Live Feed

Engineering &
Security Wire

Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.

ENG

SEC

7354

TOTAL

Thu, Jul 9, 2026

1141SEC

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine ("mpengine.dll"), which provides scanning, detection, and cleaning capabilities for its antivirus and

The Hacker News (Security)thehackernews.comJul 9

1142ENG

two case studies of NaN

Comments

Lobsterssebsite.pwJul 9

1143ENG

Why developers are ditching GitHub for Codeberg and self-hosting alternatives

Article URL: https://www.howtogeek.com/why-developers-are-ditching-github-for-codeberg-and-self-hosting-alternatives/ Comments URL: https://news.ycombinator.com/item?id=48842611 Points: 81 # Comments: 48

Hacker Newshowtogeek.comJul 9

1144ENG

Show HN: Getting GLM 5.2 running on my slow computer

126 points, 27 comments on Hacker News

Hacker Newsgithub.comJul 9

1145ENG

AlloyDB Ships Proxy Models That Replace LLM Calls with Local Inference Inside the Database

Google shipped AlloyDB AI functions GA with a proxy model architecture that trains a lightweight local model from LLM outputs, then runs queries at database speed without external calls. Smart batching delivers 2,400x throughput improvement. The proxy model reaches 100,000 rows per second in preview, but benchmark numbers apply only to ai.if in internal testing. By Steef-Jan Wiggers

InfoQinfoq.comJul 9

1146ENG

Peace For All – Re: Factor

Comments

Lobstersre.factorcode.orgJul 9

1147ENG

AWS Details How One Customer Scaled to One Million Lambda Functions

AWS has outlined how ProGlove, an industrial-wearables manufacturer, was able to scale its SaaS platform to run more than one million AWS Lambda functions spread across thousands of dedicated customer accounts. By Matt Foster

InfoQinfoq.comJul 9

1148SEC

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images

Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to generate AI content, and it's enabled by default. "You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your images," the social media giant said in a post. "Whether you want to design a custom event invitation

The Hacker News (Security)thehackernews.comJul 9

1149ENG

The Kubernetes Approach to AI-Assisted Maintainership Prioritises Human Accountability

The Kubernetes community has introduced a framework for integrating AI into open-source maintainership, emphasising human accountability in code quality and oversight. AI tools may streamline workflows, but ultimate responsibility lies with human maintainers. The framework requires disclosure of AI usage in contributions and prohibits AI-generated commit messages. By Olimpiu Pop

InfoQinfoq.comJul 9

1150ENG

CollectWise (YC F24) Is Hiring

Article URL: https://www.ycombinator.com/companies/collectwise/jobs/P646Yw6-founding-account-executive Comments URL: https://news.ycombinator.com/item?id=48841963 Points: 0 # Comments: 0

Hacker Newsycombinator.comJul 9

1151ENG

Cursed circuits #6: reverse avalanche oscillator

28 points, 7 comments on Hacker News

Hacker Newslcamtuf.substack.comJul 9

1152ENG

Postgres rewritten in Rust, now passing 100% of the Postgres regression tests

Article URL: https://github.com/malisper/pgrust Comments URL: https://news.ycombinator.com/item?id=48841676 Points: 135 # Comments: 171

Hacker Newsgithub.comJul 9

1153ENG

Keygen Church - Oscuro Domine

Comments

Lobsterskeygenchurch.comJul 9

1154ENG

How Donkey Kong Toppled Atari

Article URL: https://dfarq.homeip.net/how-donkey-kong-toppled-atari/ Comments URL: https://news.ycombinator.com/item?id=48841385 Points: 18 # Comments: 4

Hacker Newsdfarq.homeip.netJul 9

1155ENG

Book: RISC-V System-on-Chip Design

36 points, 8 comments on Hacker News

Hacker Newsamazon.comJul 9

1156SEC

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead. That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls "Friendly Fire." It works against Anthropic's Claude Code and OpenAI's Codex when either is running in an autonomous mode that approves its own

The Hacker News (Security)thehackernews.comJul 9

1157ENG

Spider venom kills varroa mites without harming honeybees

Article URL: https://connectsci.au/news/news-parent/9703/Spider-venom-kills-varroa-mites-without-harming Comments URL: https://news.ycombinator.com/item?id=48841259 Points: 121 # Comments: 49

Hacker Newsconnectsci.auJul 9

1158SEC

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.

The Hacker News (Security)thehackernews.comJul 9

1159SEC

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox. Once such campaign, observed earlier this year, involved the

The Hacker News (Security)thehackernews.comJul 9

1160ENG