Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant
An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April 2026, using photo-themed ZIP files to drop a Node.js implant and dig into front-desk machines, Microsoft says. The company has not attributed the activity to a known threat actor, and the operators' end goal is still unclear. The lure plays to how hotels work.
The Baffling World of Masayoshi Son's Presentations (2020)
29 points, 6 comments on Hacker News
Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff
Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov in June 2021, three months after Cellebrite said it would stop selling its tools and services to Russia and Belarus. The finding, published June 25 by the Citizen Lab, rests on two things that rarely line up: traces on the phone itself and an official Russian
How much? The hidden costs of restaurant dishes
Article URL: https://www.theguardian.com/food/2026/jun/26/how-much-the-hidden-costs-of-restaurant-dishes Comments URL: https://news.ycombinator.com/item?id=48684060 Points: 10 # Comments: 0
What are you doing this weekend?
Feel free to tell what you plan on doing this weekend and even ask for help or feedback. Please keep in mind it’s more than OK to do nothing at all too!
Why current LLM costs are not sustainable
Article URL: https://aditya.patadia.org/p/ai-and-cloud-costs Comments URL: https://news.ycombinator.com/item?id=48683588 Points: 86 # Comments: 104
Wallace the 6 inch f/2.8 telescope, building it, and hiking with it
81 points, 11 comments on Hacker News
Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented .NET backdoor called STOCKSTAY that has been deployed against government and military organizations in Ukraine, and entities that have an interest in Italian foreign policy. Describing the Windows backdoor as continually developed by the hacking group, Google Threat Intelligence Group (
Open Source Low Tech
222 points, 42 comments on Hacker News
swsim: A software SIM card
Comments
We All Depend on Open Source. We Will Defend It Together
Article URL: https://akrites.org/letter/ Comments URL: https://news.ycombinator.com/item?id=48682737 Points: 105 # Comments: 44
SPIR-V Backend Progress
Comments
Faster KNN search in Manticore: 2-pass HNSW, batched distances, and AVX-512
9 points, 1 comments on Hacker News
No-One Escapes the Permanent Underclass
Article URL: https://borretti.me/article/no-one-escapes-the-permanent-underclass Comments URL: https://news.ycombinator.com/item?id=48682016 Points: 6 # Comments: 1
Libre Barcode Project
Article URL: https://graphicore.github.io/librebarcode/ Comments URL: https://news.ycombinator.com/item?id=48681949 Points: 14 # Comments: 0
What happened after 2k people tried to hack my AI assistant
Article URL: https://www.fernandoi.cl/posts/hackmyclaw/ Comments URL: https://news.ycombinator.com/item?id=48681687 Points: 4 # Comments: 0
A data race that doesn't compile
Article URL: https://corentin-core.github.io/posts/ruxe-type-level-disjointness/ Comments URL: https://news.ycombinator.com/item?id=48681361 Points: 20 # Comments: 5
Framework's 10G Ethernet module exposes USB-C's complexity
Article URL: https://www.jeffgeerling.com/blog/2026/framework-10g-ethernet-module-usb-c-complexity/ Comments URL: https://news.ycombinator.com/item?id=48681220 Points: 67 # Comments: 18
The Garbage Collection Handbook: The Art of Automatic Memory Management (2nd Ed) (2023)
Article URL: https://gchandbook.org/ Comments URL: https://news.ycombinator.com/item?id=48680370 Points: 78 # Comments: 11
Evaluating performance and efficiency of the GitHub Copilot agentic harness across models and tasks
Explore how the GitHub Copilot agentic harness delivers strong results across multiple benchmarks and leading token efficiency, while maintaining flexibility to choose among more than 20 models. The post Evaluating performance and efficiency of the GitHub Copilot agentic harness across models and tasks appeared first on The GitHub Blog.
The operating cost starts after the demo
14 points, 3 comments on Hacker News
The 'papers, please' era of the internet will decimate your privacy
Article URL: https://expression.fire.org/p/the-papers-please-era-of-the-internet Comments URL: https://news.ycombinator.com/item?id=48679608 Points: 486 # Comments: 234
Announcing Silk: a silky smooth fiber runtime for ClickHouse
Comments
Migrating from Proxmox to NixOS and Incus
Article URL: https://www.nijho.lt/post/proxmox-to-nixos/ Comments URL: https://news.ycombinator.com/item?id=48679385 Points: 60 # Comments: 38
Un-0: Generating Images with Coupled Oscillators
Article URL: https://unconv.ai/blog/introducing-un-0-generating-images-with-coupled-oscillators/ Comments URL: https://news.ycombinator.com/item?id=48679007 Points: 29 # Comments: 2
OpenAI Leans Toward Waiting Until Next Year for IPO
Article URL: https://www.nytimes.com/2026/06/25/technology/openai-ipo-artificial-intelligence.html Comments URL: https://news.ycombinator.com/item?id=48678873 Points: 22 # Comments: 8
Om Malik, 1966-2026
Article URL: https://om.co/2026/06/24/1966-2026/ Comments URL: https://news.ycombinator.com/item?id=48678852 Points: 104 # Comments: 8
Echoes of the AI Winter
Comments
An oral history of Bank Python (2021)
Article URL: https://calpaterson.com/bank-python.html Comments URL: https://news.ycombinator.com/item?id=48678645 Points: 11 # Comments: 4
Parallel Parentheses Matching
Article URL: https://williamdue.github.io/blog/parallel-parentheses-matching Comments URL: https://news.ycombinator.com/item?id=48678623 Points: 15 # Comments: 2
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles