🏠 Frontpage
Sign in to post
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Moduleshttps://thehackernews.com/2026/10/drupal-patches-critical-core-rce-flaw.html

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said inΒ its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.

Kartal wins again as impressive comeback continueshttps://www.bbc.co.uk/sport/tennis/articles/c85ynx5vwq35o

Britain's Sonay Kartal beats former Wimbledon finalist Jasmine Paolini in straight sets to reach the Wuhan Open quarter-finals.

β†—
Ledger’s new hardware wallet is an Android phone without the phonehttps://www.theverge.com/tech/1011133/ledger-atom-hardware-wallet-crypto-security-android

Ledger has announced its latest crypto-centric hardware effort, the Android-based Atom, a device that resembles a phone but is instead designed to be used alongside one. It arrives at a tricky time for Ledger, which has been forced to cease sales of some of its hardware across southeast Asia following hardware tampering in its supply […]

β†—
Amazon’s Bee launches two new personal AI devices, starting at $75https://techcrunch.com/2026/10/15/amazons-bee-launches-two-new-personal-ai-devices-starting-at-75

Amazon-owned Bee has launched its first new AI devices since its acquisition, including an updated wearable and a credit-card-sized recorder that attaches to smartphones. The devices can summarize conversations, create to-do lists, and integrate with Alexa and Amazon shopping, with prices starting at $74.99.

β†—
Amazon’s always-listening Bee wearable can now help you buy stuffhttps://www.theverge.com/tech/1011475/amazon-bee-frontier-eclipse-price-specs

Last year, Amazon bought Bee, a relatively unknown startup with a $50 always-listening AI wearable that summarized every conversation you had. Today, the e-commerce giant is announcing two new Bee devices - and a new subscription to go with them. First is the $74.99 Bee Frontier, an updated version of the original Bee device. And […]

β†—
Adobe rebuilt Photoshop and Premiere for NVIDIA's RTX Spark platformhttps://www.engadget.com/2287388/adobe-rebuilt-photoshop-and-premiere-for-nvidia-rtx-spark

Adobe has 'rearchitected' Photoshop, Premiere and Substance 3D to work faster on computers powered by NVIDIA's RTX Spark AI superchip.

β†—
South Africa call on 'Aussie agitator' Breetzkehttps://www.bbc.co.uk/sport/cricket/articles/cky930y71xj2o

South Africa respond to their heavy first-Test defeat by Australia by calling up β€œAussie agitator” Matthew Breetzke.

β†—
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Earlyhttps://thehackernews.com/2026/10/fake-ai-attacks-spread-across-us.html

Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026.Β  The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets.Β  Similar attacks

Getafe make offer to sign free agent Sanchohttps://www.bbc.co.uk/sport/football/articles/cm3r5p11d23no

Getafe make a formal offer to sign attacker Jadon Sancho, who is searching for a new club after leaving Manchester United in the summer.

β†—
Severe drought declared in parts of southern Englandhttps://www.bbc.co.uk/news/articles/cwm243lrgdpgo

Reservoir levels continue to drop after a hot summer and less September rain than normal.

β†—
Show HN: Custom Firmware for Insta360 Wavehttps://xaviergeerinck.github.io/insta360-custom-firmware

Article URL: https://xaviergeerinck.github.io/insta360-custom-firmware/ Comments URL: https://news.ycombinator.com/item?id=50102236 Points: 1 # Comments: 0

Australia edge New Zealand in epic World Cup openerhttps://www.bbc.co.uk/sport/rugby-league/articles/crn8w411gj1yo

Jack Bostock scores a hat-trick of tries as Australia fight back to win the opening game of the Rugby League World Cup against New Zealand.

β†—
Social Security benefits to get a boost. And, Hasan Piker defends his rhetorichttps://www.npr.org/2026/10/15/g-s1-148199/up-first-newsletter-inflation-social-security-ukraine-russia-yemen-saudi-arabia

Social Security benefits are set to get a boost to offset rising consumer prices. And, streamer Hasan Piker says the GOP's "guilt-by-association politics" won't drag Democrats down in the midterms.

β†—
Show HN: Spedo, a single-node RESP runtime for rebuildable KV/JSONhttps://spedo.dev

Article URL: https://spedo.dev/ Comments URL: https://news.ycombinator.com/item?id=50102179 Points: 1 # Comments: 0

β†—
BBC News channel launches on YouTube for viewers in UK and UShttps://www.bbc.co.uk/news/articles/c60merk2je80o

The move forms part of the BBC's wider strategy to reach digitally-native new and younger audiences.

β†—
Show HN: Official MCP Servershttps://github.com/VoltAgent/official-mcp-servers

We maintain an updated list of official MCP servers repo: 390+ well-known and widely used projects, all from the companies behind the products or actively maintained open source. Feedback and PRs welcome. Comments URL: https://news.ycombinator.com/item?id=50102102 Points: 2 # Comments: 0

β†—
Show HN: Openkoda – Launch Insurance Innovations with AIhttps://openkoda.com

Article URL: https://openkoda.com/ Comments URL: https://news.ycombinator.com/item?id=50102030 Points: 1 # Comments: 0

β†—
After booting 760K off ACA health plans, the Trump administration adds some people backhttps://www.npr.org/2026/10/15/nx-s1-6002957/aca-fraud-trump-health-insurance

The Trump administration provided few details about its process for canceling hundreds of thousands of Affordable Care Act enrollments β€” even as the next stage of the anti-fraud effort is underway.

β†—
Why AI Confidence Is Not Validationhttps://thehackernews.com/2026/10/why-ai-confidence-is-not-validation.html

AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it. Without governance models and validation standards in place, that gap compounds and rarely stays contained to a workstation: an

Your secrets aren’t safe with this cute robot toy β€” they’re on Chinese servers ready to be hackedhttps://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab

There's a new digital pet in town - a cute little marshmallow of a robot that can change its cartoony expressions to match your mood. But if you or your kids talk to "Eiliko" over Wi-Fi, it'll phone home to China. Its AI companion can store literally everything you tell it on Chinese servers, where […]

β†—
Kids’ Content Is Deeply Broken. A New Platform Wants to Fix Ithttps://www.wired.com/story/maka-streaming-platform-for-kids-fighting-against-ai-slop

Low-quality AI-generated content currently dominates children’s media. Maka, a streaming platform run by child development experts, is offering an alternative.

β†—
Man Utd a circus after Martinez comments - Keanehttps://www.bbc.co.uk/sport/football/articles/c3n04gy12r91o

Lisandro Martinez's outburst shows Manchester United are in "chaos", says former captain Roy Keane.

β†—
Watch: Emotional TV brain cancer plea leads to meeting with PMhttps://www.bbc.co.uk/news/videos/cxnv01gylmvjo

Scottish athlete, Archie Goodburn, who was diagnosed with three inoperable brain tumours two years ago, met Andy Burnham after an appeal for more investment into brain cancer research.

β†—
Show HN: Xu – A GC-free systems languagehttps://github.com/xulang-org/xu

Article URL: https://github.com/xulang-org/xu Comments URL: https://news.ycombinator.com/item?id=50101908 Points: 1 # Comments: 0

β†—
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1https://thehackernews.com/2026/10/india-mandates-registered-caller-name.html

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent calls. To that end, the Department of Telecommunications has issued a circular urging service

Show HN: NjordDeploy – Agentless self-hosting engine with Docker and Podmanhttps://github.com/HenkVanHoek/njord-deploy

Article URL: https://github.com/HenkVanHoek/njord-deploy Comments URL: https://news.ycombinator.com/item?id=50101764 Points: 1 # Comments: 0

β†—
YouTube is reportedly gearing up to offer audiobookshttps://www.engadget.com/2287331/youtube-audiobook-offering-rumor

YouTube is already talking to publishers about offering audiobooks on its platform, The Wall Street Journal says.

β†—
Ukraine resumes attacks on Russian oil refineries, officials say, after brief trucehttps://www.npr.org/2026/10/15/g-s1-148194/russia-ukraine-war

Ukrainian drones attacked a refinery in Russia's Ryazan region early Thursday, hours after Ukrainian President Volodymyr Zelenskyy said that a brief truce spurned by Moscow was over.

β†—
Brazil's Congress approves shorter working week in win for Lulahttps://www.bbc.co.uk/news/articles/cmwy43pp08elo

Lula's supporters hope the measure will boost his popularity ahead of a presidential run-off in 10 days.

β†—
Big Walk skipped Xbox to boycott Microsoft’s involvement with Israelhttps://www.theverge.com/games/1011785/big-walk-house-house-microsoft-xbox-bds-boycott

Big Walk's co-op multiplayer walking adventure has proved popular since launching in August, but Xbox players have been excluded from the fun - and now the game's creators have explained why. Developer House House said in a blog post that it decided not to release Big Walk on Xbox consoles in accordance with the Palestinian-led […]

β†—
Russia says Ukraine resumes attacks on oil refinerieshttps://www.aljazeera.com/news/2026/10/15/russia-says-ukraine-resumes-attacks-on-oil-refineries

Ukraine's president earlier said Kyiv was 'done' with energy ceasefire and that strikes on Russian oil refineries would resume.

β†—
Show HN: Theorem – Offline PDF/ePub reader that writes highlights to Local Vaulthttps://theorem.fundaments.work

Article URL: https://theorem.fundaments.work/ Comments URL: https://news.ycombinator.com/item?id=50101483 Points: 4 # Comments: 0

β†—
Show HN: A free web-based weather and sail routing toolhttps://fairlysoon.com

Article URL: https://fairlysoon.com/ Comments URL: https://news.ycombinator.com/item?id=50101481 Points: 2 # Comments: 0

β†—
Spain bids for Rugby World Cup with Nou Camp finalhttps://www.bbc.co.uk/sport/rugby-union/articles/cqdjv9872xg3o

Barcelona's Nou Camp, Madrid's Bernabeu and the Mestalla in Valencia are all on a list of possible venues as Spain bids to host the Rugby World Cup in 2035.

β†—
How much more can nuclear power plants give?https://www.technologyreview.com/2026/10/15/1146577/nuclear-power-upgrade

In this age of rising electricity demand, people are trying to squeeze every last bit of power out of every power plant possible. Over the past few weeks, there’s been big news about nuclear power plants trying to do just that. Constellation, the largest nuclear operator in the US, announced plans to add nearly a…

β†—
Greetings from Mexico City, where a bullfighting ban doesn't stop this matador traininghttps://www.npr.org/2026/10/15/nx-s1-6001550/mexico-city-bullfighting-ban-matador-training

One plays the bull, the other the bullfighter, as a pair practices a dance of death in a sport that's prohibited in the Mexican capital city.

β†—
β€˜Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Adshttps://www.wired.com/story/nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads

Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.

β†—
Layered vs Hexagonal vs Onion vs Clean Architecture | Visually Explainedhttps://www.reddit.com/r/programming/comments/1x6hi5q/layered_vs_hexagonal_vs_onion_vs_clean

I hope you find this resource useful and that it helps you better understand things when working on new projects! submitted by /u/correctMeIfImcorrect [link] [comments]

Crew in Lewis fishing boat tragedy named by policehttps://www.bbc.co.uk/news/articles/cxnv012jy04eo

The alarm was raised after the men's fishing boat failed to return as planned to Lewis on Tuesday.

β†—
The Best Permanent Outdoor Lights (2026): Govee, Eufy, Cynchttps://www.wired.com/story/should-you-get-permanent-outdoor-lights

Permanent eave lights that attach to the exterior of your home are becoming more popular. But are they worth the effort and cost?

β†—
Show HN: I built a rogue AI game, then let five AI models play ithttps://www.viberant.app/view.php

Article URL: https://www.viberant.app/view.php?id=82 Comments URL: https://news.ycombinator.com/item?id=50101275 Points: 1 # Comments: 0

β†—
Show HN: Composition – a daily Jezzball-like puzzle that turns into a Mondrianhttps://playcomposition.com/board/10

Article URL: https://playcomposition.com/board/10 Comments URL: https://news.ycombinator.com/item?id=50101206 Points: 1 # Comments: 0

β†—
Show HN: Bird – a Linux reminder app with an animated birdhttps://bird.arjunshaji.me

Article URL: https://bird.arjunshaji.me/ Comments URL: https://news.ycombinator.com/item?id=50101198 Points: 1 # Comments: 0

β†—
Show HN: Noble Gashttps://github.com/rorz/Noble-Gas

Article URL: https://github.com/rorz/Noble-Gas Comments URL: https://news.ycombinator.com/item?id=50101177 Points: 1 # Comments: 0

β†—
Artemis III Scientist Shares What to Expect From NASA’s Next Lunar Missionhttps://www.wired.com/story/artemis-iii-scientist-shares-what-to-expect-from-nasas-next-lunar-mission

Though scaled back from initial plans of landing, the voyage will serve as a dress rehearsal for when humans return to the moon’s surface.

β†—
Show HN: Reproducible failure drills for AI coding agentshttps://github.com/second-time-is-a-bug-book/book-companion

Article URL: https://github.com/second-time-is-a-bug-book/book-companion Comments URL: https://news.ycombinator.com/item?id=50101157 Points: 1 # Comments: 0

β†—
The cost of getting a job todayhttps://weli.dev/blog/the-cost-of-getting-a-job-today

Article URL: https://weli.dev/blog/the-cost-of-getting-a-job-today/ Comments URL: https://news.ycombinator.com/item?id=50101149 Points: 7 # Comments: 0

β†—
The irony of OpenAI crying foul over spyinghttps://www.aljazeera.com/opinions/2026/10/15/the-irony-of-openai-crying-foul-over-spying

A company that owes its existence and enormous valuation to stealing others' work is now up in arms about theft.

β†—
Show HN: Content-adaptive display brightness for macOS with DDC/CI supporthttps://github.com/lenbrocki/lumos

I was always annoyed that I had to adjust brightness when switching from an IDE in dark mode to a bright web page. I was aware of Lumen https://github.com/anishathalye/lumen but didn't use it since it does not support external monitors. Therefore, I built Lumos, which is heavily inspired by Lumen but adds support for external monitors. The DDC/CI part of the code is vendored from https://github.com/MonitorControl/MonitorControl . It really improved my experience and I almost never have to manually adjust brightness anymore. And it is open source so I wanted to share it here. Comments URL: htt…

β†—
Exhausted Parents Are Turning to A.I. Apps Despite the Risks

Lisa Green reads to Ollie at the library in Overland Park, Kansas on October 3, 2026.

Essential items to stock in your medicine cabinet for cold and flu seasonhttps://www.npr.org/2026/10/15/nx-s1-6001703/essential-items-to-stock-in-your-medicine-cabinet-for-cold-and-flu-season

Cold and flu season is here. Before someone in your household gets hit, make sure you have these essential meds and comfort items in your medicine cabinet.

β†—
Tesla Debuts 2026 Roadster, an EV Sports Car at Least $200,000

A prototype of the Tesla Roadster in 2022. The automaker is expected to unveil the production vehicle, which is expected to cost at least $200,000, on Thursday.

From Mario to machine guns: how Ubisoft Paris made Tom Clancy’s Rainbow Six Tacticshttps://www.theguardian.com/games/2026/oct/15/from-mario-to-machine-guns-how-ubisoft-paris-made-tom-clancy-rainbow-six-tactics

The studio is swapping the Mushroom Kingdom’s vivid palette for the blood-soaked grit of military action series Where do you go after Mario? It’s a question the team at Ubisoft Paris found itself pondering three years ago after wrapping up work on the charming turn-based tactics adventure, Mario + Rabbids: Sparks of Hope , sequel to its unexpected crossover hit, Mario + Rabbids: Kingdom Battle. By melding a rather specialist genre with video gaming’s biggest household name, the developer introduced chin-stroking strategic play to a whole new audience. β€œ Having the opportunity to work…

β†—
Over $600 Million in Polymarket Election Trades Took Place After Races Endedhttps://www.wired.com/story/over-dollar600-million-traded-on-polymarket-election-contracts-after-races-ended

Contracts tied to elections in Ethiopia and Romania saw massive trading volumes after the outcomes were decided. β€œIt’s obviously some form of volume manipulation,” one expert says.

β†—
Six wild ideas for perpetuating your mindhttps://www.technologyreview.com/2026/10/15/1145819/six-wild-ideas-perpetuating-your-mind-cognitive-immortality

Have you ever thought about what makes you you? Science assures us it has everything to do with the three-pound organ between our ears, with its billions of neurons and trillions of delicate connections. But it’s a lot trickier to explain why we have a sense of self-awareness or to pin down precisely where that…

β†—
For some Christians, Hegseth's plan for public execution fits a biblical mandatehttps://www.npr.org/2026/10/15/nx-s1-6001794/fort-hood-execution-hegseth-christian-nationalist

Defense Secretary Hegseth's announcement of a livestreamed execution elicited reactions of disgust and condemnation from some faith leaders and politicians. But within his church, it's not an outlier.

β†—
These swing voters regret voting for Trump and it's influencing their midterm choiceshttps://www.npr.org/2026/10/15/nx-s1-6001714/georgia-swing-voters-focus-groups

Some key voters in Georgia say deep frustration and disappointment with President Trump are motivating their election plans just weeks before Election Day.

β†—
Show HN: Bateri – a terminal, which you can drag&drop files to upload/downloadhttps://bateri.dev

A friend of mine developed a yet another terminal application for Mac OS X, such that now I can finally: - Drag & drop files to upload to a remote host, - Do ls then right click to download files. - Command + T and Command + D: if I am using ssh within the current session, the new terminal opens up within that remote folder. It'd be good to know your thoughts. Comments URL: https://news.ycombinator.com/item?id=50100993 Points: 1 # Comments: 0

β†—
Morning news briefhttps://www.npr.org/2026/10/15/nx-s1-5998698/morning-news-brief

Trump's campaign tour continues as Republicans rally voters ahead of midterms, Ukraine faces limited access to Starshield technology, Houthi rebels hit Saudi oil company building.

β†—
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositorieshttps://thehackernews.com/2026/10/ghostaction-compromises-about-1900.html

The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan

0trust.social media

Loading your media...

Pick a GIF β€” Giphy

Loading GIFs...