. In most client relationships, on-time delivery is treated as a baseline expectation or the floor rather than the ceiling....
Open Book Touch Makes Crowd Funding Debut
If you have even the slightest interest in open hardware e-readers, you’ve certainly heard of [Joey Castillo]’s Open Book project. We’ve covered his efforts to develop an affordable reader that delivers a Kindle-like experience without the Orwellian megacorp trappings...
12 YouTube default settings to change right now for a more enjoyable experience
YouTube works well with default settings, but I tighten some privacy controls and enable a few features to make it even better.
Germany set to restrict its Freedom of Information Act
Article URL: https://www.dw.com/en/germany-freedom-of-information-act/a-77939695 Comments URL: https://news.ycombinator.com/item?id=48905290 Points: 19 # Comments: 1
Even Realities’ Productivity-Focused Smart Glasses Bet on Users Creeped Out by Constant Recording
Would you swap out the camera and speakers for a head-up display?
‘The bots are alive!’ Jailbroken Gemini spun up new C2 server for Russian fraudster in just 6 minutes
EXCLUSIVE A jailbroken Google Gemini did 90 percent of the work in a credential- and cryptocurrency-stealing spree, including spinning up a new command-and-control (C2) server in just six minutes, according to a TrendAI report shared exclusively with The Register. The...
Don’t let an AI chatbot pick your password, ever
Are AI-generated passwords truly random? Research suggests AI passwords are far less secure than you might think.
The Definition of Done
Article URL: https://adi.bio/done Comments URL: https://news.ycombinator.com/item?id=48905122 Points: 8 # Comments: 0
Codex scraped the ICM website and discovered 2026 Fields Medal winner list
Article URL: https://phemex.com/news/article/2026-fields-medal-winners-list-leaked-includes-two-peking-university-alumni-92948 Comments URL: https://news.ycombinator.com/item?id=48905091 Points: 12 # Comments: 0
Punch Yourself in the Face with Reality
Article URL: https://adi.bio/reality Comments URL: https://news.ycombinator.com/item?id=48905118 Points: 8 # Comments: 1
Soaring Memory Prices Dampen Demand for Budget Smartphones
Rising DRAM and NAND prices are squeezing budget smartphones, forcing manufacturers to cut features while premium models continue advancing, widening the gap between low-cost and flagship devices. The post Soaring Memory Prices Dampen Demand for Budget Smartphones...
Hands off our VPNs, privacy groups tell UK ministers
Privacy campaigners, browser makers, and VPN providers have united to warn the UK government against restricting virtual private networks, saying age-gating the technology would weaken online security while doing little to stop kids dodging social media bans. The Open...
How to stop Claude from saying load-bearing
Article URL: https://jola.dev/posts/how-to-stop-claude-from-saying-load-bearing Comments URL: https://news.ycombinator.com/item?id=48905248 Points: 9 # Comments: 2
Show HN: Rejourney – Open-source revenue leak prediction for web and mobile apps
Hello there (General Kenobi's favorite way to start the conversation),I’m Rashid, a sophomore at UT Austin. I built Rejourney.co (https://rejourney.co/) to predict issues with your apps and websites before they happen, based on real user session recordings.Here is a...
Actegories
Article URL: https://bartoszmilewski.com/2026/06/30/actegories/ Comments URL: https://news.ycombinator.com/item?id=48904902 Points: 3 # Comments: 0
The Future Worth Building Is Human – Thinking Machines Lab
Article URL: https://thinkingmachines.ai/blog/the-future-worth-building-is-human/ Comments URL: https://news.ycombinator.com/item?id=48904905 Points: 5 # Comments: 0
The great digital fatigue: How digital burnout is changing social media use
Article URL: https://blog.incogni.com/digital-fatigue-and-burnout/ Comments URL: https://news.ycombinator.com/item?id=48904855 Points: 6 # Comments: 0
Show HN: Beautiful QR Codes
Article URL: https://scanwayy.com Comments URL: https://news.ycombinator.com/item?id=48905030 Points: 7 # Comments: 0
Codex starts encrypting prompts, uses ciphertext for inference instead
Article URL: https://github.com/openai/codex/issues/28058 Comments URL: https://news.ycombinator.com/item?id=48905028 Points: 19 # Comments: 1
This ‘Smart Strap’ Claims to Turn Any Watch Into a Health Tracker
Are you really planning on wearing your Rolex to bed, though?