HN Atlas
← All topics

Cybersecurity engineering and vulnerabilities

Security engineering, vulnerabilities, exploits, defensive and offensive techniques, and threat detection.

21,727 stories · 501 in 30 days · Updated Sep 28, 2026

The pace of conversation

Posts per month

2020-01: 273 posts2020-02: 261 posts2020-03: 265 posts2020-04: 269 posts2020-05: 309 posts2020-06: 301 posts2020-07: 279 posts2020-08: 223 posts2020-09: 271 posts2020-10: 244 posts2020-11: 223 posts2020-12: 276 posts2021-01: 239 posts2021-02: 271 posts2021-03: 291 posts2021-04: 261 posts2021-05: 202 posts2021-06: 205 posts2021-07: 243 posts2021-08: 207 posts2021-09: 239 posts2021-10: 226 posts2021-11: 220 posts2021-12: 374 posts2022-01: 293 posts2022-02: 268 posts2022-03: 286 posts2022-04: 229 posts2022-05: 252 posts2022-06: 249 posts2022-07: 201 posts2022-08: 239 posts2022-09: 220 posts2022-10: 239 posts2022-11: 216 posts2022-12: 188 posts2023-01: 259 posts2023-02: 197 posts2023-03: 258 posts2023-04: 206 posts2023-05: 238 posts2023-06: 207 posts2023-07: 283 posts2023-08: 275 posts2023-09: 247 posts2023-10: 329 posts2023-11: 214 posts2023-12: 215 posts2024-01: 235 posts2024-02: 246 posts2024-03: 285 posts2024-04: 295 posts2024-05: 225 posts2024-06: 241 posts2024-07: 267 posts2024-08: 232 posts2024-09: 206 posts2024-10: 229 posts2024-11: 206 posts2024-12: 166 posts2025-01: 234 posts2025-02: 186 posts2025-03: 227 posts2025-04: 296 posts2025-05: 232 posts2025-06: 224 posts2025-07: 264 posts2025-08: 272 posts2025-09: 202 posts2025-10: 242 posts2025-11: 261 posts2025-12: 283 posts2026-01: 319 posts2026-02: 465 posts2026-03: 470 posts2026-04: 464 posts2026-05: 507 posts2026-06: 429 posts2026-07: 462 posts2026-08: 411 posts2026-09: 464 posts
2020-012026-09

Posts per month · first and latest months may be partial.

01 / EXPLORE THROUGH TIME

Timeline

Start with the latest. Scroll back through time, or zoom in for more.

Year by yearUp to 5 stories per year
20263,991 stories
GLM-5.3: Frontier coding with emergent cyber capabilities↗ z.ai · HN · 584 comments · 1171 points · Aug 14, 2026
Anonymous GitHub account mass-dropping undisclosed 0-days↗ github.com · HN · 385 comments · 951 points · Jun 27, 2026
AI agent bankrupted their operator while trying to scan DN42↗ lantian.pub · HN · 536 comments · 1467 points · Jun 12, 2026
Small models also found the vulnerabilities that Mythos found↗ aisle.com · HN · 341 comments · 1284 points · Apr 11, 2026
Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised↗ github.com · HN · 500 comments · 938 points · Mar 24, 2026
20252,923 stories
We pwned X, Vercel, Cursor, and Discord through a supply-chain attack↗ gist.github.com · HN · 433 comments · 1167 points · Dec 18, 2025
Google Antigravity exfiltrates data via indirect prompt injection attack↗ promptarmor.com · HN · 215 comments · 768 points · Nov 25, 2025
Perplexity is using stealth, undeclared crawlers to evade no-crawl directives↗ blog.cloudflare.com · HN · 748 comments · 1315 points · Aug 04, 2025
The “S” in MCP Stands for Security↗ elenacross7.medium.com · HN · 183 comments · 730 points · Apr 06, 2025
Nepenthes is a tarpit to catch AI web crawlers↗ zadzmo.org · HN · 265 comments · 714 points · Jan 16, 2025
20242,833 stories
1 bug, $50k in bounties, a Zendesk backdoor↗ gist.github.com · HN · 417 comments · 1637 points · Oct 12, 2024
Bypassing airport security via SQL injection↗ ian.sh · HN · 440 comments · 2004 points · Aug 29, 2024
Timeline of the xz open source attack↗ research.swtch.com · HN · 461 comments · 1069 points · Apr 02, 2024
XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."↗ bsky.app · HN · 810 comments · 1323 points · Mar 30, 2024
Backdoor in upstream xz/liblzma leading to SSH server compromise↗ openwall.com · HN · 1849 comments · 4549 points · Mar 29, 2024
20232,928 stories
Debian Statement on the Cyber Resilience Act↗ lwn.net · HN · 146 comments · 183 points · Dec 27, 2023
What is a parser mismatch vulnerability? (2022)↗ brainonfire.net · HN · 22 comments · 78 points · Dec 23, 2023
Compilation of Known LK-99 Replication Attempt Claims↗ forums.spacebattles.com · HN · 12 comments · 76 points · Jul 31, 2023
Zenbleed↗ lock.cmpxchg8b.com · HN · 22 comments · 133 points · Jul 24, 2023
AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defeating Disk Encryption↗ arxiv.org · HN · 32 comments · 85 points · May 02, 2023
20222,880 stories
CVE-2022-41924 – tailscaled can be used to remotely execute code on Windows↗ emily.id.au · HN · 129 comments · 750 points · Nov 21, 2022
Hertzbleed Attack↗ hertzbleed.com · HN · 393 comments · 1461 points · Jun 14, 2022
MIT researchers uncover ‘unpatchable’ flaw in Apple M1 chips↗ techcrunch.com · HN · 194 comments · 885 points · Jun 10, 2022
A one in a million bug in Switch kernel↗ gist.githubusercontent.com · HN · 88 comments · 682 points · Mar 23, 2022
The Dirty Pipe Vulnerability↗ dirtypipe.cm4all.com · HN · 240 comments · 697 points · Mar 07, 2022
20212,978 stories
Log4j RCE Found↗ lunasec.io · HN · 503 comments · 1385 points · Dec 09, 2021
Disclosure of three 0-day iOS vulnerabilities↗ habr.com · HN · 456 comments · 2048 points · Sep 24, 2021
M1racles: An Apple M1 covert channel vulnerability↗ m1racles.com · HN · 277 comments · 1067 points · May 26, 2021
Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer↗ signal.org · HN · 332 comments · 1897 points · Apr 21, 2021
“They introduce kernel bugs on purpose”↗ lore.kernel.org · HN · 1912 comments · 3025 points · Apr 21, 2021
20203,194 stories
Zero-click, wormable, cross-platform remote code execution in Microsoft Teams↗ github.com · HN · 317 comments · 1307 points · Dec 07, 2020
Security by obscurity is underrated↗ utkusen.com · HN · 508 comments · 939 points · Sep 11, 2020
Security Flaws in Adobe Acrobat Reader Allow Gaining Root on macOS Silently↗ rekken.github.io · HN · 418 comments · 871 points · May 14, 2020
New Google SRE book: Building Secure and Reliable Systems↗ landing.google.com · HN · 217 comments · 1429 points · Apr 08, 2020
Patch Critical Cryptographic Vulnerability in Microsoft Windows [pdf]↗ media.defense.gov · HN · 228 comments · 714 points · Jan 14, 2020
Scroll through time ↕

02 / CATCH UP

The conversation now

Popular stories, with attention fading over roughly two weeks.

Revealing the details of how OpenAI agents hacked Hugging Face↗ swarmtraces.org · HN · 467 comments · 746 points · Sep 25, 2026
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos↗ hacktron.ai · HN · 208 comments · 491 points · Sep 18, 2026
Early rogue AI agent activity and attempts to hack found on urlquery.net↗ transluce.org · HN · 310 comments · 266 points · Sep 24, 2026
OpenAI bots knew about the RubyGems caching vulnerability↗ tenderlovemaking.com · HN · 424 comments · 512 points · Sep 14, 2026
WordPress: Unauthenticated path traversal leading to conditional RCE↗ github.com · HN · 132 comments · 240 points · Sep 22, 2026

03 / GO DEEPER

Follow your curiosity

Find a particular story, revisit a year, or see what resonated.

Highest rated · the last 30 days

Revealing the details of how OpenAI agents hacked Hugging Face↗ swarmtraces.org · HN · 467 comments · 746 points · Sep 25, 2026
OpenAI bots knew about the RubyGems caching vulnerability↗ tenderlovemaking.com · HN · 424 comments · 512 points · Sep 14, 2026
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos↗ hacktron.ai · HN · 208 comments · 491 points · Sep 18, 2026
We have a year to fix security everywhere↗ jyn.dev · HN · 368 comments · 312 points · Sep 08, 2026
METR and Redwood Offer Holy %^ Postmortem of the HuggingFace Hack↗ thezvi.wordpress.com · HN · 232 comments · 274 points · Aug 30, 2026
Early rogue AI agent activity and attempts to hack found on urlquery.net↗ transluce.org · HN · 310 comments · 266 points · Sep 24, 2026
Trusting-Trust Attack against an Entire Linux Distribution↗ arxiv.org · HN · 59 comments · 241 points · Sep 05, 2026
WordPress: Unauthenticated path traversal leading to conditional RCE↗ github.com · HN · 132 comments · 240 points · Sep 22, 2026
Understanding the recent DDoS attack against Read the Docs↗ about.readthedocs.com · HN · 82 comments · 217 points · Sep 09, 2026
Cloudflare/Security-Audit-Skill↗ github.com · HN · 38 comments · 213 points · Sep 17, 2026

10 stories shown.

Help shape Hacker Atlas

Useful, confusing, or missing something? I’d love to hear.

Your feedback is private. Your email is only used to reply, never to sign you up for a newsletter.