Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs of being developed with assistance from a large language model (LLM), albeit with not so successful results. "While the AI complied with their request to generate botnet code, it included a safety disclaimer that the developer failed
Inkling: Our Open-Weights Model
Article URL: https://thinkingmachines.ai/news/introducing-inkling/ Comments URL: https://news.ycombinator.com/item?id=48924912 Points: 435 # Comments: 106
GitHub for Beginners: Your roadmap to mastering the GitHub essentials
New to GitHub? This beginner's guide explains version control, repositories, and pull requests—plus everything else you need to start working confidently on GitHub. The post GitHub for Beginners: Your roadmap to mastering the GitHub essentials appeared first on The GitHub Blog.
Artie (YC S23) Is Hiring Software Engineers
Article URL: https://jobs.ashbyhq.com/artie Comments URL: https://news.ycombinator.com/item?id=48923833 Points: 0 # Comments: 0
Your AI Is Not a Tool
Comments
The Psychology of Software Teams
59 points, 13 comments on Hacker News
Open-source memory for coding agents, synced over SSH
Article URL: https://github.com/vshulcz/deja-vu/ Comments URL: https://news.ycombinator.com/item?id=48923111 Points: 92 # Comments: 19
Show HN: misa77 - a codec that decodes 2x faster than LZ4 (at better ratios)
I've spent the last few months working on this codec. It has the following characteristics: - SOTA decompression throughput in its ratio class - Decent ratios (comparable to LZ4 at high effort levels) - Slow compression Results on the tarred Silesia corpus on Intel x86-64 follow: codec decode ratio encode misa77 -0 5219 MB/s 42.64% 54.5 MB/s misa77 -1 4274 MB/s 39.65% 51.2 MB/s lz4 2505 MB/s 47.59% 371 MB/s lz4hc -12 2531 MB/s 36.45% 7.31 MB/s Comments URL: https://news.ycombinator.com/item?id=48922838 Points: 115 # Comments: 37
Launch HN: Coasty (YC S26) – An API for computer-use agents
Hey HN, we’re Nitish and Prateek, the founders of Coasty (https://coasty.ai/computer-use). We’re building computer-use agents that can complete workflows inside legacy desktop software and web applications without usable APIs. Developers send Coasty a natural-language task either through our consumer app or through our API, select a machine or browser environment, and any relevant credentials or files. The agent then operates the interface through screenshots, mouse, and keyboard input, verifies the result, and returns a structured run record with screenshots, actions, outputs, and errors. Here is a raw demo of an agent completing a workflow in a legacy application(It’s a mockup): https://drive.google.com/file/d/1ZghU_3vsAYhHVz1bsvE0pkvZYk7... A lot of important software is still difficult to automate. Healthcare teams submit prior authorizations through payer portals, accounting teams enter data into desktop applications, and operations teams move information between internal systems,
Running Gemma 4 26B at 5 tokens/sec on a 13-year-old Xeon with no GPU
Article URL: https://www.neomindlabs.com/2026/06/08/running-gemma-4-26b-at-5-tokens-sec-on-a-13-year-old-xeon-with-no-gpu/ Comments URL: https://news.ycombinator.com/item?id=48922434 Points: 199 # Comments: 115
OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet owners out of their recovery phrase. On an infected PC, the request comes from inside the wallet's own desktop software. Sometimes it waits until you plug the device in first. The page is malicious. The app around it is the real one you installed, and
DEA to Temporarily Schedule 7-Oh and Related Substances to Protect Public Safety
15 points, 7 comments on Hacker News
OpenAI loses trademark dispute at EU court
Article URL: https://dpa-international.com/economics/urn:newsml:dpa.com:20090101:260715-930-389143/ Comments URL: https://news.ycombinator.com/item?id=48921461 Points: 37 # Comments: 13
CVE-2026-59208: Cross-Issuer Account Takeover in n8n
Article URL: https://www.strix.ai/blog/n8n-cross-issuer-account-takeover Comments URL: https://news.ycombinator.com/item?id=48921422 Points: 10 # Comments: 1
Stripe Benchmark Shows AI Agents Build Integrations but Struggle with Validation
Stripe introduces a benchmark suite to evaluate whether AI agents can build real-world Stripe integrations across backend, frontend, and browser-based checkout workflows. The study examines end-to-end software engineering capability, focusing on execution, testing, and validation gaps in agentic systems under production-like constraints. By Leela Kumili
My Midlife Crisis Corolla Is Fast, Furious, and Modded
Article URL: https://www.zocalopublicsquare.org/my-midlife-crisis-corolla-fast-furious-fully-modded/ Comments URL: https://news.ycombinator.com/item?id=48921303 Points: 22 # Comments: 34
Inventing ELIZA - How the First Chatbot Shaped the Future of AI
The book "Inventing ELIZA - How the First Chatbot Shaped the Future of AI". It is Open Access so the link to the PDF is here The book has a companion site - I was monitoring this since I first heard the episode on CoRecursive. Comments
The well-calibrated Bayesian [pdf] (1982)
Article URL: https://fitelson.org/seminar/dawid.pdf Comments URL: https://news.ycombinator.com/item?id=48921121 Points: 28 # Comments: 5
Towards a Harness That Can Do Anything
Article URL: https://eardatasci.github.io/c/ambiance/index.html Comments URL: https://news.ycombinator.com/item?id=48921077 Points: 48 # Comments: 29
The Chickens and the Bulls (2012)
3 points, 0 comments on Hacker News
Show HN: StyleSeed – a design-rules engine so AI agents stop building generic UI
Article URL: https://github.com/bitjaru/styleseed Comments URL: https://news.ycombinator.com/item?id=48920888 Points: 11 # Comments: 1
Show HN: 18KB ls alternative in no_std rust and Libc
Article URL: https://crates.io/crates/fli-tool Comments URL: https://news.ycombinator.com/item?id=48920811 Points: 7 # Comments: 1
Show HN: Aict – Unix coreutils that output XML/JSON, built for AI agents
Article URL: https://github.com/synseqack/aict Comments URL: https://news.ycombinator.com/item?id=48920681 Points: 7 # Comments: 1
Show HN: Goku – WASM (wllama)-powered LLM inference and model manager
Article URL: https://userfrom1995.github.io/goku/ Comments URL: https://news.ycombinator.com/item?id=48920650 Points: 4 # Comments: 0
Talk: The Art of Braiding Algorithms
26 points, 0 comments on Hacker News
Mysteries of Telegram Data Centers
Article URL: https://dev.moe/en/3025 Comments URL: https://news.ycombinator.com/item?id=48920475 Points: 98 # Comments: 24
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed below - CVE-2026-15718, an invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719, a site isolation in the DOM: Navigation component "We are aware that exploit code for this is public, however we are not aware of
The Three-Second Theft: Why AI Voice Fraud Outruns Every Defence
Article URL: https://smarterarticles.co.uk/the-three-second-theft-why-ai-voice-fraud-outruns-every-defence Comments URL: https://news.ycombinator.com/item?id=48920432 Points: 94 # Comments: 102
Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled
Article URL: https://www.ghacks.net/2026/07/12/microsoft-confirms-windows-gdid-device-identifier-that-cannot-be-disabled-documented-in-fbi-case-filing/ Comments URL: https://news.ycombinator.com/item?id=48920338 Points: 49 # Comments: 14
Searchable field-level encryption on Supabase with CipherStash
37 points, 19 comments on Hacker News
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles