New7 min read
AI Voice Fraud Needs Three Seconds of Your Voice
Voice cloning now requires just 3 seconds of audio to impersonate someone. With $893M in reported losses, detection has failed - here's what might actually work.
Read more
SECURITY
40 articles
LATEST
Langflow CVE-2026-55255: The First AI Agent Framework on CISA's Must-Patch List
CISA added the first AI agent building platform to its Known Exploited Vulnerabilities catalog. What the Langflow IDOR vulnerability means for agent security and how to check if you're exposed.
•7 min read
Read Article
New6 min read
xAI Open-Sources Grok Build After Data Exfiltration Scandal
Days after getting caught uploading entire codebases to xAI servers, Grok Build is now open source on GitHub. The HN community isn't convinced it's enough.
New7 min read
Cursor 0day: Why a 7-Month-Old Vulnerability Is Still Unpatched
Security researchers disclosed a Cursor vulnerability that auto-executes malicious git.exe files from repos - after waiting 7 months with no fix. Here's what developers need to know.
New6 min read
Clawk: Disposable Linux VMs for Coding Agents Without Cloud Bills
Open-source tool gives Claude Code, Codex, and other agents their own isolated Linux VM on your machine - network firewall included, no cloud account required.
New7 min read
GhostLock: A 15-Year Linux Kernel Vulnerability That Affects Every Distribution
A use-after-free bug in the Linux kernel's real-time mutex implementation has existed since 2011. Researchers earned $92,337 from Google's kernelCTF for discovering and exploiting it.
Read more
New6 min read
What xAI's Grok Build CLI Actually Sends Home: A Wire-Level Analysis
A security researcher intercepted Grok Build's network traffic and found it uploads entire repositories - including .env files with secrets - to xAI servers. Here's what the data shows.
New6 min read
Ghost Font: Text That Humans Can Read But AI Cannot
A new experimental technology encodes messages in video using motion-based steganography, exploiting how AI models process video as individual frames rather than continuous motion.
Read more
New7 min read
GitLost: How Researchers Tricked GitHub's AI Agent Into Leaking Private Repos
Security researchers discovered a prompt injection vulnerability in GitHub's Agentic Workflows that allows attackers to extract private repository contents through public issues.
New5 min read
Decoding the Hidden Bash Script on a Uniqlo T-Shirt
Someone found an obfuscated bash script on a Uniqlo x Akamai t-shirt and decoded it. Here's what they found - and what HN thinks about whether it was AI-generated.
Read more
New5 min read
Flipper Zero Shifts to Community-Driven Development
Flipper Devices announces their firmware hit 1.0 stability and outlines a new community contribution model - while HN debates whether 'done' software is actually a good thing.
7 min read
Claude Code Is Steganographically Marking Requests
A developer reverse-engineered Claude Code and found hidden markers that classify users by timezone, domain, and API keywords - using unicode apostrophe swaps and date format changes.
6 min read
GLM 5.2 Outperforms Claude Code on Semgrep's IDOR Vulnerability Benchmarks
Semgrep's security research team benchmarked LLMs on IDOR vulnerability detection. The open-weight GLM 5.2 beat Claude Code by 7 points at roughly one-sixth the cost.
Showing 12 of 39 articles
Keep exploring Security
- - Security Topic Hub - tools and guides for Security from the Developers Digest directory
- - Tools Directory - dive deeper across the Developers Digest knowledge base
- - Developers Digest on YouTube - video tutorials covering Security and more
Get Smarter About AI Dev
New tutorials, open-source projects, and deep dives on coding agents - delivered weekly.
One email per weekReal code, not theoryFree forever
Explore 736 topics
Browse All Topics