Brevo supply-chain attack injected ClickFix scripts on customer sites
(bleepingcomputer.com)
1.
4.
AI Model Evaluator METR Hit by Credential Theft, Probing
(darkreading.com)
5.
Protect Your Relays
(news.ycombinator.com)
6.
Show HN: Rowboat – Open-source, local-first alternative to Claude Desktop
(news.ycombinator.com)
7.
Show HN: Pu.sh – a full coding-agent harness in 400 lines of shell
(news.ycombinator.com)
8.
9.
I found 39 Algolia admin keys exposed across open source documentation sites
(news.ycombinator.com)
10.
I Found 39 Algolia Admin Keys Exposed Across Open Source Documentation Sites
(news.ycombinator.com)
11.
Stolen Gemini API key racks up $82,000 in 48 hours
(news.ycombinator.com)
12.
Show HN: HN Companion – web app that enhances the experience of reading HN
(news.ycombinator.com)
13.
Show HN: Hc: an agentless, multi-tenant shell history sink
(news.ycombinator.com)
14.
Using proxies to hide secrets from Claude Code
(news.ycombinator.com)
15.
Show HN: tomcp.org – Turn any URL into an MCP server
(news.ycombinator.com)
16.
Writing by manipulating visual representations of stories
(news.ycombinator.com)
17.
Hacked on Stripe–$41K Gone, No Real Help from Support. What Now?
(news.ycombinator.com)