A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts. Distributed via Telegram and costing $400 a month (or $3,800 per year), attack chains leverage phishing

The Hacker News (Security)thehackernews.comJul 13

755ENG

I'm Making Strandfall, a Solarpunk Orienteering Larp

53 points, 11 comments on Hacker News

Hacker Newsmssv.netJul 13

756ENG

Java News Roundup: TornadoVM 5, JHipster, Google ADK, OmniFish Build of Payara, Introducing Vidocq

This week's Java roundup for July 6th, 2026, features news highlighting: the GA release of TornadoVM 5.0; point releases of JHipster, Keycloak and Google ADK; maintenance releases of GraalVM Native Build Tools and Micronaut; the OmniFish Build of Payara and introducing Vidocq, a new implementation of the Jakarta EE 11 Core Profile and MicroProfile 7.1. By Michael Redlich

InfoQinfoq.comJul 13

757AI

Empowering India’s next generation of innovators with ATL Saathi

Google and AIM launched ATL Saathi, a Gemini-powered AI tool empowering Indian educators in robotics labs.

Google DeepMinddeepmind.googleJul 13

758ENG

Presentation: Road to Compliance: Will Your Internal Users Hate Your Platform Team?

Davide de Paolis discusses the realities of rolling out cloud infrastructure compliance without fracturing developer relations. Drawing from a real-world platform team reboot at Sevdesk, he explains how to implement "minimum viable governance" on AWS, utilize event-driven Slack alerting to automate policy feedback, and shift from rigid enforcement to high-empathy, data-driven collaboration. By Davide de Paolis

InfoQinfoq.comJul 13

759ENG

Land Atlas – soil, farmability, and crop analysis for land listings

18 points, 3 comments on Hacker News

Hacker Newsland-atlas-production.up.railway.appJul 13

760SEC

Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling

Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeling from the way you sound, and keeps a timestamped log of every read. Each read gets pinned to the moment it happened: the time, your location, what you were doing, even how you were using your phone. Some versions in the filing would listen all day; others would

The Hacker News (Security)thehackernews.comJul 13

761ENG

Show HN: DOM-docx – HTML to native, editable Word docs (MIT)

Article URL: https://github.com/floodtide/dom-docx Comments URL: https://news.ycombinator.com/item?id=48891267 Points: 74 # Comments: 22

Hacker Newsgithub.comJul 13

762ENG

Control the Ideas, Not the Code

Article URL: https://antirez.com/news/169 Comments URL: https://news.ycombinator.com/item?id=48891184 Points: 152 # Comments: 107

Hacker Newsantirez.comJul 13

763SEC

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing real value in specific investigations. But as we mapped out the broader architecture, something kept nagging at me. The design they were building

The Hacker News (Security)thehackernews.comJul 13

764ENG

crates.io: development update

Comments

Lobstersblog.rust-lang.orgJul 13

765ENG

A voxel Tokyo in real Japan time – ride the Yamanote line and study Japanese

Article URL: https://jivx.com/densha Comments URL: https://news.ycombinator.com/item?id=48890959 Points: 189 # Comments: 21

Hacker Newsjivx.comJul 13

766SEC

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration. "The script looked for the Domain Controller (DC) and mapped users, computers, and domains, before creating a directory and exporting out a number of files, and finally creating AD_Report.html to measure the success of the

The Hacker News (Security)thehackernews.comJul 13

767ENG

Article: Removing a Hidden Round Trip from a Multi-Region AWS API

When a series of regional outages forced a rethink of a multi-region AWS API, the team discovered that an obstacle to global failover was hiding in plain sight: a pre-flight discovery call baked into every client session years earlier as the only available option. This article describes what it took to remove it, and what the rollout actually cost. By Suresh Gururajan

InfoQinfoq.comJul 13

768ENG

Podcast: Governance in the Age of AI: A Conversation with Sarah Wells

In this podcast, Michael Stiefel spoke to Sarah Wells about the relationship of governance to software architecture. Governance enables teams to work effectively by establishing procedures that minimize system complexity, improve security, and reduce repetitive tasks. Targeted checklists help engineers by reducing the stress over these procedures. By Sarah Wells

InfoQinfoq.comJul 13

769ENG

What are you doing this week?

What are you doing this week? Feel free to share! Keep in mind it’s OK to do nothing at all, too.

Lobsterslobste.rsJul 13

770ENG

IPv6 over drainage pipe

Comments

Lobsterschaos.socialJul 13

771ENG

Zig Creator Calls Spade a Spade, Anthropic Blows Smoke

152 points, 86 comments on Hacker News

Hacker Newsraymyers.orgJul 13

772ENG

Berkshire's $397B Bet Against an Overheated Market

26 points, 7 comments on Hacker News

Hacker Newsdisruptionbanking.comJul 13

773ENG

Interrail: 6,379Km and 13 Countries over 7 weeks

45 points, 37 comments on Hacker News

Hacker Newsshkspr.mobiJul 13

774ENG

WebExtension to query any HTML table with PRQL

Comments

Lobstersavlasov.cabal.runJul 13

775SEC

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing switched on. The command that did it: python3 -m http.server 8080, was still sitting in the readable .bash_history. From that one lapse, French security firm Lexfo lifted the operator's entire toolkit and pivoted through it to two more

The Hacker News (Security)thehackernews.comJul 13

776ENG

How to Build More Resilient Local-First Applications With AT Protocol Infrastructure

Jake Lazaroff discussed the AT Protocol as a framework for distributed applications beyond social networking. He emphasised a local-first architecture where users maintain data in PDSs while leveraging shared infrastructure for synchronisation and updates. The presentation included experiments showcasing collaborative tools and highlighted the benefits of reduced reliance on app-specific backends. By Olimpiu Pop

InfoQinfoq.comJul 13

777ENG