Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

771 _chall 2026-10-30 07:09:12 UTC phorion.io Llama Share 482

Phorion has discovered a backdoor in the Claude Code for VSCode extension bundle that drops a persistent SSH backdoor across macOS, Linux, and Windows. The malware sets up an outbound SSH connection to 134.209.82[.]225 on port 22 and sends a beacon back to the attacker's server with host reconnaissance information.

Backdoors in official Claude Code extensions

652 dsr_ 2026-10-30 11:05:53 UTC cyberplace.social Llama Share 17

A popular DevOps extension, Cursor, was found to have a reverse SSH backdoor due to a supply chain attack by Anthropic. The compromised version has been removed from repositories but the issue persists in updated versions that auto-update.

US Reps Lead Democratic Resolution Opposing A.I. Bubble Bailout for Big Tech

624 DeepLogin 2026-10-30 12:08:00 UTC progressives.house.gov Llama Share 470

Congressional Progressive Caucus introduces a resolution warning of AI-related economic risks and opposing bailouts for corporations or executives impacted by an A.I. bubble, instead supporting federal action to protect workers and low-income communities. The lawmakers aim to prevent taxpayers from bailing out big tech billionaires who made reckless bets on artificial intelligence.

elect.horse

534 solarist 2026-10-30 09:14:34 UTC elect.horse Llama Share 150

A game is being described where players draw districts to favor a horse's election win, and the goal is to pack opponents into losing districts. The game offers various modes, including tutorials, puzzles with increasing difficulty levels.

AI isn't replacing SREs, it's deskilling them

501 dorianniemiec 2026-10-30 15:52:18 UTC newsletter.signoz.io Llama Share 378

The author discusses how AI is making SREs less capable by automating routine tasks, leading to deskilling and never-skilling. This can result in a vicious cycle where SREs rely on AI more, degrading their skills further.

Claude Code VS Code extension with backdoor released on Cursor marketplace

399 bashtoni 2026-10-30 10:22:51 UTC doublepulsar.com Llama Share 1

Anthropic's Claude Code extension was compromised, delivering a remote access trojan via an SSH reverse backdoor to tens of millions of developers. A malicious version with over 40 million installations was replaced by Anthropic just 8 hours ago, but its safety is uncertain.

Northflank Breached

356 js4ever 2026-10-30 15:10:31 UTC status.northflank.com Full Share 272

Northflank Status

Herdr has released native app

347 cherioo 2026-10-30 00:42:41 UTC github.com/herdrdev Llama Share 239

Herdr is a desktop app for terminals and coding agents, available on Linux, macOS, and Windows. It allows users to keep work running in spaces with tabs and splits, even when the window closes or local machine sleeps.

The $6.3B Binance hack was pulled off in just 20 minutes

306 domhudson 2026-10-30 12:50:01 UTC wired.com Llama Share 214

Hackers stole around $6.3 billion from Binance's wallets on multiple blockchains in the largest crypto heist ever, with half of the funds frozen by companies and exchanges. North Korean hackers are suspected to be behind the attack, with some firms linking it to elite group TraderTraitor known for high-profile attacks.

Anthropic may not secure investment-grade rating after IPO, Blackstone says

277 petethomas 2026-10-30 17:27:25 UTC ft.com Full Share 225

For help please visit help.ft.com. We apologise for any inconvenience. The following information can help our support team to resolve this issue.

Medicare Will Pay $50k for Your Heart Attack. It Should Pay $100 to Prevent It

269 brandonb 2026-10-30 14:27:44 UTC medpagetoday.com Llama Share 257

The American College of Cardiology and American Heart Association have finally recognized the importance of coronary artery calcium (CAC) scans in preventing heart attacks, a tool that can identify disease years before it causes an attack. CAC scans are now recommended for adults with borderline risk factors, offering a more accurate measure than traditional risk calculators.

Azure's Weakest Link – Five Full Cross-Tenant Compromises

261 swq115 2026-10-30 10:06:15 UTC binarysecurity.no Llama Share 51

The author has discovered multiple vulnerabilities in Azure's API Connections, a part of Azure Logic Apps, allowing attackers to compromise any connected backend service worldwide. These vulnerabilities netted the author $200,000 and were reported to Microsoft.

Proton's CEO Cancels AI 'Re-Interviews'

259 cdrnsf 2026-10-30 17:24:45 UTC 404media.co Llama Share 215

Proton CEO Andy Yen cancelled a company-wide re-interview process after an investigation revealed concerns over AI adoption and security, with some employees fearing firings. The move was seen as insufficient by many Proton users who called for Yen's resignation amid allegations of prioritizing revenue over security.

My favourite PowerMac is a Nintendo Wii

241 DHowett 2026-10-30 17:25:15 UTC virtuallyfun.com Llama Share 64

The author successfully ported classic Mac OS to PowerPC systems, specifically the Nintendo GameCube and Wii U consoles. They overcame various challenges, including hardware-specific patches and emulation issues, to get the system booting with a blinking floppy icon.

US tech stocks see sharp falls over AI cost fears

235 mindracer 2026-10-30 16:13:02 UTC bbc.co.uk Llama Share 262

US stocks continue to slide due to concerns over AI build-out costs, with Intel and Amazon shares falling. Tech-heavy Nasdaq opens at its lowest level in two months amid fears of sector slowdown.

The federated code forge

230 zlliang 2026-10-30 15:44:29 UTC tangled.org Llama Share 77

Tangled is a new, federated code forge that allows users to host their own code and collaborate with others while maintaining control over their infrastructure. It offers the longevity of an open protocol with the convenience of a proper forge, featuring self-hosting options and customizability.

Florilegium: Procedural Flowers in LaTeX

215 nanna 2026-10-30 15:48:12 UTC github.com/kevinraymond Llama Share 36

The author created a LaTeX package called "florilegium" to generate floral ornaments in the style of 18th-century botanical illustrations. The package uses Lua to procedurally generate flowers, leaves, and stems based on parameters such as seed values and page layout.

Through Captain Jean-Luc Picard, Patrick Stewart taught us the measure of a man

198 apress 2026-10-30 20:23:30 UTC bostonglobe.com Llama Share 116

Patrick Stewart's portrayal of Captain Jean-Luc Picard has left a lasting impact on fans, particularly for those who grew up watching Star Trek: The Next Generation. His nuanced and emotionally truthful performance as the character continues to resonate with audiences today.

Bunny CDN Security Incident

197 SondreDag 2026-10-30 19:05:22 UTC status.bunny.net Llama Share 40

A security incident occurred with a third-party server provider, affecting one of our CDN nodes in Armenia. We've stopped traffic and investigated, finding no evidence of unauthorized access to the node or its data.

Blockchain intelligence firms link North Korea to $6.3B hack on Binance

190 paulpauper 2026-10-30 15:39:05 UTC npr.org Llama Share 121

A North Korean hacking unit, TraderTraitor, is suspected of stealing over $6 billion from Binance cryptocurrency exchange. The company has frozen assets and will cover losses, with deposits unaffected but withdrawals suspended temporarily.

Show HN: A working Nintendo in ~1GB of Qwen weights

189 dbreunig 2026-10-30 16:40:22 UTC github.com/dbreunig Llama Share 111

Nesformer is a model that simulates the NES console's 6502 CPU and cartridge, predicting its execution log one token at a time. It uses Qwen3_5ForCausalLM weights compiled from CHIP-8 and RISC-V CPUs.

Pico CSS is no longer maintained

188 henrid 2026-10-30 01:58:44 UTC github.com/picocss Full Share 97

This repository was archived by the owner on Oct 4, 2026. It is now read-only. Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

ICE wants its mask back, and hired a company to ask

187 rdmuser 2026-10-30 15:26:58 UTC blog.flokinet.is Llama Share 22

A company acting for a government agency requested the removal of icepi.cx, a site publishing work identities of government employees, citing doxxing concerns. The hosting provider declined the request as it serves a legitimate public interest in accountability reporting.

GitHub Incident with Actions, Pages, and Webhooks

146 damontal 2026-10-30 17:57:35 UTC githubstatus.com Full Share 61

GitHub's Status Page - Incident with Actions, Pages, and Webhooks.

Ask HN: Are you tired too in this AI era?

142 mellosty 2026-10-30 09:17:43 UTC news.ycombinator.com Full Share 136

Sorry

Linode Security Incident

140 lacoolj 2026-10-30 21:57:40 UTC status.linode.com Full Share 73

Akamai is aware of the recently published remote code execution CVE-2026-98432. We are actively investigating and taking the appropriate mitigation actions, while we continue to monitor our platform in parallel. If you have questions or are experiencing an impact due to this issue, please reach out to us in a ticket at https://cloud.linode.com/support.

Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

106 theanonymousone 2026-10-30 15:23:41 UTC nbcnews.com Llama Share 40

Polymarket halted trading due to a software compromise, with reports of user wallets being drained and $2.65 million in cryptocurrencies stolen. The company has assured affected traders that they will be fully reimbursed and is cooperating with British law enforcement authorities.

Cormac McCarthy's Library

106 maitland 2026-10-30 00:31:00 UTC cormacmccarthy.lib.utk.edu Llama Share 35

Anubis is a website protection system that prevents AI scrapers by requiring proof of work, causing downtime for legitimate users. Users can try reloading the page or disable plugins like JShelter to access the site.

French national assembly votes 0.055€/GB internet tax

104 nick486 2026-10-30 18:31:56 UTC lesnumeriques.com Llama Share 123

Un amendement au projet de loi de finances vise à instituer une contribution assise sur les volumes de données acheminés vers les utilisateurs français, fixée à 0,055 euro par gigaoctet.

Infinite Mac: BeOS

102 ecliptik 2026-10-30 19:30:09 UTC blog.persistent.info Llama Share 32

Infinite Mac now offers BeOS versions, a multimedia-focused OS that impressed Apple and was ported to Power Macintoshes in the mid-90s. The site's emulator, DingusPPC, has been improved for BeOS compatibility.

Anthropic Cracking Down on Video Game Rewrites

102 jacquesm 2026-10-30 14:22:52 UTC twitter.com/chasmmmmmmmmmmm Llama Share 101

Anthropic has introduced a new rule restricting game rewrites, modding, and user creations. The rule aims to prevent recreations of existing games under different names or genres.

Cisco gives engineer unlimited AI tokens to rewrite legacy code

98 taubek 2026-10-30 14:08:20 UTC fortune.com Llama Share 108

Cisco's president, Jeetu Patel, is hiring young workers to challenge the status quo and bring fresh ideas to his company. He believes that Gen Zers with little experience can teach veterans how to think differently and drive innovation.

French digital tax may kill VideoLan non-profit

93 miohtama 2026-10-30 19:01:14 UTC twitter.com/videolan Llama Share 83

French socialists and parliament members voted a tax on data flows that could cost VideoLAN over 1 million euros per year, despite not understanding its implications. They claim to want technological sovereignty but seem clueless about the consequences of their decision.

AO3 Down for Maintenance

89 idlewords 2026-10-30 21:17:23 UTC otwstatus.org Llama Share 20

AO3 is currently down due to a security incident, with no data deleted and user database potentially compromised. Users are advised to change passwords on other sites using the same password as on AO3.

The oldest ice disappears and the Stone Age emerges from it

87 dxs 2026-10-30 19:51:33 UTC sciencenorway.no Llama Share 30

Archaeologists in Norway have recovered 48 prehistoric arrows from melting ice, dating back 5,000-6,000 years. The finds highlight the impact of climate change on preserving ancient artifacts.

'Elite North Korean hackers' blamed for $6.3B Binance hack

86 tosh 2026-10-30 07:41:13 UTC theguardian.com Llama Share 92

Binance, the world's largest cryptocurrency exchange, has been hacked by North Korean hackers resulting in a loss of $6.3 billion worth of digital assets. The company is working to resolve the issue and has frozen about $3 billion of the stolen funds.

France is getting download tax for content providers (€0.055/GB)

84 bko 2026-10-30 22:10:12 UTC resetera.com Full Share 74

How do you take a picture of a black hole?

81 dverlaeckt80 2026-10-30 09:49:02 UTC quantamagazine.org Llama Share 61

Harvard astrophysicist Shep Doeleman and his team used a network of radio telescopes around the world to capture the first-ever image of a black hole, located 55 million light-years away in galaxy M87. The Event Horizon Telescope project, which took over two decades to complete, has opened up new possibilities for studying supermassive black holes and their role in shaping galaxies.

Show HN: I built a multiplayer game where you're an aerial fighter cat

79 pawelwentpawel 2026-10-30 15:29:40 UTC catcopter.com Full Share 39

A free multiplayer browser game: cute cats with propellers on their paws fly, shoot and brawl for catnip over tropical islands. Five classes, team modes, no download.

Intel plunges 25%, triggers global chip rout on bleak outlook

79 tartoran 2026-10-30 13:43:48 UTC reuters.com Full Share 94

Please enable JS and disable any ad blocker

Jules Verne's Lost Novel

78 dnetesn 2026-10-30 19:55:10 UTC blue-continuum.com Llama Share 14

Jules Verne imagined Paris in 1960, a century ahead, to see what civilization the 19th century might become with its faith in science and efficiency. His book "Paris in the Twentieth Century" was initially refused by his publisher due to its bleak tone and implausible prophecy.

I didn't know I was lacking in Vitamin D until I collapsed at work

77 tartoran 2026-10-30 15:36:18 UTC bbc.com Llama Share 91

A UK teacher and student experienced severe symptoms after being diagnosed with low vitamin D levels, which can cause bone disease. Experts are calling for a higher threshold to diagnose deficiency, as it is often missed or misdiagnosed in young people and adults.

Geist Serif

76 Zm44 2026-10-30 15:46:42 UTC vercel.com Full Share 23

“We created something that could only be made for today. Not overly blocky for screens from a decade ago, not filled with mechanical compromises for physical ink. Just serifs at perfect points. ”

Anthropic to receive high 'junk' rating from credit agencies following IPO

69 jnord 2026-10-30 23:08:12 UTC techcrunch.com Llama Share 36

Blackstone expects Anthropic, a leading AI lab, to receive a high junk rating after its IPO due to concerns over the company's massive spending. This could make it more difficult and costly for Anthropic to raise funds in the future.

Massie, Khanna, and Others Introduce the "Epstein Files Transparency Act II"

68 surprisetalk 2026-10-30 14:00:07 UTC massie.house.gov Llama Share 16

Rep. Thomas Massie introduces H.R. 9694, the Epstein Files Transparency Act II, to give state attorneys general and victims standing to challenge the DOJ for failing to comply with disclosure requirements of Public Law 119-38. The bill aims to release over 3 million Epstein files and ensure transparency in investigations and prosecutions.

CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

63 cobychapple 2026-10-30 02:33:04 UTC penligent.ai Llama Share 40

A Linux kernel vulnerability (CVE-2026-98432) allows a remote attacker to execute arbitrary code on a vulnerable system, specifically when using Multipath TCP. The vulnerability is due to a use-after-free error in the IPv4 TCP handshake path and can be exploited by sending repeated connection attempts with unusual option combinations.

sanstun: A sans-IO, parallel-friendly WireGuard implementation in Rust

55 wh33zle 2026-10-30 21:30:00 UTC firezone.dev Llama Share 9

The WireGuard state machine implementation, sanstun, is a sans-IO Rust library that optimizes for ease of use, security and performance. It separates IO and side-effects from the state and business logic to enable parallel-friendly API design.

Tracks along the longest drive on another world

53 shcallaway 2026-10-30 01:19:02 UTC science.nasa.gov Llama Share 6

Perseverance has achieved a new record for the farthest distance driven on another celestial body, reaching 45.22 kilometers on Mars. The rover's autonomous navigation system and updates have enabled it to drive longer distances without human intervention, paving the way for future exploration of the Martian surface.

Product Managers aren't safe either

52 greatNespresso 2026-10-30 20:14:39 UTC lucaskostka.com Llama Share 74

AI is threatening jobs across various roles, including developers and project managers. The key to survival lies in adapting skills, such as understanding customer pain points and architecture, which will become increasingly important for a single function role.

A Pickpocket's Guide to New York

51 prismatic 2026-10-30 19:26:39 UTC newyorker.com Llama Share 7

John Turturro stars in "The Only Living Pickpocket in New York" alongside Apollo Robbins, a renowned pickpocket and magician. The film explores the art of pickpocketing through their on-screen partnership and real-life experiences with the craft.

Neal Stephenson on AI and What Comes Next [video]

51 justin66 2026-10-30 14:18:34 UTC youtube.com Embed Share 23

I Returned My iPhone Duo

46 ricobecks 2026-10-30 09:00:41 UTC codakuma.com Llama Share 98

The reviewer, a long-time iPhone user, was initially excited about the iPhone Duo but ultimately decided it wasn't for them due to its small screen and lack of Face ID.

Fiber lasts decades, GPUs last three years: the AI boom isn't the dot-com boom [video]

41 frag 2026-10-30 11:16:15 UTC youtube.com Embed Share 53

American views of higher ed decline, once again

40 surprisetalk 2026-10-30 12:20:05 UTC bryanalexander.org Llama Share 93

US attitudes towards higher education have declined significantly, with a 2013 high of 70% considering college "very important" now at less than half that amount. The decline is seen across all demographic groups, raising concerns for campus-community relations and government support.

5-MeO-DMT sometimes cancels the Ebbinghaus illusion

38 surprisetalk 2026-10-30 13:20:06 UTC psychotechnology.substack.com Llama Share 49

The author experienced a near-complete cancellation of the Ebbinghaus illusion while on 5-MeO-DMT, suggesting that psychedelics can reveal patterns more clearly than in normal waking state. This effect may be due to 5-MeO-DMT's unique neuropharmacology and its ability to interact with the electromagnetic field.

Show HN: Lasm – Write formally verified webapps in Lean for Node/serverless/edge

35 lastmjs 2026-10-30 02:05:41 UTC github.com/millillion Llama Share 20

Lasm is a tool that compiles Lean 4 programs to WebAssembly, allowing them to run on various platforms including Node.js, Edge, Bun/Deno, browser and more. It supports full-stack development with proofs of correctness for the entire application.

Show HN: To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing Game

34 francisofascii 2026-10-30 23:51:24 UTC tng.episodle.com Llama Share 11

This is a Star Trek: The Next Generation episode guessing game where users can guess episodes based on images, with feedback provided even if the season is incorrect. User data may be tracked and stored for analytics purposes.

Just Noting That Your Candy Corn Is Made of Bug Secretions

30 fortran77 2026-10-30 13:26:43 UTC theatlantic.com Full Share 59

Please hold a moment… We’re just confirming your site connection is secure. This helps protect our site and our users. Thanks for your patience.

North Korea Steals USD 6.36B from Binance in the Largest Hack in History

30 entryleveljobsc 2026-10-30 07:01:16 UTC trmlabs.com Llama Share 2

A massive crypto theft occurred on October 29, 2026, with approximately USD 6.36 billion stolen from Binance wallets across ten blockchains. The attack is attributed to TraderTraitor, a North Korean state-sponsored hacking group.

Show HN: Automatic deduction of FlashAttention kernel from ~25 lines of SQL

23 alxmrs 2026-10-30 20:09:47 UTC github.com/xqlsystems Llama Share 1

A naive SQL plan stores every combination of Q, K, and V as one statement. DDX uses a separate model and loss for attention calculations with scaled scores by 1/8.

Show HN: Sketch Stadium – watch your agent play Pictionary

23 ericlevine 2026-10-30 15:23:11 UTC sketch.wakeshift.ai Full Share 8

An Arrogant Way of Killing (2016)

22 firefax 2026-10-30 20:08:52 UTC magazine.atavist.com Llama Share 10

A real estate agent in the Philippines was murdered, and a US DEA investigation linked it to Paul Le Roux, a notorious South African crime lord. The case involved two American men who were hired by Le Roux to kill Lee for not completing a real estate deal.

Pompeii wardrobe found untouched since 79CE holds keepsakes, coins, and two mice

22 wawayanda 2026-10-30 13:40:29 UTC archaeologymag.com Llama Share 8

Archaeologists have uncovered a 2,000-year-old wardrobe in Pompeii with personal items revealing a woman's daily life. The finds include grooming tools, jewelry and charms that were likely used to ward off harm as "rattles".

Fair Use Benefits Everyone

20 pentagrama 2026-10-30 23:33:55 UTC openai.com Llama Share 47

Supporters of fair use, including authors and academics, argue that using copyrighted works to train AI models is a win-win for everyone. They claim it enables transformative technologies with public benefits and preserves room for permissible uses of copyrighted material.

Embraer's Atech aims to double in size by 2030 with drone traffic control

19 dvaplima 2026-10-30 20:18:18 UTC bloomberglinea.com.br Llama Share 2

Atech, empresa de tecnologia controlada pela Embraer, visa dobrar seu tamanho até 2030 com expansão em mercados fora do Brasil. A empresa desenvolve soluções para gerenciamento de tráfego aéreo e controle de drones.

$300k for a personalized cancer vaccine

19 jajoosam 2026-10-30 15:29:08 UTC rnafoundry.com Llama Share 6

The RNA Foundry provides contract research, development and manufacturing services for personalized cancer vaccines. It offers a range of services including design, production and quality control testing for mRNA-based cancer vaccines.

Programming at Light Speed: Building the Gravity Query Engine

18 poly2it 2026-10-30 20:18:10 UTC pgrust.com Llama Share 6

The pgrust project has released v0.4-beta, which features a new query engine called Gravity that achieves speeds up to 3x faster than ClickHouse on certain queries while supporting Postgres' full SQL dialect and type system. By compiling SQL queries into an intermediate representation and then generating machine code at runtime, Gravity can execute analytical queries in under a millisecond ...

Show HN: Spinf-serve – inference server for bulk scoring and decisions

18 giarec 2026-10-30 17:03:12 UTC github.com/spinfinc Llama Share 4

spinf-serve is a serving engine that reads content once and answers multiple questions about it in the same pass, using an OpenAI-compatible API. It runs on NVIDIA GPUs and serves at port 8000.

Show HN: Arken – Passwordless auth middleware using secp256k1 keys

12 zachbenson817 2026-10-30 01:22:38 UTC github.com/zacharybenson Llama Share 0

This is a passwordless authentication middleware for Express and FastAPI, using a one-time nonce signed with the user's private key. The server verifies the signature without storing any credentials or database information.