The GitHub Advisory Database is processing more vulnerability reports than ever before. Here's what's driving the surge, how we're responding, and how the community can help. The post Inside the Advisory Database and what happens when vulnerability volume breaks records appeared first on The GitHub Blog.

GitHub Bloggithub.blogJun 29

2105SEC

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private

WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more than three billion users on the messaging platform. The optional feature is designed to help users connect with someone on the service through usernames, as opposed to directly sharing their phone numbers. Username reservations will start rolling out starting today,

The Hacker News (Security)thehackernews.comJun 29

2106ENG

European ISPs Want Rightsholders Held Accountable for Overblocking Damage

Article URL: https://torrentfreak.com/european-isps-want-rightsholders-held-accountable-for-overblocking-damage/ Comments URL: https://news.ycombinator.com/item?id=48721072 Points: 289 # Comments: 74

Hacker Newstorrentfreak.comJun 29

2107ENG

US Supreme Court rules geofence warrants require constitutional protections

Article URL: https://www.theguardian.com/us-news/2026/jun/29/supreme-court-geofence-warrants-case-decision Comments URL: https://news.ycombinator.com/item?id=48720924 Points: 337 # Comments: 153

Hacker Newstheguardian.comJun 29

2108ENG

A native graphical shell for SSH

Article URL: https://probablymarcus.com/blocks/2026/06/28/native-graphical-shell-for-SSH.html Comments URL: https://news.ycombinator.com/item?id=48720758 Points: 193 # Comments: 83

Hacker Newsprobablymarcus.comJun 29

2109SEC

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its command channel. Acronis Threat Research Unit found active compromises inside Indian government networks, including machines used by senior administrative staff, and worked with

The Hacker News (Security)thehackernews.comJun 29

2110ENG

WATaBoy: JIT-Ing Game Boy Instructions to WASM Beats a Native Interpreter

35 points, 0 comments on Hacker News

Hacker Newshumphri.esJun 29

2111ENG

Linux for the Sega MegaDrive

111 points, 15 comments on Hacker News

Hacker Newsgithub.comJun 29

2112ENG

WebGL Without a GPU

Article URL: https://microlink.io/blog/webgl-without-a-gpu Comments URL: https://news.ycombinator.com/item?id=48720179 Points: 12 # Comments: 3

Hacker Newsmicrolink.ioJun 29

2113ENG

Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307

Comments

Lobstersnebusec.aiJun 29

2114ENG

Working With AI: A concrete example

Article URL: https://htmx.org/essays/working-with-ai/ Comments URL: https://news.ycombinator.com/item?id=48720064 Points: 47 # Comments: 12

Hacker Newshtmx.orgJun 29

2115ENG

Eliya 25 Brings a JVM-Level Diagnostic Profile to OpenJDK 25 LTS

Asymm Systems has released Eliya 25.0.3, an OpenJDK 25 LTS distribution aimed at improving production diagnostics in Java environments. It consolidates several HotSpot features into an opt-in Production profile. Eliya is designed for teams needing reliable diagnostic data, especially in regulated settings. Future enhancements are planned for Phase 2. By A N M Bazlur Rahman

InfoQinfoq.comJun 29

2116ENG

Evaluation order and nontermination in query languages

Comments

Lobstersrntz.netJun 29

2117SEC

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either. Forums are talking, researchers are finding easy cracks, and defenders have more cleanup waiting. Here’s the full Monday recap. ⚡ Threat of the Week New DirtyClone Linux Kernel Flaw Lets Local

The Hacker News (Security)thehackernews.comJun 29

2118ENG

Inside Target’s LLM-Based System for Semantic Matching in Marketing Forecast Pipelines

Target built a generative AI system to improve marketing campaign forecasting by retrieving and ranking similar historical campaigns. Using embeddings, vector search, and LLM ranking, it replaces rule-based workflows. Evaluation shows 75% top-1 and 100% top-3 coverage. The system reduces manual effort, improves consistency, and uses feedback loops to refine retrieval using campaign outcomes. By Leela Kumili

InfoQinfoq.comJun 29

2119ENG