Malware uses LLMs to rank victims by how much they're worth

https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/images/2026/10/VOLTA.jpg
VOLTA is a sophisticated malware that steals credentials and uses AI to rank victim assets by monetization value, with a self-deleting mechanism and no attacker-owned infrastructure. The malware's AI layer allows it to analyze the stolen data and provide a prioritized dossier of the victim's assets, making it a unique threat in the cybercrime world.

Casio Watches of the 1980s

You don't have permission to access "http://www.casio.com/us/watches/50th/Heritage/1980s/" on this server.

Molly (Signal fork) has not been updated since 3 months and is vulnerable

https://media.piefed.world/users/HV/Wn/HVWnLCyko9zvGqy.svg
The latest Signal exploit has been fixed in version 8.27, but Molly remains vulnerable and is recommended to be deleted until it's updated adequately. Users can download the APK from a periodic update service like Obtainium or f-droid instead of relying on Molly for Android devices without Google Play Store access.

We Took over ChatGPT Accounts

https://www.parameter.ai/labs/images/openai-public-share-modified-page.png
Researchers found a way to take over someone's ChatGPT account by sending a malicious link, which executed as chatgpt.com with access to the victim's authenticated web session. The payload could enumerate private conversations, retrieve content from them, and send data to an attacker-controlled server.

Serbia just elected the world's brainiest parliament

A group of academics, including astrophysicists and organic chemists, have been elected to Serbia's parliament after a student-led opposition movement won in October. They aim to fight corruption and establish meritocracy in the country's government and education system.

Switch Lowering in GCC

The compiler uses a combination of bitset and jump table lowering strategies for switch statements, depending on the number of case labels and their distribution. It employs dynamic programming to optimize these strategies, considering factors such as register width and case values threshold.

Simple circuits can create complex behaviors

https://aatishb.com/myriad/promo_behaviors.jpeg
Researchers have built a simple brain model to understand how complex behaviors emerge from neural circuits. This model, called a "spark," uses just four neurons and two connections to create rich and unexpected behaviors like reaching light sources.

A/SIDE – Private photo sharing and encrypted messages

https://a-side.social/images/screenshots/widget-detail.webp
Photos, videos and everyday updates from the people you know. Newest first. Nobody else’s idea of what you should see. Sign up with your email. No invitation needed. Share your personal invite link with a friend, accept the connection, and you’re in each other’s feed. Help with joining and invites → Free covers the product, with 30 days of history. Pro unlocks the full archive for $20/year. ...

Ex-Meta Researcher Torrented Pirated Books, Deleted It 'Due to Litigation'

https://torrentfreak.com/images/meta-logo-1-600x383.png
Meta is being sued over using pirated books to train its Llama AI models, with authors and publishers claiming the company obtained the data through BitTorrent. Meta denies this, citing a former researcher's testimony that he downloaded the dataset himself.

Digital minimalism

The author reflects on the value of minimalism in both physical and digital life, citing personal experiments with reducing social media use and living without a cell connection. They found that these changes improved their mental health and allowed for more local knowledge apps to be developed.

Prospero: A new coding harness for a more civilized age

Reading and writing are less symmetric than you (probably) think

Buffering in I/O operations involves multiple layers of caching and buffering to improve performance, but this introduces behavioral asymmetries between read and write operations. Read operations typically return errors before the data is written to storage, while write operations delay error reporting until after the data has been written to a buffer cache.

What is a light-day? The milestone Voyager 1 is closing in on

https://assets.science.nasa.gov/dynamicimage/assets/science/psd/photojournal/pia/pia21/pia21839/PIA21839.tif?w=2048
Voyager 1 is approaching a milestone of being one light-day away from Earth, marking the distance light can travel in 24 hours. The spacecraft has traveled nearly 50 years and will reach this point on November 18, 2026.

AI, Lean, and the Future of Formal Verification, with Lean Creator Leo de Moura

https://i0.wp.com/thedataexchange.media/wp-content/uploads/2026/10/Leo-de-Moura-art.001.jpeg?fit=1920%2C1080&ssl=1
Leo de Moura discusses how AI is making formal verification more accessible and potentially transforming software engineering, with a focus on Lean, a programming language and theorem prover. He explains that formal verification addresses the trust bottleneck between humans and AI-generated code, allowing developers to verify properties of their code before deployment.

Show HN: Marelleo, an open-source story box I built for my kids using ESP32

https://zebra.rodeo/assets/images/marelleo/breadboard.jpg
The author created a custom Toniebox-like device using an ESP32 development board, breadboard, and 3D printing to play audio tracks based on figurines. The project taught him about electronics and allowed him to create a unique object for his children that can be updated without needing technical expertise.

Hunting 'Zombie Accounts' in Active Directory

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhk5ynofM8bdPNy3tCdBsL3W5cI5AELzMjHCwLUPPk2n8Beg2A9wunda2_FKXY3KgbOzwEvQKW0xuRtCifpO_ybtNOhi1HJJmVfeBPABKebb3o08Rs4B_ME55wY6J9bJR-PpxTsNr5zjUh3hD48UNOUZZNQgIjnDD63o7ghk21G5t4N_1kwy1DDxa10Ls/w400-h400/ZOMBIEACCOUNTCRISIS.jpg
Google's system detected unusual traffic from your computer network, possibly due to malicious software or automated requests. Solving the CAPTCHA will allow you to continue using Google services temporarily.

The $6.3B Binance hack was pulled off in just 20 minutes

https://media.wired.com/photos/6ae463bdc091c8b8d1ec019e/master/w_2560%2Cc_limit/102026-Binance%2520Hacked.jpg
Hackers stole around $6.3 billion from Binance's wallets on multiple blockchains in the largest crypto heist ever, with half of the funds frozen by companies and exchanges. North Korean hackers are suspected to be behind the attack, with some firms linking it to elite group TraderTraitor known for high-profile attacks.

Show HN: Ghostman – A fast, keyboard-driven TUI API client and webhook inspector

https://github.githubassets.com/assets/platform-4ce65ae0bf273ce2.png
Ghostman is a local-first, keyboard-driven API client and webhook inspector for developers. It offers fast terminal workflows, YAML-based collections, and an embedded webhook server for local testing and inspection.

My favourite PowerMac is a Nintendo Wii

https://virtuallyfun.com/wp-content/uploads/2026/10/macos922_wii1_00-00-59.png
The author successfully ported classic Mac OS to PowerPC systems, specifically the Nintendo GameCube and Wii U consoles. They overcame various challenges, including hardware-specific patches and emulation issues, to get the system booting with a blinking floppy icon.

Jepsen: ParticleDB 1.1.4

ParticleDB is a database system that claims to be 1087x faster than PostgreSQL but has been found to have numerous serious safety errors, including data loss and corruption. Despite its promising features, the database's documentation was riddled with omissions, inconsistencies, and confabulations.

Cloudflare Turnstile solver library (no headless browser required)

https://github.githubassets.com/assets/platform-4ce65ae0bf273ce2.png
The cfsolve Rust library solves Cloudflare Turnstile widgets and challenge pages without a headless browser, returning tokens or cookies. It uses pre-recorded responses to impersonate browsers and can be configured with profiles for different browsers.

Enlightenment 0.28 Released with Many Improvements

https://www.phoronix.com/assets/categories/desktop.webp
Enlightenment 0.28 is released after two years, featuring NetBSD support, NetworkManager integration, PipeWire mixer support, and numerous improvements. It includes new window actions, better display mode sorting, and code cleanups, maintaining both X11 and Wayland support.

Northflank Breached

https://northflank.instatus.com/api/og
Northflank Status

Breaking the open web won't stop the bad bots

https://cdn.sanity.io/images/3tzzh18d/production/46070e9d00c44c7690c79155723ff59e5c1280fe-1200x675.png
Major media outlets are advocating for the Stealth Bot Prohibition Act, which would require website accessors to identify themselves and their purposes. The bill threatens legitimate public-interest activities like investigative journalism and data collection that rely on automated tools.

Tell HN: Scribd Breached

Sorry

Cisco gives engineer unlimited AI tokens to rewrite legacy code

https://fortune.com/img-assets/wp-content/uploads/2026/10/GettyImages-2270629609-e1793295597735.jpg?format=webp&w=1440&quality=75
Cisco's president, Jeetu Patel, is hiring young workers to challenge the status quo and bring fresh ideas to his company. He believes that Gen Zers with little experience can teach veterans how to think differently and drive innovation.

Florilegium: Procedural Flowers in LaTeX

https://raw.githubusercontent.com/kevinraymond/florilegium/main/gallery/seeds.gif
The author created a LaTeX package called "florilegium" to generate floral ornaments in the style of 18th-century botanical illustrations. The package uses Lua to procedurally generate flowers, leaves, and stems based on parameters such as seed values and page layout.

The oldest ice disappears and the Stone Age emerges from it

https://image.sciencenorway.no/2714037.webp?imageId=2714037&width=960&height=548&format=jpg
Archaeologists in Norway have recovered 48 prehistoric arrows from melting ice, dating back 5,000-6,000 years. The finds highlight the impact of climate change on preserving ancient artifacts.

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/images/default-social-card.png
Phorion has discovered a backdoor in the Claude Code for VSCode extension bundle that drops a persistent SSH backdoor across macOS, Linux, and Windows. The malware sets up an outbound SSH connection to 134.209.82[.]225 on port 22 and sends a beacon back to the attacker's server with host reconnaissance information.

Show HN: A working Nintendo in ~1GB of Qwen weights

https://raw.githubusercontent.com/dbreunig/nesformer/main/examples/demo.gif
Nesformer is a model that simulates the NES console's 6502 CPU and cartridge, predicting its execution log one token at a time. It uses Qwen3_5ForCausalLM weights compiled from CHIP-8 and RISC-V CPUs.