Ideas for building
better software.

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF) that reaches an internal management interface because PeopleSoft trusts its own loopback address

Should AI Decide Your Court Case? This Judge Says Yes

One of England’s top judges, Geoffrey Vos, believes that AI could adjudicate plenty of civil cases. The question, he says, is where the line should be drawn.

Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature

Interpol's annual Operation Serengeti, now in its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.

Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-111497 (CVSS score: 9.2) - An unchecked return value vulnerability in

Jio shares surge 21% in market debut after blockbuster India IPO

Jio has debuted as India's second-most valuable listed company, behind its parent, Reliance Industries.

ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)

Show HN: A visual explainer tracing an LLM API request to the GPU and back

Article URL: https://github.com/sujee/visual-stories/tree/main/projects/tracing-llm-api-request Comments URL: https://news.ycombinator.com/item?id=50268042 Points: 1 # Comments: 0

I dug up a plugin I'd abandoned for a year: RFC 9457 in Fastify

A year ago I wrote a Fastify plugin, published it on npm, and forgot about it. It happens. You ship it, write a couple of posts, move on to the next project, and the repo sits there collecting dust. This week I decided to clear a few skeletons out of the closet. This one came out first: fastify-rfc9457. Here is what I found when I opened it after ten months: all 77 tests still passed, even on the latest Fastify; npm run lint had never worked, because ESLint was never installed; fastify-plugin, i