Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
The Little Book of Reinforcement Learning
74 points, 10 comments on Hacker News
CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV
Article URL: https://hellorecon.com/blog/cve-2026-25089 Comments URL: https://news.ycombinator.com/item?id=48940895 Points: 28 # Comments: 0
The Zilog Z80 has turned 50
Comments
'Likweli': A new monkey species discovered in the Congo Basin
57 points, 8 comments on Hacker News
Ring-Zero: Scaling Zero RL to a Trillion Parameters for Emergent Reasoning
Article URL: https://arxiv.org/abs/2607.12395 Comments URL: https://news.ycombinator.com/item?id=48940603 Points: 40 # Comments: 14
Mathematics of Data Science
Article URL: https://arxiv.org/abs/2607.11938 Comments URL: https://news.ycombinator.com/item?id=48939896 Points: 19 # Comments: 0
Timeline Scan – AI fixes the dates on your scanned photos
Article URL: https://timelinescan.com/ Comments URL: https://news.ycombinator.com/item?id=48939764 Points: 8 # Comments: 15
Helium escaping from atmosphere of nearby rocky exoplanet in a habitable zone
Article URL: https://www.science.org/doi/10.1126/science.aea9708 Comments URL: https://news.ycombinator.com/item?id=48939742 Points: 33 # Comments: 4
Show HN: Libretto PR agents – Automatically fix failing playwright scripts
Libretto PR agents is a free TypeScript library for maintaining Playwright browser automations. Add one line of code to your existing Playwright scripts and it lets an agent automatically open GitHub PRs fixing the script when it fails. A few months ago we released Libretto, a CLI + coding-agent skill for building deterministic browser automations. The idea was that for many browser workflows, especially repetitive business workflows, you don’t need an AI agent making decisions at runtime. You want deterministic Playwright scripts that are inspectable, faster to run, and much cheaper than repeatedly calling an AI browser agent. That helped us generate Playwright and network-request-based scripts, but websites can often change which breaks deterministic scripts. So maintaining a variety of scripts at scale is a headache. If you already have a bunch of functioning Playwright scripts, the last thing you want is to rewrite everything around a new runtime AI framework like browser-use or st
LM Studio Bionic: the AI agent for open models
Article URL: https://lmstudio.ai/blog/introducing-lm-studio-bionic Comments URL: https://news.ycombinator.com/item?id=48939662 Points: 57 # Comments: 17
The privacy problems hidden in your period tracker
Article URL: https://www.bbc.com/future/article/20260715-how-period-trackers-share-womens-private-details Comments URL: https://news.ycombinator.com/item?id=48939641 Points: 37 # Comments: 10
$100 AI Music Video: Claude Fable 5 vs. GPT-5.6 Sol
Article URL: https://www.tryai.dev/blog/ai-music-video-arena-claude-vs-gpt-5.6 Comments URL: https://news.ycombinator.com/item?id=48939524 Points: 58 # Comments: 41
AWS Continuum to Enable Agentic Code Security for Enterprises
Amazon Web Services has recently introduced AWS Continuum, a new integrated security platform to automate the discovery, enforcement, and remediation of security issues across codebases, dependencies, and applications. AWS Continuum launches with four agentic capabilities, aiming at the entire vulnerability lifecycle: penetration testing, code review, threat modelling, and code vulnerabilities. By Gianmarco Nalin
We're Going to Make Out Like Bandits
Comments
AttoChess, a complete, playable chess program for 16-bit x86 DOS in 278 bytes
Article URL: https://nicholas-afk.github.io/AttoChess/ Comments URL: https://news.ycombinator.com/item?id=48938372 Points: 22 # Comments: 13
CD sales growth outpaced vinyl in the first half of 2026
Article URL: https://consequence.net/2026/07/the-cd-revival-is-getting-hard-to-ignore/ Comments URL: https://news.ycombinator.com/item?id=48937398 Points: 35 # Comments: 37
Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack
Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court on Thursday, 16 July 2026, for the 2024 hack of Transport for London. The attack left 148 TfL systems inoperable and forced all 27,000 of the transport authority's employees into an office to get their passwords reset in person. Both the NCA and the CPS put TfL's losses and recovery
Adaptional (YC S25) Is Hiring
Article URL: https://www.ycombinator.com/companies/adaptional/jobs Comments URL: https://news.ycombinator.com/item?id=48937125 Points: 0 # Comments: 0
Launch HN: Traceforce (YC S26) – Company-wide security monitoring for AI apps
Hey HN, we’re Xia and Varun, the founders of Traceforce (https://www.traceforce.ai/). Traceforce provides visibility and control over AI apps such as ChatGPT, Claude etc directly on all devices (laptops, sandboxes, virtual machines) by discovering not just which apps are being used but also how they are connected to other data sources via MCPs. We also have an open-source dynamic MCP pentesting tool https://github.com/traceforce/mcp-xray to detect vulnerable MCPs. The purpose of Traceforce is to: - Give a company’s employees a standardized way to ensure that AI software running on their device is operating safely - Give the company’s security team visibility of the activities of AI software on the company’s devices, and to detect and prevent unsafe actions and security breaches as early as possible. How Traceforce works 1. Traceforce is installed on each device as a lightweight binary and browser extension. 2. Within 30 minutes, the device is uploading live data to the company profile,
1-Bit LLM in the Browser
40 points, 11 comments on Hacker News
Detecting LLM-Generated Texts with “Classical” Machine Learning
Article URL: https://blog.lyc8503.net/en/post/llm-classifier/ Comments URL: https://news.ycombinator.com/item?id=48936880 Points: 121 # Comments: 88
Decoy Font
Article URL: https://www.mixfont.com/experiments/decoy-font Comments URL: https://news.ycombinator.com/item?id=48936584 Points: 302 # Comments: 80
NotebookLM is now Gemini Notebook
Article URL: https://blog.google/innovation-and-ai/products/gemini-notebook/notebooklm-gemini-notebook/ Comments URL: https://news.ycombinator.com/item?id=48936451 Points: 184 # Comments: 104
Microsoft Comic Chat is now open source
Article URL: https://opensource.microsoft.com/blog/2026/07/16/microsoft-comic-chat-is-now-open-source/ Comments URL: https://news.ycombinator.com/item?id=48936426 Points: 427 # Comments: 96
Why teens deserve access to safe AI
Learn how OpenAI is making ChatGPT safer for teens with age-appropriate protections, learning tools, parental controls, and expert partnerships.
Show HN: BambooGrid – Open-source web UI for power grid modeling and power flow
12 points, 2 comments on Hacker News
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A harmless sync setting. Then the handoff goes bad, the box starts talking to someone else, and the damage moves faster than the explanation. Old bugs are back, weak defaults are earning their keep, and some attack paths are so plain they barely feel like research. Here’s the mess.
We're building Postgres in Rust. Using the LLVM of databases
Comments
Immersive Linear Algebra Book with Interactive Figures (2015)
123 points, 24 comments on Hacker News
How to Train a Gen AI Kick Drum Model on Your Old Linux Desktop with 6GB VRAM
6 points, 1 comments on Hacker News
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles