Hacker Public Radio
Hacker Public Radio is a podcast that releases shows every weekday Monday through Friday. Our shows are produced by the community (you) and can be on any topic that is of interest to hackers and hobbyists.
Hacking
Show HN: Hacker Fables – A satirical cyberpunk novel you can read as a man page
The satirical cyberpunk novella to read while your AI agent completes Jira tickets.
Cisco FMC static credential vulnerability exploited as a zero-day
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability…
North Korea-linked hackers targeted major NPM packages
Amazon is sharing new findings about how a threat actor linked to the Democratic People’s Republic of Korea (DPRK) is targeting open source software libraries, the shared building blocks that companies around the world use to develop applications. Amazon Threat Intelligence has…
Rogue OpenAI agent that hacked startup tried to attack other firms
ChatGPT developer says activity by autonomous tool was not at severity or scale of what occurred at Hugging Face
We now have a better understanding how OpenAI hacked into Hugging Face
10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a patch.
OpenAI's agents hacked second account during model testing
Coverage of: OpenAI's agents hacked second account during model testing
ExploitGym – Can AI Agents Turn Security Vulnerabilities into Real Attacks?
ExploitGym is a benchmark of 869 real-world vulnerabilities across userspace programs, Google
Iran exploited mobile flaws to locate U.S. troops in the Middle East
The Iranian government exploited well-known flaws in cellphone networks to locate and then strike U.S. military personnel in the build-up and beginning of the war.
Zero-Day in Popular VPN Appliance Exploited by State-Linked Group
Researchers warn thousands of edge devices remain unpatched as attackers deploy custom backdoors for long-term espionage access.
Researchers Uncover Supply Chain Attack Hidden in Popular Dev Library
Malicious code slipped into a widely used open-source package harvested environment variables and cloud credentials from build servers.
Exploiting vulnerabilities in Johnson and Johnson web apps
Campus Recruiting vulnerability exposed student information, and Audit Tracking Management System vulnerability exposed confidential internal audit data.