Flydubai attacker began a 'drift towards extremism and terrorism' in Australia, UAE says
The United Arab Emirates' attorney-general also alleges the co-pilot was trying to crash the plane into Tel Aviv's airport.
Latest News Archive - Page 185
Hours after Trump-Putin diesel deal, Ukraine strikes Russian fuel site
Ukraine bombed a Russian fuel site, hours after US President Trump and Russian President Putin announced a diesel deal.
India deploys police and restricts transport ahead of mass protest in Delhi
The Cockroach Janta Party wants Chief Election Commissioner Gyanesh Kumar to quit over changes to voter lists.
Lune
The search engine built for scientific AI agents Discussion | Link
Hurricane Isaias makes landfall in Florida
US weather authorities are warning of "life-threatening" storm surges on the Gulf Coast due to the Category 2 hurricane. Extreme winds, rising water levels and possible tornadoes are also on the radar.
Telegram Desktop vulnerability allowed any user's file to be stolen
Article URL: https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/ Comments URL: https://news.ycombinator.com/item?id=50029123 Points: 229 # Comments: 116
Quoting The New York Times
Anthropic detailed the activity of its A.I. agents in a blog post on Friday, without naming the targeted websites. But two sources with knowledge of the incidents said Anthropic’s A.I. agents had submitted 20 visa applications through a form available on the State Department’s website. All the applications were incomplete and were not processed, they said. — The New York Times , Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website Tags: accidental-cyberattacks , anthropic , generative-ai , ai , llms
Putin tells Trump peace talks are unlikely, cites Ukraine drone attacks
Drone attacks on Moscow during last month's election undermined trilateral peace negotiations, the Kremlin says.
Australia does not ‘need or want Russian fuel’, Chris Bowen says, after Trump deal to buy diesel from Putin
Energy and climate change minister says Russia should not be rewarded for ‘illegal and immoral invasion of Ukraine’ Get our breaking news email , free app or daily news podcast Australia’s energy minister has said Russia “should not be rewarded for their illegal and immoral invasion of Ukraine” after the US president, Donald Trump, struck a deal with Vladimir Putin to buy diesel from the country. The energy and climate change minister, Chris Bowen, said on Saturday Australia did not “need or want Russian fuel” while updating reporters on the country’s fuel reserves. Continue reading...
Ukraine war briefing: Kyiv blasts peace talks as just ‘smokescreen’ for Trump‘s Russian diesel deal
Trump’s announcement a betrayal of Ukraine, Democrats say; Ukraine strikes major datacentre in Russia. What we know on day 1,690 Ukrainian peace negotiators in Miami have been used as a “smokescreen” for a “weak” decision by Donald Trump to lift diesel sanctions on Russia , Volodymyr Zelenskyy said in a furious response to the US president’s backflip on Russian sanctions. In a move likely to create a fresh crisis with Washington’s Nato allies, Trump announced the deal with Putin on his Truth Social network, saying it was essential to reduce fuel prices in the US, which have soared as a result of his decision to go to war with Iran. The Ukrainian president, who flew to Washington last month to plead with US lawmakers to pass tougher sanctions on Russia, said in a statement on Friday that it was “unfortunately, a weak decision by strong partners”. “I believe our team is simply being used as a smokescreen. And that is certainly not fair. It is certainly not how partners should treat each other.” Negotiators for the US, Ukraine and Europe held six hours of talks in Miami on Friday with the aim of reaching agreement on ending the war in Ukraine , a source briefed on the talks said. They discussed a postwar economic package for Ukraine and potential new security architecture between Europe and Russia, the source said. President Trump announced the diesel deal as his envoy Steve Witkoff and son-in-law Jared Kushner were meeting with Ukrainian officials in Florida to discuss a peace plan. Trump’s announcement was a betrayal of Ukraine, the European allies and US national security, said Senate Democratic leader Chuck Schumer , top Democrat on the Foreign Relations Committee Sen. Jeanne Shaheen, and senior Democrat senator, Elizabeth Warren. “Enough is enough,” the senators wrote. “The President must end his war with Iran instead of funding Russia’s war machine.” A number of prominent Republicans joined Democrats on Friday to condemn Trump for lifting the diesel sanctions , including congressman Don Bacon, who said the majority of Americans supported Ukraine. “The President’s policies towards Russia and Ukraine are failures. We need moral clarity not moral ambiguity.” Ukraine struck and partly disabled a major datacentre operated by Russian technology company Yandex on Friday in the second such action in successive days. Yandex, which is heavily involved in Russia’s AI development, said its data centre in the Kaluga region south-west of Moscow had been struck by Ukrainian drones and partly put out of action. Ukrainian arms maker Firepoint said Kyiv had used its FP-1 one-way attack drones to mount the strike. Four Ukrainians were arrested in Vienna this week on suspicion of spying , Austrian interior minister, Gerhard Karner, said on Friday, with Ukrainska Pravda newspaper saying two of its team were among those detained. Three remain in custody, Karner said, declining to provide further details because the investigation was ongoing. Austrian news agency APA quoted a spokeswoman for the Ukrainian embassy in Vienna as saying it was awaiting an explanation from the Austrian authorities on the circumstances of and legal grounds for the arrests. The embassy did not immediately respond to a request for comment. Russian forces struck three cargo vessels in and around Ukraine’s Black Sea ports on Friday , Russia’s defence ministry said. The ministry said one vessel was hit in the port of Mykolaiv, another in the port of Chornomorsk and a third, bound for Odesa, in the Black Sea. According to the ministry, all three vessels were being used to supply the Ukrainian military. Reuters could not independently verify the report or the claim. Russian strikes killed three people and wounded at least eight across Ukraine, officials said Friday , as Ukraine struggles to counter escalating Russian bombardments that have killed more than 50 people over the past three days. Continue reading...
Maildun for Mac
Design on-brand emails by hand, with AI, or over MCP Discussion | Link
Dual quakes devastate southern Panama
Panama’s president has declared a major disaster after two earthquakes struck the country’s south.
REA Reverse – Engineer Anything
Article URL: https://rea.tools/ Comments URL: https://news.ycombinator.com/item?id=50028275 Points: 459 # Comments: 180
Anthropic can’t reliably control its AI agents. It’s cutting off its internal evals from the live internet instead
Anthropic said it "turned off live internet access" for "all our internal evaluations" until further notice.
FBI Arrests Executive at Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity.
Flipcorder
A 1991 camcorder for your iPhone, one tape a day Discussion | Link
Intercommunal clashes kill 71 people in South Sudan
Government security forces regain control of Rumbek town after outsiders attempted to seize the area.
v16.5.0-canary.7
Core Changes Reland experimental custom webpack support: #99234 Misc Changes Add CI for upgrade evals with shared preparation: #99908 Rebuild upgrade evals around delivered apps: #99880 Upgrade Corepack to 0.34.7: #99959 Upgrade Turborepo to 2.11.7: #99958 Normalize pnpm store cache keys: #99957 test: cover Pages Router _app availability in Turbopack dev ( #99789 ): #99910 Turbopack: chain the Pages Router development client module graph: #98823 turbopack: report an actionable error when Node.js child processes cannot connect: #99887 Turbopack: Ignore realpath errors during module resolution, matching node's behavior: #99951 test: add a vercel gate condition for Vercel-specific deploy tests: #99837 test: remove per-test Corepack overrides now that deploy mode enables it: #99945 Credits Huge thanks to @devjiwonchoi , @bgw , @sokra , @lukesandberg , and @jamiboym for helping!
Stable Channel Update for ChromeOS / ChromeOS Flex
The Stable channel is being updated to OS version 16805.33.0 (Browser version 154.0.8037.151) for most ChromeOS devices. If you find new issues, please let us know one of the following ways File a bug Visit our ChromeOS communities General: Chromebook Help Community Beta Specific: ChromeOS Beta Help Community Report an issue or send feedback on Chrome Interested in switching channels? Find out how . Alon Bajayo, Google ChromeOS ChromeOS Vulnerability Rewards Program Reported Bug Fixes: N/A Other 3rd Party Security Fixes Included: High Fixes mali_kbase: use-after-free write in delete_hoarded_chunks allows GPU-process to kernel memory corruption High Fixes Potential StartArcVm unvalidated wayland_server field leads to crosvm sandbox weakening Android Security fixes can be found here Chrome Browser Security Fixes: [$TBD] [562242429 ] High CVE-2026-95351 Use after free in Views Reported by [Xinyang Ge ] on 2026-09-15 [$TBD] [562151598 ] Critical CVE-2026-95310 Use after free in AdFilter Reported by [Xinyang Ge ] on 2026-09-15 [$TBD] [560439699 ] Critical CVE-2026-95356 Use after free in WindowDialog Reported by [Xinyang Ge ] on 2026-09-12 [$TBD] [560536735 ] High CVE-2026-95306 Type confusion in V8 on 2026-09-12 [$TBD] [560536731 ] High CVE-2026-95304 Out of bounds write in V8 on 2026-09-12 [$TBD] [560406548 ] High CVE-2026-95280 Race condition in V8 on 2026-09-11 [$1000.0] [559815527 ] High CVE-2026-95343 Use after free in WebAudio Reported by [HoneyBee] on 2026-09-10 [$TBD] [559682346 ] Medium CVE-2026-95333 Use after free in Metrics on 2026-09-10 [$TBD] [558764482 ] High CVE-2026-95365 Type confusion in IndexedDB Reported by [~~Anaconda~~ HoneyBee] on 2026-09-08 [$500.0] [557523002 ] High CVE-2026-95286 Type confusion in Bindings on 2026-09-05 [$TBD] [556576976 ] High CVE-2026-95318 Buffer overflow in Video on 2026-09-03 [$1000.0] [556535630 ] High CVE-2026-95338 Use after free in PDFium on 2026-09-03 [$TBD] [555299641 ] High CVE-2026-95335 Use after free in HID Reported by [WinD39 - Huynh Dinh Vu] on 2026-08-31 [$TBD] [554558320 ] High CVE-2026-95348 Use after free in Bluetooth on 2026-08-29 [$TBD] [553921181 ] Low CVE-2026-95305 UI misrepresentation in Chromoting on 2026-08-28 [$TBD] [553271219 ] Low CVE-2026-95364 Improper input validation in Passwords on 2026-08-26 [$TBD] [553268567 ] Low CVE-2026-95340 Incorrect authorization in PictureInPicture on 2026-08-26 [$TBD] [553136141 ] High CVE-2026-95277 Use after free in Views on 2026-08-26 [$TBD] [553130481 ] High CVE-2026-95373 Use after free in DevTools on 2026-08-26 [$TBD] [553129513 ] High CVE-2026-95282 Use after free in Platform on 2026-08-26 [$TBD] [553123003 ] Medium CVE-2026-95311 Free of non-heap memory in Fonts on 2026-08-26 [$TBD] [553116160 ] High CVE-2026-95274 Improper output encoding in DevTools on 2026-08-26 [$TBD] [552665794 ] Critical CVE-2026-95313 Use after free in Fullscreen Reported by [WinD39 - Huynh Dinh Vu] on 2026-08-26 [$TBD] [552023752 ] Low CVE-2026-95316 Unchecked return value in Performance on 2026-08-24 [$TBD] [550953039 ] High CVE-2026-95293 Uninitialized resource in GPU on 2026-08-22 [$TBD] [549911100 ] Medium CVE-2026-95289 Incorrect authorization in Scroll on 2026-08-21 [$TBD] [548611433 ] Medium CVE-2026-95344 Race condition in DevTools on 2026-08-18 [$2500.0] [548585299 ] Critical CVE-2026-95339 Use after free in ServiceWorker on 2026-08-18 [$TBD] [547832510 ] Medium CVE-2026-95312 Information leak in Passwords Reported by [[goes here]] on 2026-08-17 [$TBD] [547027738 ] Low CVE-2026-95342 Missing authorization in V8 Reported by [Hongwei Li, Zhun Wang, Ziyue Pan, Junmin Zhu, Saastha Vasan, and Wenbo Guo] on 2026-08-16 [$TBD] [545449081 ] Medium CVE-2026-95300 Missing authorization in DevTools on 2026-08-12 [$TBD] [543464436 ] Medium CVE-2026-95374 Incorrect authorization in Network Reported by [NH DEV] on 2026-08-06 [$TBD] [542926849 ] Medium CVE-2026-95275 Incorrect reference resolution in MediaStream on 2026-08-05 [$5000.0] [540265100 ] High CVE-2026-95301 Missing authorization in Extensions on 2026-07-29 [$TBD] [537857253 ] High CVE-2026-95324 Uninitialized resource in GPU on 2026-07-22 [$TBD] [536648933 ] Medium CVE-2026-95325 Use after free in ANGLE on 2026-07-19 [$TBD] [536161355 ] Medium CVE-2026-95290 Missing authorization in NFC on 2026-07-17 [$TBD] [534997484 ] High CVE-2026-95372 Use after free in Chromecast on 2026-07-14 [$TBD] [534579660 ] Low CVE-2026-95380 Type confusion in V8 on 2026-07-13 [$TBD] [533095855 ] Low CVE-2026-95361 Confused deputy in DevTools on 2026-07-09 [$TBD] [533041383 ] Low CVE-2026-95326 Incomplete cleanup in Bluetooth on 2026-07-09 [$TBD] [532962621 ] Medium CVE-2026-95336 Information leak in Transactions Platform on 2026-07-09 [$TBD] [524582798 ] Medium CVE-2026-95354 Use after free in Verifier on 2026-06-16 [$TBD] [523719002 ] Medium CVE-2026-95341 Improper input validation in Desktop on 2026-06-13 [$TBD] [522413520 ] Low CVE-2026-95368 Incorrect authorization in DevTools on 2026-06-10 [$TBD] [522344883 ] Medium CVE-2026-95363 UI misrepresentation in FileSystem on 2026-06-10 [$TBD] [522061704 ] Medium CVE-2026-95353 Use after free in Bindings on 2026-06-09 [$TBD] [520516206 ] High CVE-2026-95298 Use after free in Browser on 2026-06-05 [$TBD] [517802696 ] Medium CVE-2026-95314 Incorrect authorization in HID on 2026-05-29 [$TBD] [517730821 ] Medium CVE-2026-95276 Improper input validation in Themes on 2026-05-28 [$TBD] [517661385 ] High CVE-2026-95315 Use after free in Aura on 2026-05-28 [$TBD] [517584808 ] Medium CVE-2026-95360 Race condition in Editing on 2026-05-28 [$TBD] [517442714 ] Medium CVE-2026-95303 Incomplete cleanup in SmartCard on 2026-05-28 [$TBD] [517417437 ] Medium CVE-2026-95370 Inappropriate implementation in NFC on 2026-05-28 [$TBD] [517163294 ] Medium CVE-2026-95330 Improper state validation in Downloads on 2026-05-27 [$TBD] [516404074 ] Medium CVE-2026-95345 Use after free in Actor on 2026-05-25 [$TBD] [514524620 ] Low CVE-2026-95367 Information leak in DataTransfer on 2026-05-18 [$TBD] [514487499 ] Medium CVE-2026-95317 Incorrect authorization in MediaCapture on 2026-05-18 [$TBD] [514072284 ] Medium CVE-2026-95320 Missing authorization in Navigation on 2026-05-17 [$TBD] [514059630 ] Medium CVE-2026-95346 UI misrepresentation in Chromoting on 2026-05-17 [$TBD] [513992281 ] Medium CVE-2026-95294 UI misrepresentation in Browser on 2026-05-17 [$TBD] [513791872 ] Low CVE-2026-95352 Incorrect authorization in DevTools on 2026-05-16 [$TBD] [513781838 ] Low CVE-2026-95292 Incorrect authorization in Safebrowsing on 2026-05-16 [$TBD] [513714849 ] Low CVE-2026-95308 Integer overflow in Metrics on 2026-05-15 [$TBD] [513403696 ] Low CVE-2026-95334 Incorrect reference resolution in WebProtect on 2026-05-14 [$TBD] [513134076 ] Medium CVE-2026-95376 Externally controlled reference in DevTools on 2026-05-14 [$TBD] [513049042 ] Medium CVE-2026-95369 Inappropriate implementation in XML on 2026-05-13 [$TBD] [511791538 ] Medium CVE-2026-95362 Cross-site request forgery in DevTools on 2026-05-10 [$TBD] [502179319 ] Medium CVE-2026-95375 Incorrect authorization in BrowserTag on 2026-04-13 [$TBD] [502077689 ] Low CVE-2026-95327 Information leak in Networking on 2026-04-13 [$TBD] [501648493 ] Medium CVE-2026-95297 Missing authorization in Contextual Tasks on 2026-04-11 [$TBD] [497603247 ] Medium CVE-2026-95381 Improper input validation in Printing on 2026-03-29 [$TBD] [497344014 ] Low CVE-2026-95278 Missing authorization in WakeLock on 2026-03-28 [$TBD] [497212105 ] Medium CVE-2026-95382 Improper input validation in Auth on 2026-03-28 [$TBD] [497204165 ] Medium CVE-2026-95366 Use of released resource in Core on 2026-03-28 [$TBD] [495529018 ] Medium CVE-2026-95287 Missing authorization in Navigation on 2026-03-23 [$500.0] [423956129 ] Low CVE-2026-95307 UI misrepresentation in ExtensionsMenu on 2025-06-10 [$TBD] [565328105 ] High CVE-2026-102321 Type confusion in V8 on 2026-09-23 [$TBD] [563716534 ] High CVE-2026-102302 Buffer overflow in V8 on 2026-09-19 [$5000.0] [563297615 ] High CVE-2026-102329 Cross-site scripting in WebUI on 2026-09-18 [$TBD] [562279351 ] High CVE-2026-102318 Out of bounds read in WebGL on 2026-09-15 [$1500.0] [562174487 ] High CVE-2026-102324 Use after free in PictureInPicture on 2026-09-15 [$TBD] [562042411 ] High CVE-2026-102319 Uninitialized resource in GPU on 2026-09-15 [$TBD] [562004351 ] High CVE-2026-102301 Out of bounds write in GPU on 2026-09-15 [$TBD] [561997480 ] High CVE-2026-102308 Use after free in Views on 2026-09-15 [$TBD] [561994362 ] High CVE-2026-102325 Uninitialized resource in Skia on 2026-09-15 [$TBD] [560536732 ] High CVE-2026-102328 Type confusion in V8 on 2026-09-12 [$TBD] [560251736 ] High CVE-2026-102304 Use after free in Passwords Reported by [Xinyang Ge ] on 2026-09-11 [$TBD] [560238698 ] High CVE-2026-102316 Use after free in Views Reported by [Xinyang Ge ] on 2026-09-11 [$TBD] [560233248 ] High CVE-2026-102326 Type confusion in V8 on 2026-09-11 [$2000.0] [560062638 ] High CVE-2026-102300 Uninitialized resource in WebGPU on 2026-09-11 [$TBD] [559266114 ] High CVE-2026-102323 Type confusion in V8 on 2026-09-09 [$TBD] [556926296 ] High CVE-2026-102306 Use after free in Bluetooth on 2026-09-03 [$500.0] [556908674 ] High CVE-2026-102299 Type confusion in V8 on 2026-09-03 [$TBD] [554038924 ] Medium CVE-2026-102320 Missing authorization in CORS on 2026-08-28 [$TBD] [514059780 ] Low CVE-2026-102314 UI misrepresentation in TabStrip on 2026-05-17 [$TBD] [498793976 ] Low CVE-2026-102330 Incorrect authorization in SiteIsolation on 2026-04-01 [$1000.0] [477726837 ] Low CVE-2026-102310 Missing authorization in Payments on 2026-01-21 [$TBD] [567088927 ] High CVE-2026-103631 Buffer overflow in WebRTC on 2026-09-28 [$TBD] [565742180 ] High CVE-2026-103623 Use after free in MediaStream on 2026-09-24 [$TBD] [565742179 ] High CVE-2026-103622 Use after free in SVG on 2026-09-24 [$TBD] [559893859 ] High CVE-2026-103625 Type confusion in V8 on 2026-09-10 [$TBD] [557323166 ] High CVE-2026-103630 Use after free in FedCM on 2026-09-04 [$TBD] [556268833 ] High CVE-2026-103621 Integer overflow in Compositing on 2026-09-02 [$TBD] [553147154 ] Medium CVE-2026-103627 Information leak in SVG on 2026-08-26 [$TBD] [549995090 ] Critical CVE-2026-103628 Out of bounds write in WebGL on 2026-08-20
GitHub Copilot weekly releases — October 5
This week’s updates make Copilot easier to use across accounts and environments, with more control over what agents can access and how you manage their work. GitHub Copilot Claude Haiku… The post GitHub Copilot weekly releases — October 5 appeared first on The GitHub Blog .
Deno is joining Cloudflare
Deno is joining Cloudflare The Deno team released the first version of celld back in August - their open source implementation of the Durable Objects pattern from Cloudflare Workers. Today, Cloudflare are acquiring Deno outright, with the goal of building on celld to "make workerd self-hosting a first-class supported way to build and run apps using the Workers programming model" (see the Cloudflare blog .) The bad news is that Deno itself will not be maintained by Cloudflare beyond the next year: We will support the Deno runtime for another year with monthly releases containing bug fixes and security updates. After that year we will end our development of the Deno runtime. Deno will remain open source, and we welcome others who want to continue its development. Deno (and Node.js) creator Ryan Dahl explained that decision in a comment on Hacker News: It's a joint decision and I agree with it. I'm most invested in its success and have put the most work into it - and I no longer think it's where I can do the most important work. There are some good ideas in Deno and it's well engineered - but it ultimately is not solving big problems. It has been sucked into the gravity well of node compatibility, which forces it to behave exactly as Node does. Why reimplement Node? It works. Marginal performance or UX or security benefits are not enough. I'm interested in building powerful new abstractions. celld has been working remarkably well, depending only on object storage for coordination and persistence. It is not just a slightly different API to interact with the file system or network - it's an entirely new model for server development. My favorite feature of Deno has long been the permissions system, where you can run a Deno script and specify exactly which files and folders it can read and write to, and which network hosts it can access. Node.js has a similar permissions model these days, added in Node v20.0.0 in April 2023 and declared stable in Node v22.13.0 in January 2025. They don't yet support allow-listing specific network hosts though - networking is either on or off. Via Hacker News Tags: cloudfront , javascript , nodejs , ryan-dahl , sandboxing , deno
Neanderthal wooden tools from Spain found preserved in stone
Dissolved rock precipitated around the tools, which then decayed.
Analysis: Trump's shock Russia deal highlights mounting pressure to curb fuel prices
The US president hopes to ease his party's pain before next month's midterm elections, writes the BBC's North America correspondent.
Kalshi taps former FBI agent to fight against money laundering
The prediction market company says it wants to prevent its platform from being abused by criminals. The company is facing mounting pressure over market manipulation and insider trading on the site.