🏠 Frontpage
Sign in to post
How we found 24 Android vulnerabilities using our open source AI security agenthttps://github.blog/security/how-we-found-24-android-vulnerabilities-using-our-open-source-ai-security-agent

A look at the targeted AI taskflows behind these findings, the critical Android bugs they uncovered, and how to run the same open-source agent on your own app. The post How we found 24 Android vulnerabilities using our open source AI security agent appeared first on The GitHub Blog .

β†—
Man City CEO 'defiant' over Premier League chargeshttps://www.bbc.co.uk/sport/football/articles/ckz7zxzdwl7lo

Manchester City chief executive Ferran Soriano issues a "defiant" message to other club executives about the club being found guilty of a majority of Premier League charges, BBC Sport has been told.

β†—
Show HN: iCli – Postgres health reporter and index optimizerhttps://github.com/abhiraj-ku/iCli

Article URL: https://github.com/abhiraj-ku/iCli Comments URL: https://news.ycombinator.com/item?id=49882674 Points: 1 # Comments: 0

β†—
Show HN: Remria – A Cloud Computer OShttps://remria.com

Made this for myself where I work from the browser on my phone and laptop without my laptop lid ajar. You get an always-on 4GB CPU VM with 32GB storage that connects to both your existing ChatGPT and Claude subscriptions. Underneath it runs Codex and Claude Code, depending on the model you're using in each chat. You can do everything you usually can on a VM, just through chat or visual file system navigation. Comments URL: https://news.ycombinator.com/item?id=49882628 Points: 1 # Comments: 0

Meta-Led Anti-Terrorism Group Faces Mass Resignation of Expert Advisershttps://www.wired.com/story/independent-advisers-resign-en-masse-from-big-techs-anti-terrorism-group

Meta and other tech giants are pushing through structural changes at the Global Internet Forum to Counter Terrorism that outside researchers allege will weaken oversight of an already embattled consortium.

β†—
Show HN: Semloop – Semantic loop detection for AI agent traceshttps://github.com/VBS2004/semloop

Article URL: https://github.com/VBS2004/semloop Comments URL: https://news.ycombinator.com/item?id=49882593 Points: 1 # Comments: 0

β†—
OpenAI’s AI agents need to catch uphttps://www.theverge.com/ai-artificial-intelligence/1001590/openai-devday-2026-aeon-ai-agent

OpenAI popularized the modern generative AI chatbot, but as its 2026 DevDay event approaches, it's fallen behind in one of the industry's hottest categories: continuously running, consumer-facing AI agents. On Tuesday, it will likely try to capture the lead in that race. Rumors abound that OpenAI will release its own AI agent, dubbed Aeon - […]

β†—
AI Agents Are Privileged Users; Who Is Auditing Their Access?https://www.darkreading.com/vulnerabilities-threats/ai-agents-are-privileged-users-who-is-auditing-their-access

Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileges that could turn them into the next generation of insider threats.

β†—
Trump finalizes rule to make cars less fuel efficienthttps://www.theverge.com/news/1001610/trump-weakens-fuel-efficiency-standards

The US Department of Transportation finalized its plans today to weaken fuel efficiency standards, calling it "among the largest deregulatory actions under the second Trump Administration." It's a nail in the coffin for Biden-era standards that would have required fleet average fuel economy to reach 50.4 miles per gallon by model year 2031. President Donald […]

β†—
Nvidia launches new platform for reining in rogue AI agentshttps://techcrunch.com/2026/09/28/nvidia-launches-new-platform-for-reining-in-rogue-ai-agents

As the debate rages over whether the recent spate of rogue AI agents is a step toward AGI or a more conventional engineering problem, Nvidia is offering its own answer to problem. Nvidia CEO Jensen Huang on Monday introduced a toolkit of software and hardware products that add independent security layers around AI agents to […]

β†—
AI is supercharging hacking, and your local hospitals and banks aren’t readyhttps://www.theverge.com/ai-artificial-intelligence/1001427/ai-is-supercharging-hacking-and-your-local-hospitals-and-banks-arent-ready

In March, Janice Malone began getting calls about suspicious activity from her nonprofit organization, Vivian's Door. Vivian's Door, headquartered in Alabama, typically provided training, resources, and community to underserved and minority-owned businesses. The work sometimes put it in close contact with these companies' financial data, which was stored on its systems. But suddenly, concerned callers […]

β†—
GrapheneOS – When an App Is Slowhttps://blog.wirelessmoves.com/2026/09/grapheneos-when-an-app-is-slow.html

Article URL: https://blog.wirelessmoves.com/2026/09/grapheneos-when-an-app-is-slow.html Comments URL: https://news.ycombinator.com/item?id=49882208 Points: 8 # Comments: 0

IAM for AI agents: A Practical Enterprise Frameworkhttps://thehackernews.com/2026/09/iam-for-ai-agent.html

What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how to evaluate framework choices, and what runtime evidence proves an agent behaved as intended.

What a US diesel export ban could mean for youhttps://www.bbc.co.uk/news/articles/cky9z3r00l9eo

The proposal aims to protect US consumers from rising costs, but it could trigger major economic waves both at home and across the world.

β†—
Crack the Core Challenge giftshttps://www.reddit.com/r/Defcon/comments/1wslzyq/crack_the_core_challenge_gifts

Defcon Crack The Core team put on a hell of a fun challenge this year! I came in 2nd. Great competitors, great times, fun opens. Thank you so much for the gift, #CrackTheCore team! Very much looking forward to next years challenges πŸ”“ submitted by /u/Lockpicking_Dev [link] [comments]

β†—
So long Google, and thanks for all the nudeshttps://lecaro.me/20260921-google-less.html

Article URL: https://lecaro.me/20260921-google-less.html Comments URL: https://news.ycombinator.com/item?id=49881951 Points: 10 # Comments: 2

Mahmood signals rethink on migrants' right to remainhttps://www.bbc.co.uk/news/articles/cmz7zxdy4gllo

The home secretary has been under pressure to water down the proposals from some Labour MPs, including Angela Rayner.

β†—
Show HN: Flo State, a fast, minimalist, native Markdown editor for macOShttps://flocrivello.com/flostate

Was tired of every good markdown editor out there being electron and their consuming 500mb + 3% CPU when idle(!) when they're just editing text. So I built one from scratch in pure native. Launches in 0.1s Takes 0.0% CPU when idle Consumes 50MB memory even with a large workspace open Binary is 15MB Supports all markdown β€” LaTeX, Mermaid, tables, image attachments etc Fully open source, GPLv3 license Hat tip to writer.computer which inspired the idea! Comments URL: https://news.ycombinator.com/item?id=49881892 Points: 1 # Comments: 0

β†—
Claude Sonnet 5.5https://www.anthropic.com/news/claude-sonnet-5-5

Article URL: https://www.anthropic.com/news/claude-sonnet-5-5 Comments URL: https://news.ycombinator.com/item?id=49881889 Points: 19 # Comments: 5

β†—
This setting change can make your Android phone feel instantly fasterhttps://www.engadget.com/2268945/simple-setting-change-make-android-phone-faster

This easy Android tweak makes navigating your phone and switching apps feel almost immediate. And it's really easy to set up. Here's how.

β†—
Sonnet 5.5https://www.anthropic.com/claude-sonnet-5-5

Article URL: https://www.anthropic.com/claude-sonnet-5-5 Comments URL: https://news.ycombinator.com/item?id=49881850 Points: 204 # Comments: 142

β†—
Scientists solve 1840s space weather mysteryhttps://arstechnica.com/science/2026/09/scientists-solve-1840s-space-weather-mystery

19th century Nature account of 1841 train delayed by geomagnetic storm got year wrongβ€”thanks to a typo.

I made a visual workspace for AI Automationshttps://www.biom.dev

Article URL: https://www.biom.dev/ Comments URL: https://news.ycombinator.com/item?id=49881777 Points: 3 # Comments: 1

β†—
Definitely not Windows (Win 11 parody)https://definitelynotwindows.com

Article URL: https://definitelynotwindows.com/ Comments URL: https://news.ycombinator.com/item?id=49881747 Points: 26 # Comments: 4

β†—
Who Wrote Elizabeth I's Most Scathing Letters?https://www.smithsonianmag.com/history/who-wrote-elizabeth-is-most-scathing-letters-new-research-suggests-the-tudor-queens-male-secretaries-revised-her-correspondence-to-emphasize-her-temper-180989565

Article URL: https://www.smithsonianmag.com/history/who-wrote-elizabeth-is-most-scathing-letters-new-research-suggests-the-tudor-queens-male-secretaries-revised-her-correspondence-to-emphasize-her-temper-180989565/ Comments URL: https://news.ycombinator.com/item?id=49881692 Points: 3 # Comments: 0

Aldi boss says some loyalty discounts 'dupe' customershttps://www.bbc.co.uk/news/articles/c6dj4vkwg8j0o

Aldi is the only major supermarket chain that doesn't operate a loyalty scheme, which are hugely popular and used by millions of shoppers.

β†—
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388Mhttps://thehackernews.com/2026/09/bitget-says-attacker-exploited-third.html

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget's wallet system. Exchanges keep most

The Teen Portraits That Captivated Sofia Coppolahttps://www.newyorker.com/culture/photo-booth/the-teen-portraits-that-captivated-sofia-coppola

Article URL: https://www.newyorker.com/culture/photo-booth/the-teen-portraits-that-captivated-sofia-coppola Comments URL: https://news.ycombinator.com/item?id=49881606 Points: 4 # Comments: 0

β†—
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victimshttps://thehackernews.com/2026/09/rathat-android-malware-console-uses.html

RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy hasΒ traced nearly 100 deploymentsΒ of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware collects from each phone,

Launch HN: Vespper (YC F24) – SOTA Docx MCPhttps://www.vespper.com/blog/launching-vespper-docx-mcp

Hey HN! We're Dudu and Topaz from Vespper ( https://vespper.com ). Vespper is an MCP that lets AI agents efficiently edit Word documents, powered by our fine-tuned model. It's currently 3Γ— faster, 2Γ— cheaper and more accurate than the closest alternative. Check out an overview of how the product works here: https://youtu.be/odKxsgPjzzw We came to work on this problem after spending a year building an AI document editor for pharma companies. Before that, Topaz(myself) was a senior SWE at Snyk, working on distributed systems, and Dudu was a deep learning engineer at Viz.ai, building computer…

β†—
OpenAI still doesn't seem to have a handle on all of its rogue AI activityhttps://techcrunch.com/2026/09/28/openai-still-doesnt-seem-to-have-a-handle-on-all-of-its-rogue-ai-activity

Article URL: https://techcrunch.com/2026/09/28/openai-still-doesnt-seem-to-have-a-handle-on-all-of-its-rogue-ai-activity/ Comments URL: https://news.ycombinator.com/item?id=49881484 Points: 5 # Comments: 0

β†—
Google is killing off Gemini’s Gems in favor of β€˜skills’https://techcrunch.com/2026/09/28/google-is-killing-off-geminis-gems-in-favor-of-skills

As all-in-one AI agents like Meta's Muse and Instinct take off, Google is opting to end a feature which built task-specific agents.

β†—
Show HN: Open-source agent runtime using your ChatGPT or Claude subscriptionhttps://github.com/noclickapp/noclick

Hey HN! Sharing my work on an open-source agent runtime (like n8n, but for agents). It's OSI open-source under AGPL-3. People have been using it to build agents that handle support queries, automated resolution, WhatsApp chatbots, etc. Comments URL: https://news.ycombinator.com/item?id=49881366 Points: 2 # Comments: 0

β†—
Highlights from Git 2.56https://github.blog/open-source/git/highlights-from-git-2-56

The open source Git project just released Git 2.56. Here is GitHub's look at some of the most interesting features and changes introduced since last time. The post Highlights from Git 2.56 appeared first on The GitHub Blog .

β†—
Show HN: GoTrivia – Free multiplayer browser party games, no signups or adshttps://gotrivia.org

Play real-time multiplayer trivia, Pictionary, Scattergories, and more in your browser. No signup, no ads, just share a link. Comments URL: https://news.ycombinator.com/item?id=49881360 Points: 2 # Comments: 2

Show HN: Sprout – a TUI habit tracker written in Rusthttps://github.com/kb019/sprout

Hi! I built this little terminal app to track my habits! I built this mainly to learn Rust, but it turned into something I actually use every day now. All data is stored in a single SQLite file locally. The app is built using Ratatui, a Rust library for building terminal UIs. Really fun to work with! Also contributed a couple of issues back to Ratatui while building this. You can check it out on gh: https://github.com/kb019/sprout Thanks! Comments URL: https://news.ycombinator.com/item?id=49881237 Points: 1 # Comments: 0

β†—
Iran court upholds lashes sentence for singer who performed without hijabhttps://www.bbc.co.uk/news/articles/crn45ed1kqqgo

Parastoo Ahmadi was convicted of "offending public decency" after singing while wearing a sleeveless dress during a livestreamed concert.

β†—
Prosecutors are reexamining a Cornell fraternity rape case. Here's what we knowhttps://www.npr.org/2026/09/28/nx-s1-5983480/cornell-fraternity-rape-chi-phi-case-updates

New York prosecutors are reopening an investigation into an alleged rape case at Cornell University in 2024. The alleged victim recently filed a lawsuit against seven members of Chi Phi fraternity.

β†—
Show HN: Open Source AMS for Bambu Labshttps://github.com/Amsozzer1/AMS

Article URL: https://github.com/Amsozzer1/AMS Comments URL: https://news.ycombinator.com/item?id=49881210 Points: 1 # Comments: 1

β†—
Show HN: I'm a dermatologist and I vibe coded a 3D biophysical skin modelhttps://www.drmagnuslynch.com/skin

I'm a dermatologist. A year ago I posted a skin cancer quiz I vibe coded with Gemini 2.5 Pro. A top comment said that was the limit of vibe coding. This year I tried something more ambitious: SkinLab, a biophysical model of human skin that runs in the browser using WebGL. You can cut it or wound it and it heals realistically to form a scar. Then you can treat the scar with laser and watch the healing process. - 1.2 million voxels (0.25 mm resolution) for epidermis, dermis and fat. - Spring lattice with a J-shaped collagen fibre law and tension along the skin's lines - Healing as coupled ODEs…

How Pew Research Center is – and is not – using AI in our workhttps://www.pewresearch.org/decoded/2026/09/28/how-pew-research-center-is-and-is-not-using-ai-in-our-work-2

Article URL: https://www.pewresearch.org/decoded/2026/09/28/how-pew-research-center-is-and-is-not-using-ai-in-our-work-2/ Comments URL: https://news.ycombinator.com/item?id=49881135 Points: 3 # Comments: 0

β†—
When can we say AI made a scientific discovery?https://www.technologyreview.com/2026/09/28/1145230/when-can-we-say-ai-made-a-scientific-discovery

This story originally appeared in The Algorithm, our weekly newsletter on AI. To get stories like this in your inbox first,Β sign up here. Last Wednesday, Anthropic announced that earlier this year it had launched a molecular biology lab, where Claude agents read and conjecture about hard biology problems and human scientists run experiments on what…

β†—
UK tries to stop Trump's diesel export banhttps://www.bbc.co.uk/news/articles/cmx2z3vgy5xwo

John Healey said the government is in talks with the US over Donald Trump's threat to stop exports.

β†—
Florida seeks a ban on ChatGPT acting like a personhttps://www.theverge.com/ai-artificial-intelligence/1001527/chatgpt-florida-ban-first-person-human-attributes-kids

Florida Attorney General James Uthmeier is calling for a judge to block OpenAI from "giving ChatGPT false human attributes," a few months after Florida sued the AI company over safety concerns. According to Uthmeier, users are lulled into a false sense of security by the AI bot, as "ChatGPT's use of language, including first-person pronouns […]

β†—
OpenAI keeps bulldozing mathematicianshttps://www.theverge.com/ai-artificial-intelligence/1001477/openai-math-advisory-group

In a chaotic few months, OpenAI has demonstrated it can do two things with remarkable consistency: make impressive breakthroughs in mathematics, then colossally screw up announcing them. OpenAI is now trying to do better. Somehow, it has botched that too. OpenAI's latest attempt to repair fractured relations with a mathematical community it has repeatedly alienated […]

β†—
Driver Ticketed for No Insurance Just Because Flock (YC 2017) Said She Didn'thttps://www.techdirt.com/2026/09/28/driver-ticketed-for-no-insurance-despite-having-insurance-just-because-flock-said-she-didnt

Article URL: https://www.techdirt.com/2026/09/28/driver-ticketed-for-no-insurance-despite-having-insurance-just-because-flock-said-she-didnt/ Comments URL: https://news.ycombinator.com/item?id=49880992 Points: 4 # Comments: 0

β†—
Meta launches enterprise AI platform, hires MongoDB CEO to lead new initiativehttps://techcrunch.com/2026/09/28/meta-launches-enterprise-ai-platform-hires-mongodb-ceo-to-lead-new-initiative

Meta says it will focus on bringing its full technology stack, including Muse, Meta Business Agent, Muse API, Muse Code, and more to businesses and developers.

β†—
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millionshttps://www.darkreading.com/application-security/chrome-store-poper-blocker-spyware-downloaded-millions

A purported ad-blocker exfiltrates reams of sensitive information, and benefits from having Google's stamp of approval despite researcher warnings.

How many times are you paying for the same file?https://www.theregister.com/storage/2026/09/28/sponsored-how-many-times-are-you-paying-for-the-same-file/5299562

A Register dinner in Midtown on 27 October takes on the file infrastructure distributed teams still run and nobody chose, off the record

β†—
The safest and easiest way to debloat Windows 11https://www.engadget.com/2268915/debloat-windows-11-safest-easiest-way

Windows 11 includes a ton of unnecessary junk, some of which you can remove manually and some of which is best handled by a tool.

β†—
Walmart won’t hike prices based on your shopping history, CEO sayshttps://www.theverge.com/tech/1001492/walmart-dynamic-pricing-digital-shelf-labels

Walmart says it won't change product prices based on your personal information or the time of day, as reported earlier by The Wall Street Journal. In a letter to customers, Walmart CEO John Furner writes that the company's switch to digital shelf labels is meant to save store associates time, rather than dynamically change prices. […]

β†—
French police fire tear gas at migrants on beachhttps://www.aljazeera.com/video/newsfeed/2026/9/28/french-police-fire-tear-gas-at-migrants-on-beach

French police have used tear gas to disperse migrants attempting to cross the English Channel to Britain from France.

β†—
Show HN: ChuteChat – Browser-based E2EE chat with no accounts requiredhttps://chutechat.online

Article URL: https://chutechat.online/ Comments URL: https://news.ycombinator.com/item?id=49880704 Points: 2 # Comments: 0

Show HN: Destroy Any Website with Stickmanhttps://destroy.spritefusion.com

Article URL: https://destroy.spritefusion.com/ Comments URL: https://news.ycombinator.com/item?id=49880601 Points: 6 # Comments: 3

β†—
Show HN: Destroy Any Website with Stickmanhttps://destroy.spritefusion.com

Article URL: https://destroy.spritefusion.com/ Comments URL: https://news.ycombinator.com/item?id=49880601 Points: 2 # Comments: 1

β†—
Trump's immigration push has largely spared farms. Idaho dairymen worry it won't last.https://www.npr.org/2026/09/28/nx-s1-5976810/trumps-immigration-push-has-largely-spared-farms-idaho-dairymen-worry-it-wont-last

America's farms have largely escaped the president's aggressive immigration crackdown. But as ICE sweeps continue across the nation, farmers are uneasy because many still can't find enough workers.

β†—
Show HN: Cordum Edge – A local firewall to sandbox AI coding agentshttps://github.com/cordum-io/cordum](https://github.com/cordum-io/cordum)

Article URL: https://github.com/cordum-io/cordum](https://github.com/cordum-io/cordum) Comments URL: https://news.ycombinator.com/item?id=49880505 Points: 1 # Comments: 0

Show HN: Low Poly Earth – The whole planet in 3D, built from OpenStreetMap datahttps://lowpolyearth.pages.dev

After seeing demos of Claude and GPT construct Manhattan and other city neighborhoods in 3D I was inspired to make something similar but for the entire Earth. It's a low poly version of Google Earth built using open street and elevation data as a native Apple silicon Mac app. It was built entirely using Codex and Claude Code and took about 80 days. Comments URL: https://news.ycombinator.com/item?id=49880443 Points: 3 # Comments: 0

β†—
Women protest in the streets of Delhi after string of sexual assaultshttps://www.bbc.co.uk/news/videos/cm70lpg5z45go

BBC correspondent Azadeh Moshiri reports from Delhi, where hundreds of women are protesting.

β†—

0trust.social media

Loading your media...

Pick a GIF β€” Giphy

Loading GIFs...