Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet's FortiGuard Labs identified the campaign in May 2026. It opens with a phishing PDF disguised as a corrupted file, checks that the visitor is really in Spain or Portugal, and hides its real payload inside an image. The goal is the usual one: steal banking logins and take
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and Adobe Campaign Classic. The ColdFusion updates "resolves critical and important vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass," Adobe said in an alert released Tuesday. The vulnerabilities are listed
SpudCell: The first synthetic cell with a complete cell cycle
57 points, 2 comments on Hacker News
Rotman Lens
47 points, 6 comments on Hacker News
US Supreme Court just blew up EU-US Data Transfers
Comments
The Anti-Palantir Manifesto
Article URL: https://nym.com/blog/anti-palantir-manifesto Comments URL: https://news.ycombinator.com/item?id=48747772 Points: 63 # Comments: 24
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3
Ray Tracer in SQL
12 points, 2 comments on Hacker News
Sony Deletes 551 Movies PlayStation Owners Paid For
109 points, 42 comments on Hacker News
For first time, a cell built from scratch grows and divides
130 points, 29 comments on Hacker News
FFmpeg 9.1's new AAC encoder
211 points, 75 comments on Hacker News
This Cell Feeds, Grows and Reproduces. and It's Manmade
Article URL: https://www.nytimes.com/interactive/2026/07/01/science/spudcells-synthetic-cell.html Comments URL: https://news.ycombinator.com/item?id=48747038 Points: 28 # Comments: 5
Instacart Scales Personalized Marketing via Configuration-Driven Multi-Tenant Platform
Instacart redesigned its personalized marketing system using a configuration-driven multi-tenant architecture on Storefront Pro. The system replaces retailer-specific implementations with a shared execution engine, enabling scalable personalization, faster configuration propagation in under a minute, and 99.9% delivery success across hundreds of retail banners through a unified campaign platform. By Leela Kumili
Presentation: Graph RAG: Building Smarter Retrieval Workflows with Knowledge Graphs
Cassie Shum discusses the architectural evolution of GraphRAG and why data foundations are critical for advanced AI workflows. She explains how traditional vector RAG falls short when addressing global context, multi-hop reasoning, and provenance. She shares enterprise strategies for building semantically structured knowledge graphs that shift raw orchestrating logic down to the data layer. By Cassie Shum
The C to Rust migration book
10 points, 1 comments on Hacker News
Trust your compiler: Modern C++
48 points, 29 comments on Hacker News
Monetization Gateway
45 points, 6 comments on Hacker News
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire's Threat Response Unit (TRU). The Canadian cybersecurity company said it identified exploitation attempts targeting CVE-2026-8037 (CVSS score: 9.6), an operating system (OS) command injection flaw that could be exploited to achieve
Your Kids' School Bus Is About to Become a Roaming Surveillance Vehicle
Article URL: https://www.thedrive.com/news/your-kids-school-bus-is-about-to-become-a-roaming-surveillance-vehicle Comments URL: https://news.ycombinator.com/item?id=48746842 Points: 63 # Comments: 47
Medieval-style fortifications are back in the Sahel
35 points, 21 comments on Hacker News
Launch HN: Parsewise (YC P25) – Reason Across Documents with an API
Hi all, it’s Greg and Max, founders of Parsewise here Parsewise transforms a bucket of unstructured data into schema compliant data retaining lineage for values resolved across documents. Imagine giving Claude a bunch of files and asking for a CSV or JSON output. If you have tried this, you know both the system limitations (number of files, type of inputs, cost, latency) but also the human-facing challenge of having no way to validate the results quickly. We solve both. We help tech teams simplify their unstructured data ETL, and loop in business experts for the definitions and for instant validation. Here is a video with a few use cases: https://www.youtube.com/watch?v=dbRllnnh47w Parsewise in the words of someone coming to us: ”I need to extract information from insurance policy PDFs, phone calls that have been transcribed, emails, etc. I am NOT looking for something that would just extract data point by data point, page by page into a structured well-defined schema but more somethin
Why I Stopped Arguing with People
461 points, 367 comments on Hacker News
The Scanline Sweeper: A Glyph Rendering Algorithm [pdf]
6 points, 2 comments on Hacker News
Manufact (YC S25) Is Hiring a Developer Advocate in SF
1 points, 0 comments on Hacker News
The Vespa at 80: Why the Italian scooter remains the coolest thing on 2 wheels
83 points, 77 comments on Hacker News
Internal Combustion Engine
32 points, 2 comments on Hacker News
Rayfish, Peer-to-peer mesh VPN with no server to trust
16 points, 4 comments on Hacker News
Content Independence Day, one year on: building the business model for the agentic Internet
One year after declaring Content Independence Day, a dynamic market for monetized content has officially emerged. In this report, we examine how the rise of autonomous AI agents is upending traditional search referrals and detail the new infrastructure required to support a sustainable web economy.
Making AI search smarter
Search is how we find nearly everything on the web — creators, merchants, answers. AI is rewriting the rules, leaving creators caught between staying discoverable in an agentic era and getting paid for their work. Today we're launching two initiatives to help.
Your site, your rules: new AI traffic options for all customers
For our second Content Independence Day, we’re giving website owners finer options to manage AI traffic. Instead of a one-size-fits-all block, all customers can now easily distinguish and manage Search, Agent, and Training bots, alongside the new ability to protect ad-monetized pages.
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles