Hacker News - Newest: "vulnerability"https://news.ycombinator.com/newestHacker News RSShttps://hnrss.org/hnrss v2.1.1Thu, 22 Oct 2026 00:55:12 +0000<![CDATA[There isn't an easy exploit for this PHP vulnerability]]>Article URL: https://eliastaylor.com/noexploit/

Comments URL: https://news.ycombinator.com/item?id=50188948

Points: 90

# Comments: 33

]]>Wed, 21 Oct 2026 23:13:27 +0000https://eliastaylor.com/noexploit/zkldihttps://news.ycombinator.com/item?id=50188948https://news.ycombinator.com/item?id=50188948<![CDATA[Ask HN: How do you handle AI security for automated vulnerability management?]]>Hello World!

So I am new to the world of cybersecurity, and after some back and forth with AI, I chose to use a specific tool that was recommended for automated vulnerability detection & patching, but I think the issue I encountered is something common to all similar platforms that provide AI security fixes in 2026.

It proposed a fix to an issue labeled 'critical'. I gave the specific file and the fix to Gemini, and, it disagreed strongly.

My trust in the platform immediately degraded.

It shows in my thinking that AI security platforms for repositories are unreliable, unless you cross check every critical/high vulnerability as a human with another AI tool as well. For example, for another issue labeled 'High', the fix, I cross-checked, was correct in that case.

But that that one 'critical' issue, which turned out to be not a bug at all, and certainly not critical at all, has degraded my trust strongly in AI security platforms for automated vulnerability detection & patching. Note, to prevent confusion, with automated patching I mean automated pull requests with AI-proposed fixes, pending explicit human merging.

Now, I wonder what you guys use (instead, if at all), and how reliable your security tool(s) are, if at all, for automated vulnerability detection (& patching.)

Happy Coding!

Worldwide Wishes,

Behan

Comments URL: https://news.ycombinator.com/item?id=50186510

Points: 1

# Comments: 0

]]>Wed, 21 Oct 2026 19:43:49 +0000https://news.ycombinator.com/item?id=50186510BehanPrWhttps://news.ycombinator.com/item?id=50186510https://news.ycombinator.com/item?id=50186510<![CDATA[PHP Vulnerability – Helper Tool]]>Article URL: https://speedbits.io/products/infinity-tools/

Comments URL: https://news.ycombinator.com/item?id=50185808

Points: 1

# Comments: 1

]]>Wed, 21 Oct 2026 18:57:28 +0000https://speedbits.io/products/infinity-tools/mrw381https://news.ycombinator.com/item?id=50185808https://news.ycombinator.com/item?id=50185808<![CDATA[xkcd: Vulnerability]]>Article URL: https://xkcd.com/3314/

Comments URL: https://news.ycombinator.com/item?id=50185774

Points: 22

# Comments: 2

]]>Wed, 21 Oct 2026 18:55:09 +0000https://xkcd.com/3314/tnosirrahhttps://news.ycombinator.com/item?id=50185774https://news.ycombinator.com/item?id=50185774<![CDATA[Cloudflare deploys protections against php2shell vulnerability]]>Article URL: https://blog.cloudflare.com/php-vulnerabilities-waf-protection/

Comments URL: https://news.ycombinator.com/item?id=50181326

Points: 101

# Comments: 15

]]>Wed, 21 Oct 2026 14:11:14 +0000https://blog.cloudflare.com/php-vulnerabilities-waf-protection/Maxioushttps://news.ycombinator.com/item?id=50181326https://news.ycombinator.com/item?id=50181326<![CDATA[PHP Vulnerability Rated 9.2, Highest Severity; EU Recommens Shutting Down Sites]]>Article URL: https://finance.biggo.com/news/314e2cc6-2088-4681-bfc9-fbcd063bd3df

Comments URL: https://news.ycombinator.com/item?id=50180920

Points: 4

# Comments: 0

]]>Wed, 21 Oct 2026 13:48:45 +0000https://finance.biggo.com/news/314e2cc6-2088-4681-bfc9-fbcd063bd3dfguytvhttps://news.ycombinator.com/item?id=50180920https://news.ycombinator.com/item?id=50180920<![CDATA[Simple Proxy to secure your PHP from PHP2Shell vulnerability]]>Article URL: https://github.com/Qbix/proxy

Comments URL: https://news.ycombinator.com/item?id=50180810

Points: 1

# Comments: 0

]]>Wed, 21 Oct 2026 13:41:30 +0000https://github.com/Qbix/proxyEGreghttps://news.ycombinator.com/item?id=50180810https://news.ycombinator.com/item?id=50180810<![CDATA[EU issues RED alert for the critical PHP vulnerability]]>Article URL: https://cert.europa.eu/publications/security-advisories/2026-018/pdf

Comments URL: https://news.ycombinator.com/item?id=50173483

Points: 10

# Comments: 0

]]>Tue, 20 Oct 2026 22:20:18 +0000https://cert.europa.eu/publications/security-advisories/2026-018/pdfpranshuchittorahttps://news.ycombinator.com/item?id=50173483https://news.ycombinator.com/item?id=50173483<![CDATA[StackRadar is now open source – Kubernetes SBoM vulnerability tracking]]>Article URL: https://github.com/lockdep/stackradar

Comments URL: https://news.ycombinator.com/item?id=50170965

Points: 2

# Comments: 0

]]>Tue, 20 Oct 2026 18:55:26 +0000https://github.com/lockdep/stackradarmariusjorhttps://news.ycombinator.com/item?id=50170965https://news.ycombinator.com/item?id=50170965<![CDATA[Trump Accounts' Fraud Vulnerability Calls for Strong Safeguards]]>Article URL: https://news.bloombergtax.com/tax-insights-and-commentary/trump-accounts-fraud-vulnerability-calls-for-strong-safeguards

Comments URL: https://news.ycombinator.com/item?id=50168045

Points: 3

# Comments: 0

]]>Tue, 20 Oct 2026 15:39:34 +0000https://news.bloombergtax.com/tax-insights-and-commentary/trump-accounts-fraud-vulnerability-calls-for-strong-safeguardstldrthelawhttps://news.ycombinator.com/item?id=50168045https://news.ycombinator.com/item?id=50168045<![CDATA[Curl proposes "Every vulnerability report < HIGH is immediately made public"]]>Article URL: https://github.com/curl/curl/discussions/23458

Comments URL: https://news.ycombinator.com/item?id=50154714

Points: 3

# Comments: 1

]]>Mon, 19 Oct 2026 16:50:58 +0000https://github.com/curl/curl/discussions/23458awkwardpotatohttps://news.ycombinator.com/item?id=50154714https://news.ycombinator.com/item?id=50154714<![CDATA[Proposal: Every vulnerability report < HIGH is immediately public]]>Article URL: https://curl.se/mail/lib-2026-10/0006.html

Comments URL: https://news.ycombinator.com/item?id=50135636

Points: 2

# Comments: 0

]]>Sat, 17 Oct 2026 22:11:50 +0000https://curl.se/mail/lib-2026-10/0006.htmlsbinderhttps://news.ycombinator.com/item?id=50135636https://news.ycombinator.com/item?id=50135636<![CDATA[Claude Code Desktop Vulnerability: Preview Pane Data Exfiltration]]>Article URL: https://noma.security/noma-labs/sneakpeek-how-the-preview-pane-in-claude-code-desktop-can-exfiltrate-your-data

Comments URL: https://news.ycombinator.com/item?id=50099375

Points: 16

# Comments: 0

]]>Thu, 15 Oct 2026 05:02:06 +0000https://noma.security/noma-labs/sneakpeek-how-the-preview-pane-in-claude-code-desktop-can-exfiltrate-your-datawonderskyhttps://news.ycombinator.com/item?id=50099375https://news.ycombinator.com/item?id=50099375<![CDATA[When to Use Vulnerability Assessments, Pentesting, Red Teams, and Bug Bounties]]>Article URL: https://danielmiessler.com/blog/when-vulnerability-assessments-pentesting-red-team-bug-bounties

Comments URL: https://news.ycombinator.com/item?id=50066063

Points: 2

# Comments: 0

]]>Tue, 13 Oct 2026 03:02:55 +0000https://danielmiessler.com/blog/when-vulnerability-assessments-pentesting-red-team-bug-bountiestknisleyhttps://news.ycombinator.com/item?id=50066063https://news.ycombinator.com/item?id=50066063<![CDATA[Wordfence Argus Discovers Critical Vulnerability in Ghostscript]]>Article URL: https://www.wordfence.com/blog/2026/10/wordfence-argus-discovers-critical-vulnerability-in-ghostscript-the-program-that-turns-uploaded-pdfs-into-thumbnails-on-your-server/

Comments URL: https://news.ycombinator.com/item?id=50063280

Points: 1

# Comments: 0

]]>Mon, 12 Oct 2026 21:26:04 +0000https://www.wordfence.com/blog/2026/10/wordfence-argus-discovers-critical-vulnerability-in-ghostscript-the-program-that-turns-uploaded-pdfs-into-thumbnails-on-your-server/wonderskyhttps://news.ycombinator.com/item?id=50063280https://news.ycombinator.com/item?id=50063280<![CDATA[GitLab warns of max severity code execution vulnerability]]>Article URL: https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/

Comments URL: https://news.ycombinator.com/item?id=50059371

Points: 2

# Comments: 0

]]>Mon, 12 Oct 2026 17:04:01 +0000https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/absqueuedhttps://news.ycombinator.com/item?id=50059371https://news.ycombinator.com/item?id=50059371<![CDATA[I Found a $90k Remote Code Execution Vulnerability in Google]]>Article URL: https://simonkoeck.com/writeups/google-devsite-flask-session-pickle-rce

Comments URL: https://news.ycombinator.com/item?id=50052638

Points: 240

# Comments: 123

]]>Mon, 12 Oct 2026 07:28:53 +0000https://simonkoeck.com/writeups/google-devsite-flask-session-pickle-rcesoecklyhttps://news.ycombinator.com/item?id=50052638https://news.ycombinator.com/item?id=50052638<![CDATA[Telegram Desktop vulnerability allowed any user's file to be stolen]]>Article URL: https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/

Comments URL: https://news.ycombinator.com/item?id=50029123

Points: 473

# Comments: 329

]]>Sat, 10 Oct 2026 03:02:47 +0000https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/g-b-rhttps://news.ycombinator.com/item?id=50029123https://news.ycombinator.com/item?id=50029123<![CDATA[An append-only, signed ledger of vulnerability remediation]]>Article URL: https://attestable.tech/

Comments URL: https://news.ycombinator.com/item?id=50020555

Points: 1

# Comments: 0

]]>Fri, 09 Oct 2026 13:51:07 +0000https://attestable.tech/eamannhttps://news.ycombinator.com/item?id=50020555https://news.ycombinator.com/item?id=50020555<![CDATA[Launching an opt-in vulnerability-finding service for open-source software]]>Article URL: https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-source

Comments URL: https://news.ycombinator.com/item?id=50010549

Points: 5

# Comments: 2

]]>Thu, 08 Oct 2026 19:10:41 +0000https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for-open-sourcedihttps://news.ycombinator.com/item?id=50010549https://news.ycombinator.com/item?id=50010549