Hacker News

New stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Nvidia Open Agent Safety Platform (nvidia.com)
    1 pointsby 2 minutes ago
    —discuss
  2. Analysis: EVs are now nine times cheaper than petrol or diesel to drive in UK (carbonbrief.org)
    1 pointsby 6 minutes ago
    —discuss
  3. Rickrolling with a Pharmacy Cross (hugoarnal.com)
    1 pointsby 9 minutes ago
    —discuss
  4. Liquid Glass UI-Inspired Glass Effects Library (github.com/dashersw)
    1 pointsby 12 minutes ago
    —discuss
  5. SpaceX's Starship launching to orbit for first time ever today (space.com)
    1 pointsby 15 minutes ago
    —discuss
  6. Reverse Engineering the iPod Classic's Undocumented Mikey Chip (terminalbytes.com)
    1 pointsby 15 minutes ago
    —discuss
  7. Three Days in August: What a DDoS Attack Exposed in Our Network (nine.ch)
    1 pointsby 16 minutes ago
    —discuss
  8. Large Scale Threat Actor Attribution from Infostealer Logs (glazer.ee)
    2 pointsby 20 minutes ago
    —discuss
  9. Google: AI-Assisted Rewrites of C/C++ Dependencies to Rust (bughunters.google.com)
    2 pointsby 24 minutes ago
    —discuss
  10. Personal Continuity Plans (Digital Legacy) (ripe.net)
    1 pointsby 24 minutes ago
    —discuss
  11. Big AI's content problem: Take the work, keep the money (theregister.com)
    1 pointsby 25 minutes ago
    —discuss
  12. LLMs in Professional Software Engineering (knorpelsenf.me)
    2 pointsby 26 minutes ago
    —discuss
  13. Can Life Be Explained by Physics? (Featuring Prof. Brian Cox) [video] (youtube.com)
    2 pointsby 28 minutes ago
    —discuss
  14. ETH Computer Science enrolment saw a 15 percent decline (ethz.ch)
    2 pointsby 30 minutes ago
    —discuss
  15. Unified U.S. Site Blocking Bill Targets ISPs and DNS Resolvers but Spares VPNs (torrentfreak.com)
    3 pointsby 32 minutes ago
    1comments
  16. Show HN: Free alternative to graphics design giants (scissor.studio)
    2 pointsby 34 minutes ago
    —discuss
  17. Are Big Tech bonds crowding out the US Treasury? (ft.com)
    1 pointsby 34 minutes ago
    1comments
  18. The Risks of Ignoring API Security During Mobile App Security Testing
    1 pointsby 35 minutes ago
    —discuss
  19. How I Use "AI" (2024) (carlini.com)
    1 pointsby 35 minutes ago
    —discuss
  20. Show HN: Redthread – autonomous LLM pentesting with proof-of-concept exploits (millenniums.ai)
    2 pointsby 36 minutes ago
    —discuss
  21. Pixi adds non-Python deps to Python notebooks (marimo.io)
    1 pointsby 37 minutes ago
    —discuss
  22. Show HN: Impressive hand detection AI algorithm (github.com/aryafarkhondeh)
    1 pointsby 39 minutes ago
    1comments
  23. The Cybersecurity Siege Economy (dntls.substack.com)
    1 pointsby 44 minutes ago
    —discuss
  24. European industry is doing better than you may think (economist.com)
    2 pointsby 46 minutes ago
    —discuss
  25. Doing math together in the age of AI (dustingmixon.wordpress.com)
    1 pointsby 48 minutes ago
    —discuss
  26. Show HN: Caspian – Desktop app to build and launch small vibe-coded projects (caspian.md)
    1 pointsby 48 minutes ago
    —discuss
  27. What if AGI was invented in Ancient Greece? (echohive.ai)
    1 pointsby 53 minutes ago
    —discuss
  28. AI companies in race to demonstrate their model most threatening to humanity (thecivilian.co.nz)
    4 pointsby 54 minutes ago
    —discuss
  29. 37,500 border drawings: a map of the world as people remember it (habibicode.org)
    3 pointsby 55 minutes ago
    3comments
  30. iOS 27's Reworked Stub Islands (codecolor.ist)
    1 pointsby 56 minutes ago
    —discuss

I found an SSRF in Google's official MCP Toolbox (CVE-2026-14540)

1 pointsby 1h agoanas-security-portfolio.vercel.app
Open original View on HN
1 comments
1h agoHN ↗

Google's products are littered with CVEs. Disappointing for a supposed "frontier" lab. Can't they hire competent people?

Open thread on HN ↗