<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News - Newest: &#34;vulnerability&#34;</title><link>https://news.ycombinator.com/newest</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sat, 05 Sep 2026 23:00:20 +0000</lastBuildDate><atom:link href="https://hnrss.org/newest?q=vulnerability" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[USN-8717-1: Apache Tika vulnerability – Ubuntu security notices]]></title><description><![CDATA[
<p>Article URL: <a href="https://ubuntu.com/security/notices/USN-8717-1">https://ubuntu.com/security/notices/USN-8717-1</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49572354">https://news.ycombinator.com/item?id=49572354</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Sat, 05 Sep 2026 01:59:35 +0000</pubDate><link>https://ubuntu.com/security/notices/USN-8717-1</link><dc:creator>kyisaiah47</dc:creator><comments>https://news.ycombinator.com/item?id=49572354</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49572354</guid></item><item><title><![CDATA[Brocards for Vulnerability Triage]]></title><description><![CDATA[
<p>Article URL: <a href="https://vulnbrocards.com/">https://vulnbrocards.com/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49511315">https://news.ycombinator.com/item?id=49511315</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Mon, 31 Aug 2026 15:59:47 +0000</pubDate><link>https://vulnbrocards.com/</link><dc:creator>woodruffw</dc:creator><comments>https://news.ycombinator.com/item?id=49511315</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49511315</guid></item><item><title><![CDATA[Android /iOS mobile application Vulnerability Scanning]]></title><description><![CDATA[
<p>https://scan.klars.ai/ -Find what's actually wrong
before an attacker does - Android /IOS app security scanning tool.</p>
<hr>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49498013">https://news.ycombinator.com/item?id=49498013</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Sun, 30 Aug 2026 12:15:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=49498013</link><dc:creator>klars-ai</dc:creator><comments>https://news.ycombinator.com/item?id=49498013</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49498013</guid></item><item><title><![CDATA[Regional Resilience and Vulnerability to Global Catastrophic Risk]]></title><description><![CDATA[
<p>Article URL: <a href="https://onlinelibrary.wiley.com/doi/10.1002/gch2.70146">https://onlinelibrary.wiley.com/doi/10.1002/gch2.70146</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49491711">https://news.ycombinator.com/item?id=49491711</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Sat, 29 Aug 2026 17:38:29 +0000</pubDate><link>https://onlinelibrary.wiley.com/doi/10.1002/gch2.70146</link><dc:creator>bookofjoe</dc:creator><comments>https://news.ycombinator.com/item?id=49491711</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49491711</guid></item><item><title><![CDATA[The journey of a failed autonomous AI vulnerability hunter]]></title><description><![CDATA[
<p>Article URL: <a href="https://twitter.com/pwnh4/status/2093001388246663370">https://twitter.com/pwnh4/status/2093001388246663370</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49466722">https://news.ycombinator.com/item?id=49466722</a></p>
<p>Points: 2</p>
<p># Comments: 1</p>
]]></description><pubDate>Thu, 27 Aug 2026 15:46:20 +0000</pubDate><link>https://twitter.com/pwnh4/status/2093001388246663370</link><dc:creator>pwnh4</dc:creator><comments>https://news.ycombinator.com/item?id=49466722</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49466722</guid></item><item><title><![CDATA[Vulnerability researchers were repeatedly targeted by trojanised exploits]]></title><description><![CDATA[
<p>Article URL: <a href="https://www.sekoia.com/blog/dont-eat-the-chocopocs-how-vulnerability-researchers-were-repeatedly-targeted-by-trojanised-exploits">https://www.sekoia.com/blog/dont-eat-the-chocopocs-how-vulnerability-researchers-were-repeatedly-targeted-by-trojanised-exploits</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49446732">https://news.ycombinator.com/item?id=49446732</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 26 Aug 2026 10:42:21 +0000</pubDate><link>https://www.sekoia.com/blog/dont-eat-the-chocopocs-how-vulnerability-researchers-were-repeatedly-targeted-by-trojanised-exploits</link><dc:creator>hacb</dc:creator><comments>https://news.ycombinator.com/item?id=49446732</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49446732</guid></item><item><title><![CDATA[When str.lower() is a security vulnerability in Python]]></title><description><![CDATA[
<p>Article URL: <a href="https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability">https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49440410">https://news.ycombinator.com/item?id=49440410</a></p>
<p>Points: 178</p>
<p># Comments: 75</p>
]]></description><pubDate>Tue, 25 Aug 2026 20:49:03 +0000</pubDate><link>https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability</link><dc:creator>rbanffy</dc:creator><comments>https://news.ycombinator.com/item?id=49440410</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49440410</guid></item><item><title><![CDATA[Ask HN: What's the current state of Quantum Vulnerability]]></title><description><![CDATA[

<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49428872">https://news.ycombinator.com/item?id=49428872</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Tue, 25 Aug 2026 03:52:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=49428872</link><dc:creator>vednig</dc:creator><comments>https://news.ycombinator.com/item?id=49428872</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49428872</guid></item><item><title><![CDATA[OpenKAT: Monitoring Tool and Vulnerability Scanner]]></title><description><![CDATA[
<p>Article URL: <a href="https://docs.openkat.nl/about-openkat/what-is-openkat.html">https://docs.openkat.nl/about-openkat/what-is-openkat.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49425683">https://news.ycombinator.com/item?id=49425683</a></p>
<p>Points: 7</p>
<p># Comments: 0</p>
]]></description><pubDate>Mon, 24 Aug 2026 20:51:45 +0000</pubDate><link>https://docs.openkat.nl/about-openkat/what-is-openkat.html</link><dc:creator>TechTechTech</dc:creator><comments>https://news.ycombinator.com/item?id=49425683</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49425683</guid></item><item><title><![CDATA[No Place to Hide? Regional Resil. & Vulnerability to Global Catastrophic Risk]]></title><description><![CDATA[
<p>Article URL: <a href="https://onlinelibrary.wiley.com/doi/10.1002/gch2.70146">https://onlinelibrary.wiley.com/doi/10.1002/gch2.70146</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49424399">https://news.ycombinator.com/item?id=49424399</a></p>
<p>Points: 4</p>
<p># Comments: 0</p>
]]></description><pubDate>Mon, 24 Aug 2026 19:03:44 +0000</pubDate><link>https://onlinelibrary.wiley.com/doi/10.1002/gch2.70146</link><dc:creator>littlexsparkee</dc:creator><comments>https://news.ycombinator.com/item?id=49424399</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49424399</guid></item><item><title><![CDATA[Microsoft Entra ID Remote Code Execution Vulnerability]]></title><description><![CDATA[
<p>Article URL: <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836">https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49405471">https://news.ycombinator.com/item?id=49405471</a></p>
<p>Points: 13</p>
<p># Comments: 1</p>
]]></description><pubDate>Sun, 23 Aug 2026 01:29:54 +0000</pubDate><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836</link><dc:creator>mooreds</dc:creator><comments>https://news.ycombinator.com/item?id=49405471</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49405471</guid></item><item><title><![CDATA[Show HN: GPU VulnDB – open vulnerability database for GPU infrastructure]]></title><description><![CDATA[
<p>Article URL: <a href="https://gpuvulndb.org">https://gpuvulndb.org</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49377340">https://news.ycombinator.com/item?id=49377340</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 20 Aug 2026 17:09:32 +0000</pubDate><link>https://gpuvulndb.org</link><dc:creator>lmarkin</dc:creator><comments>https://news.ycombinator.com/item?id=49377340</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49377340</guid></item><item><title><![CDATA[VulnGym: Benchmarking Coding Agents for Repository-Level Vulnerability Detection]]></title><description><![CDATA[
<p>Article URL: <a href="https://arxiv.org/abs/2608.02001">https://arxiv.org/abs/2608.02001</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49376199">https://news.ycombinator.com/item?id=49376199</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 20 Aug 2026 15:41:01 +0000</pubDate><link>https://arxiv.org/abs/2608.02001</link><dc:creator>wslh</dc:creator><comments>https://news.ycombinator.com/item?id=49376199</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49376199</guid></item><item><title><![CDATA[Type Confusion Vulnerability in isolated-VM]]></title><description><![CDATA[
<p>Article URL: <a href="https://www.endorlabs.com/learn/ghsa-864f-rcv7-6rh4-critical-type-confusion-vulnerability-in-isolated-vm">https://www.endorlabs.com/learn/ghsa-864f-rcv7-6rh4-critical-type-confusion-vulnerability-in-isolated-vm</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49374432">https://news.ycombinator.com/item?id=49374432</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 20 Aug 2026 13:38:45 +0000</pubDate><link>https://www.endorlabs.com/learn/ghsa-864f-rcv7-6rh4-critical-type-confusion-vulnerability-in-isolated-vm</link><dc:creator>cristianstaicu</dc:creator><comments>https://news.ycombinator.com/item?id=49374432</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49374432</guid></item><item><title><![CDATA[An approach to vulnerability observability of Go services leveraging Prometheus]]></title><description><![CDATA[
<p>Article URL: <a href="https://github.com/el10savio/vulnemetry/tree/main">https://github.com/el10savio/vulnemetry/tree/main</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49372794">https://news.ycombinator.com/item?id=49372794</a></p>
<p>Points: 3</p>
<p># Comments: 0</p>
]]></description><pubDate>Thu, 20 Aug 2026 10:38:10 +0000</pubDate><link>https://github.com/el10savio/vulnemetry/tree/main</link><dc:creator>ugabuga</dc:creator><comments>https://news.ycombinator.com/item?id=49372794</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49372794</guid></item><item><title><![CDATA[When str.lower() is a security vulnerability in Python]]></title><description><![CDATA[
<p>Article URL: <a href="https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability">https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49360804">https://news.ycombinator.com/item?id=49360804</a></p>
<p>Points: 3</p>
<p># Comments: 1</p>
]]></description><pubDate>Wed, 19 Aug 2026 12:42:52 +0000</pubDate><link>https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability</link><dc:creator>SethMLarson</dc:creator><comments>https://news.ycombinator.com/item?id=49360804</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49360804</guid></item><item><title><![CDATA[CVE-2026-24301: "CoSnitch" vulnerability in Microsoft Copilot]]></title><description><![CDATA[
<p>Article URL: <a href="https://cyberupdates365.com/copilot-cosnitch-cve-2026-24301/">https://cyberupdates365.com/copilot-cosnitch-cve-2026-24301/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49359560">https://news.ycombinator.com/item?id=49359560</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 19 Aug 2026 10:29:29 +0000</pubDate><link>https://cyberupdates365.com/copilot-cosnitch-cve-2026-24301/</link><dc:creator>sysadmin_diarie</dc:creator><comments>https://news.ycombinator.com/item?id=49359560</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49359560</guid></item><item><title><![CDATA[Vulnerability giving attackers full control of Macs is under active exploitation]]></title><description><![CDATA[
<p>Article URL: <a href="https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/">https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49308556">https://news.ycombinator.com/item?id=49308556</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Sat, 15 Aug 2026 07:32:06 +0000</pubDate><link>https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/</link><dc:creator>jnord</dc:creator><comments>https://news.ycombinator.com/item?id=49308556</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49308556</guid></item><item><title><![CDATA[Vulnerability giving attackers full control of Macs is under active exploitation]]></title><description><![CDATA[
<p>Article URL: <a href="https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/">https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49305171">https://news.ycombinator.com/item?id=49305171</a></p>
<p>Points: 6</p>
<p># Comments: 1</p>
]]></description><pubDate>Fri, 14 Aug 2026 22:07:06 +0000</pubDate><link>https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/</link><dc:creator>sbulaev</dc:creator><comments>https://news.ycombinator.com/item?id=49305171</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49305171</guid></item><item><title><![CDATA[NIST Seeks Blueprint for AI-Era Overhaul of National Vulnerability Database]]></title><description><![CDATA[
<p>Article URL: <a href="https://securityboulevard.com/2026/08/nist-seeks-blueprint-for-ai-era-overhaul-of-national-vulnerability-database/">https://securityboulevard.com/2026/08/nist-seeks-blueprint-for-ai-era-overhaul-of-national-vulnerability-database/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=49300680">https://news.ycombinator.com/item?id=49300680</a></p>
<p>Points: 4</p>
<p># Comments: 0</p>
]]></description><pubDate>Fri, 14 Aug 2026 16:07:35 +0000</pubDate><link>https://securityboulevard.com/2026/08/nist-seeks-blueprint-for-ai-era-overhaul-of-national-vulnerability-database/</link><dc:creator>CrankyBear</dc:creator><comments>https://news.ycombinator.com/item?id=49300680</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49300680</guid></item></channel></rss>