Engineering &
Security Wire
Curated from Hacker News, Lobsters, Krebs on Security, and other top sources. Updated every 6 hours.
AI Hiring Tools Yield Racial Bias and Systemic Rejection; 26% Black & 15% Asian
Article URL: https://hai.stanford.edu/news/ai-hiring-tools-can-yield-racial-bias-and-systemic-rejection Comments URL: https://news.ycombinator.com/item?id=48649673 Points: 103 # Comments: 84
Jerry's Map
https://www.openculture.com/2026/06/this-man-has-been-drawin... Comments URL: https://news.ycombinator.com/item?id=48649435 Points: 230 # Comments: 26
The post-quantum EO is an important milestone. Now it’s time to get to work
The new post-quantum executive order sets a 2030 migration deadline and establishes a powerful foundation for post-quantum resilience. We look at what it gets right, where it can go further, and our migration playbook for government and industry.
Show HN: RLM-based local debugger for AI agent traces
We built HALO (Hierarchal Agent Loop Optimizer), an open-source tool for debugging and optimizing AI agents using their execution traces. It’s a loop. Run your agent, feed the traces to HALO, get the report, apply the fixes, then re-run your agent. HALO takes in OTEL compliant traces from AI agents using tracing frameworks such as Langfuse, Arize/OpenInference, or even just plain JSONL. It uses an RLM (Recursive Language Model) to more efficiently break trace analysis into smaller subproblems in order to find recurring patterns across large amounts of data and fix systemic issues that regular LLMs might typically miss. You can also optionally provide a path to where your agent code lives to give the engine more context so it can more concretely provide useful insights. The repo also includes a desktop app that you can run locally without having to sign up for anything or configure anything complex. Check out the readme in the repo for more in depth information on what HALO is and how y
FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation
A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesting operation known as FortiBleed that has targeted over 430,000 FortiGate firewalls globally. The campaign, active since February 2026, involves collecting credential lists, searching for exposed services, brute-forcing accessible systems, and deploying bespoke
Fired by Google for creating the Google workspace CLI
https://xcancel.com/JPoehnelt/status/2069482265953087602 Comments URL: https://news.ycombinator.com/item?id=48649011 Points: 342 # Comments: 225
New satellites from years to weeks, days, or hours
22 points, 1 comments on Hacker News
Swift Package Index joins Apple
Article URL: https://swiftpackageindex.com/blog/swift-package-index-joins-apple Comments URL: https://news.ycombinator.com/item?id=48648779 Points: 131 # Comments: 40
FUTO Swipe – A new swipe typing model
Article URL: https://swipe.futo.tech/ Comments URL: https://news.ycombinator.com/item?id=48648619 Points: 135 # Comments: 43
My Steam Machine Is a 50ft HDMI Cable
26 points, 10 comments on Hacker News
Claude Tag
Article URL: https://www.anthropic.com/news/introducing-claude-tag Comments URL: https://news.ycombinator.com/item?id=48648039 Points: 198 # Comments: 127
How GPT-5 helped immunologist Derya Unutmaz solve a 3-year-old mystery
GPT-5 Pro helped solve a 3-year-old immunology mystery, offering insights into T cell behavior. The breakthrough could support cancer and autoimmune research.
San Diego photologs from the 1970s
Article URL: https://www.beautifulpublicdata.com/san-diego-photologs-from-the-1970s/ Comments URL: https://news.ycombinator.com/item?id=48647823 Points: 130 # Comments: 40
F3
Article URL: https://github.com/future-file-format/f3 Comments URL: https://news.ycombinator.com/item?id=48647799 Points: 553 # Comments: 125
The worthlessness of Vitamin D is mildly exaggerated
Article URL: https://dynomight.net/vitamin-d/ Comments URL: https://news.ycombinator.com/item?id=48647486 Points: 128 # Comments: 92
Cloudflare Collaborates With Leading Browsers to Develop a Privacy-First Protocol For the Global Internet
Comments
Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-week trial.
Keeping the Web Open and Private in the Bot Era
Comments
I automated my job (and it made me a better leader)
Explore how my day as a senior leader looks now that I use 40 automations to help, and learn more about some of my favorites. The post I automated my job (and it made me a better leader) appeared first on The GitHub Blog.
GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source
We’re calling for targeted amendments to resolve conflicts with open source licensing and align with international transparency frameworks while preserving regulatory intent. The post GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source appeared first on The GitHub Blog.
Krea 2 Technical Report
137 points, 11 comments on Hacker News
Show HN: The Cascade Graph – An interactive map of AI and energy constraints
Hello, I wanted to share with you all a interactive map of the economics and physics constraints of the AI buildout. It has macro drivers, industrial chokepoints, and where that shows up in markets. I've added 393 nodes and 562 edges to capture other supply / physics constraints as well. There's no sign up, and no pay wall, it's all free. Please let me know what you think! Comments URL: https://news.ycombinator.com/item?id=48646511 Points: 10 # Comments: 4
Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked it safe. The payload was harmless by design: it collected the user's email address and did nothing else. The point was to show
Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration
President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures by December 31, 2031. EO 14409 leaves national security systems on a separate track. The deadlines matter because of a threat that does not
AI's Affordability Crisis
71 points, 54 comments on Hacker News
Show HN: Nimic – Pure Python as a systems language with AOT compilation
15 points, 7 comments on Hacker News
Show HN: Treedocs: Documentation that automatically checks for staleness
9 points, 3 comments on Hacker News
Markdy: Like Mermaid Diagrams, but for Motion
60 points, 19 comments on Hacker News
Lift4D: Harmonizing Single-View 3D Estimation for 4D Reconstruction In-the-Wild
30 points, 1 comments on Hacker News
how a stray "j" ruined my evening
Comments
Aggregated from public RSS feeds & the Hacker News API · All links point to original sources · Clawship does not republish full articles