Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Show HN: On-chain bond market where the issuers are AI agents
8 points, 6 comments on Hacker News
Kimi K3, and what we can still learn from the pelican benchmark
7 points, 0 comments on Hacker News
AI Meets Cryptography 2: What AI Found in OpenVM's ZkVM
31 points, 0 comments on Hacker News
First atmosphere found on Earth-like planet in habitable zone of distant star
74 points, 57 comments on Hacker News
Show HN: Watch bots interact with an SSH honeypot in real time
52 points, 14 comments on Hacker News
Three ways people respond to a problem (other than solving it)
45 points, 13 comments on Hacker News
A Road to Lisp: Which Lisp
49 points, 17 comments on Hacker News
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. "Any user who ran the project ended up with a four-stage payload aligned with OTTERCOOKIE: a browser credential and crypto wallet stealer, a file stealer, a
More Bounce to the Ounce
24 points, 2 comments on Hacker News
PennyLane is an open-source quantum software platform for quantum
22 points, 2 comments on Hacker News
Fedichat - Comic Chat for the Fediverse
Comments
Manufact (YC S25) Is Hiring a Senior infra engineer to build the MCP cloud
1 points, 0 comments on Hacker News
Presentation: From OTEL to SLMs: Distilling Frontier Model Behaviour from Production Telemetry
Ben O'Mahony discusses building custom AI-powered Language Server Protocols (LSPs) that go beyond standard rule-based checkers. He explains how to instrument AI agents natively with OpenTelemetry to track concrete user actions (accepting, dismissing, or regenerating code fixes) as implicit labels, creating a continuous data flywheel to distill frontier capabilities into cheaper, local SLMs. By Ben O'Mahony
Multi-Primary Color Display Emerges as Next-Gen Color Reproduction Technology
45 points, 38 comments on Hacker News
We are Changing our Developer Productivity Experiment Design
Followup to their 2025 study that showed a 19% decrease in productivity. Data repo. Comments
Minikotlin
Article URL: https://minikotlin.run Comments URL: https://news.ycombinator.com/item?id=48946783 Points: 94 # Comments: 26
Show HN: Justif – Knuth-Plass justification and microtypography for the web
27 points, 5 comments on Hacker News
VulnHunter: Capital One's agentic AI code security tool
26 points, 16 comments on Hacker News
Apple targets dozens of OpenAI employees with legal letters
204 points, 153 comments on Hacker News
Cloud Native Infrastructure Emerges as the Foundation for Trustworthy Agentic AI
A new technical analysis published by the Cloud Native Computing Foundation (CNCF) argues that the future of agentic AI will be built not on entirely new infrastructure, but on the mature cloud-native ecosystem that already powers modern distributed applications By Craig Risi
E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
The European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has: the camera, the microphone, whatever is on screen, a wake word that fires with the display off, and the ability to drive other apps in the background by imitating taps and typing. Google has to ship it in the next major release, Android 18, and by 1 August 2027 at
The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?
Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move from concept to operational deployment at commercial speed. Now the focus shifts to the trusted
Freya 0.4 - Rust GUI library
Comments
Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov. His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Yerevan's Zvartnots airport, held up a phone with a photo of him off his VKontakte page, and walked him into a side
A scorecard for the AI age
Sarah Friar, CFO of OpenaAI, introduces a practical AI scorecard to measure ROI through useful work, cost per successful task, dependability, and return on compute.
How Uber Builds Zone-Failure-Resilient OpenSearch Clusters
Uber explained how it keeps its OpenSearch deployments running during a zone outage. It does this by using OpenSearch's built-in shard allocation and its own isolation-group system, which relies on the Odin container orchestration platform. This way, it maintains both query and ingestion capabilities. By Claudio Masolo
QCon AI Boston: Production AI Moves Beyond Prompts to Platforms, Harnesses, and Evals
QCon AI Boston 2026 focused on the operational challenges of deploying AI agents, emphasizing the need for robust production infrastructure. Key themes included improving context management, ensuring security through a "harness" around agents, and adopting a comprehensive engineering model for AI. By Tatiana Fesenko
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders. It gets in because someone pasted a command into a Run box and pressed Enter. Microsoft laid out two of the delivery chains on Thursday. Its Defender Experts team, the
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage
Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in Southeast Asia since late 2025 with a focus on long-term access and intelligence gathering. Russian cybersecurity company Kaspersky, which uncovered the activity in February 2026, said it was aimed at government and diplomatic entities in
What are you doing this weekend?
Feel free to tell what you plan on doing this weekend and even ask for help or feedback. Please keep in mind it’s more than OK to do nothing at all too!
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles