Systems & Security Radar

[Go ★305] Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI

[C ★590] Zero-code OpenTelemetry instrumentation powered by eBPF

[C ★5073] eBPF-based Security Observability and Runtime Enforcement

[Go ★25649] eBPF-based Networking, Security, and Observability

Cloud Hypervisor, the Rust-based Virtual Machine Monitor that began as an Intel open-source project and evolved into a multi-vendor Linux Foundation project, is out today with a sizable feature update...

Rustls as the modern TLS library written in the Rust programming language with an emphasis on memory safety is out today with its v0.23.46 release in order to ship four new security fixes...

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions.

While Mesa is predominantly used for GPU drivers, open-source developer Tomeu Vizoso continues advancing the capabilities of NPUs within the Mesa driver stack...

Intel today has unveiled its official performance specifications and branding for its upcoming "Crescent Island" data center AI inference cards.

SPEC has released version 15.0.1 of SPECviewperf Linux Edition, bringing a slew of upgrades and official Arm support to Linux's key workstation graphics benchmark suite. We are taking a look at those changes, and what performance is like on some modern systems

The RISC-V RVA23 profile is a big deal for reducing fragmentation in the RISC-V ecosystem and standardizing more of the ISA to make it easier to distribute modern RISC-V binaries and the like.

A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said.

Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new...

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software.

Following the recent launch of AMD's EPYC 8005 Sorano server CPUs, we are taking a look at the various SKU options among chips, and what configurations offer the best value for different needs

A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.

Released at the end of August was Haiku R1 Beta 6 and over the course of September, further improvements continued to land for this BeOS-inspired project now in its 25th year of development...

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part.

Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled.

The feature-packed and polished Plasma 6.8 KDE desktop is now available. Making this release all the more special is that it coincides with the 30th anniversary of the KDE project...

Article URL: https://github.com/android/ndk/issues/2260 Comments URL: https://news.ycombinator.com/item?id=50083130 Points: 302 # Comments: 142

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.

A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations.

Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers.

Redesigning source control at Anthropic

Cisco and NVIDIA team up announcing a new USFP form factor for 400G SerDes lanes. Cisco also has a few new Silicon One offerings

The new Structera X 3406 and Structera X 3506 offer six channels and up to 18 DIMMs per controller for CXL 3.2 memory expansion

The Guardian : US law enforcement and intel agency docs: since 2021, the FBI, DHS, and NYPD have viewed AI as both a facilitator of violent extremism and a target for attacks — From the FBI to local police departments, US authorities are increasingly warning...

AnonTechie writes: Norwegian military personnel discovered that rented Chinese-made cars automatically recorded and stored video footage during military exercises. The Norwegian newspaper DN reported the incident.

Source: whatmodel.sh , an open source AI leaderboard I built (and launched here yesterday). Every point comes from published benchmark results: 22,113 of them across 987 benchmarks, from 1,011 sources, each one linked to where it was published.

Introducing Firefox Enterprise

Maria Curi / Axios : Analysis: AI safety groups and individual donors have spent $48M in the midterm election cycle across bipartisan races to back candidates favoring AI regulation — Advocates for AI safety and regulation are emerging as a force in U.S.

Anthropic says Claude-generated code has scaled so quickly that its existing Git-based infrastructure could not keep up. In response, the company built a custom centralized source-control system called Scion, along with AI-assisted review and search tools.

https://www.bloomberg.com/news/articles/2026-10-14/anthropic-executive-says-open-source-ai-models-are-higher-risk...

Reuters : Jensen Huang says Nvidia is pledging $250M in accelerated computing resources over five years to fund UK AI security and agentic safety research — US chipmaker Nvidia (NVDA.O) has pledged $250 million worth of computing resources to Britain over...

Shipt launched its Kits feature, enabling quick assembly of themed grocery bundles for events. The platform architecture lets merchandisers easily create store-aware kits, streamlining previously labor-intensive workflows.

Fancy Curl Sites

Apple: Switch to Safari (from Chrome)

submitted by /u/LatentSpacer [link] [comments]

Topgolf and VMware "ran deep" before the migration.

https://x.com/OpenAINewsroom/status/2110095403198849132 Comments URL: https://news.ycombinator.com/item?id=50078141 Points: 604 # Comments: 500

On the night of October 11, someone got into the refrigeration controllers at French supermarkets and put them into forced defrost with the target set to 50°C.

Guitoro is a free browser guitar using recordings of real instruments. You can strum with your keyboard, mouse, or touchscreen, choose acoustic, classical, electric guitar or bass, and see chord fingering and each stroke.

See also: Gemini 4 Argon for Robotics - https://news.ycombinator.com/item?id=50074869 Comments URL: https://news.ycombinator.com/item?id=50073879 Points: 1335 # Comments: 929

Article URL: https://www.sammystraus.com/#i-posted-to-hn-and-then-my-website-was-flooded-with-ai-bot-traffic Comments URL: https://news.ycombinator.com/item?id=50073221 Points: 327 # Comments: 174

A plea not to use uv-build

A four-level technical roadmap for building agentic AI systems, from single cognitive loops and stateful memory through multi-agent swarms and production observability.

Did Ente Locker copy my code without attribution?

REA and ArtCraft are two projects driving a wave of AI-built clones that attempt to recreate Adobe and Microsoft software, letting developers reverse-engineer and rebuild commercial tools without access to the original source code.

We started with an assumption about what agents need from an app. Then we started asking developers. The answers keep surprising us. So here is the question we are testing now. What does an agent actually need from your app to do one useful thing.

Here are some things I've learned while taking SignalR web applications from local development to production deployment. ⚡𝗔𝘂𝘁𝗵 𝘄𝗼𝗿𝗸𝘀 𝗱𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝘁𝗹𝘆.

My accounts got hacked one evening at work. It made me ask who controls my notes. So I built Atomic Notes: notes on your phone first, cloud copy in your own Google Drive, no ads, no trackers, no AI.

I built LearnAnatomy3D ( learnanatomy3d.com ), a free 3D human anatomy atlas that runs in the browser: ~2,900 clickable structures across 11 body systems; male and female bodies; guided tours and quizzes; 14 languages, no sign-up.

Versão do conteúdo: outubro de 2026 Fontes: exclusivamente a documentação oficial da Anthropic ( code.claude.com/docs e support.claude.com ). A lista completa está em Fontes oficiais. Aviso: o Claude Code é atualizado com frequência.

Choosing the wrong cloud security platform can leave an organization in a worse position than before the purchase.

Hourly time-series data rarely arrives clean. Hours go missing, timestamps repeat, sensors report impossible values, and some series start years after the others.

AI-assisted draft. I wrote and verified the setup against the current Brandiseer MCP endpoint and developer docs. Disclosure: I work on Brandiseer. This whole post uses its MCP server, so read it with that in mind.

What are Hedera Agent Accounts? Caps on-chain, mainnet in Q2 2027 Hedera Agent Accounts, announced October 8, 2026, are programmable, non-custodial spending accounts for AI agents.

Most YouTube scripts are written like blog posts: an intro, some sections, a conclusion. Then they get read to a camera, and the retention graph slopes down the whole way. Viewers don't read a video. They decide over and over whether to keep watching.

Hey everyone! I'm a FinOps Engineer working in Big Tech, with 5 years of experience in the field. My job sits somewhere between cloud infrastructure, data, automation, and engineering teams.

Still paying $15–30/month just to send a PDF invoice? Or stuck behind "free" tools that watermark your work until you upgrade? I built InvoiceFast to end that.

Luca Bertuzzi / Euronews : The EU Commission's AI Office launches formal AI Act probes into OpenAI and Anthropic over AI agent hacks; experts say the AI Act includes an R&D exemption — The EU is investigating OpenAI and Anthropic over AI agents that hacked...

A creator I follow recently shared their Mailchimp bill: $308/month for 7,000 subscribers — on an old plan whose price quietly rises 11–13% a year. The number stuck with me, because the reason it's so high isn't usage. It's how the pricing works.

The biggest design shift of the AI era isn’t about who writes the code. It’s about how long the code is expected to live. Churn has always been a dirty word in software. Microsoft researchers showed years ago that relative code churn predicts defect density.

Getting an LLM-powered feature to work in a demo takes an afternoon. But getting it to produce the same clean, structured answer every time is a bigger challenge. It’s also what gives devs pause when using AI.

Have you ever opened an application log, found a long stack trace, and spent the next hour trying to figure out what actually went wrong? As developers, we get used to reading exceptions.

Book: Prompt Engineering Pocket Guide The series: Pocket Guides for Developers — 8 short books on agents, RAG, prompts, observability, events, databases and system design — the whole series My project: Hermes IDE | GitHub — an IDE for developers who ship with...

Jagmeet Singh / TechCrunch : Bengaluru-based Scimplify, which uses AI agents and 500+ partner manufacturing facilities to accelerate chemical production, raised $25M led by Hitachi Ventures — As manufacturers across industries strive to reduce their reliance...

27 posts, roughly 827 combined dev.to views, 18 comments, and exactly 0 search clicks -- still, two months in. Those are the real cumulative numbers, not the encouraging subset of them.

Want to understand what makes LLMs fast? Build the systems yourself.

Jason Schreier / Bloomberg : Inside the making of Rockstar's GTA VI, which analysts expect to sell 40M copies and make $3B+ in revenue in its first four months; Rockstar now has 4,711 staff — If the video game industry had something like an annual high school...

Hillel Wayne discusses how formal methods principles - such as property strength, state-space verification, and environment assumptions - help software engineers uncover critical architectural bugs early.

submitted by /u/Fcking_Chuck [link] [comments]

Gaby Del Valle / The Verge : Ukraine's drone strikes on Yandex data centers disrupted Yandex's web crawlers, not Russian political bot operations, as Zelenskyy celebrated “less division” — Zelenskyy celebrated ‘less division’ on social media after the strikes...

Works in Progress Magazine : China's industrial dominance is driven by competitive local governments that act like venture capital firms, making it a continent-sized Silicon Valley — China is not the world's largest command economy.

https://arstechnica.com/information-technology/2026/10/topgolf-saved-over-11-3-million-after-leaving-vmware/ A successful migration from VmWare. I hope it gives some hopes for those still stuck with them.