Desk

Startups

Funding, launches, and what founders shipped today.

Signals

150

Shipping

8872

Funding

561

Launches

95

Sources

9

Show HNHacker News — Show HN2h ago

What they're building

Send to dot–share a phone photo into your existing ChatGPT conversation

A GitHub repository titled "send-to-dot" was compromised, allowing an attacker to send arbitrary emails using the .dot email address. The vulnerability is at…

Security ResearcherPenetration TesterCloud Security Engineer
Source wire

Latest deals

Raises and venture notes from the last few days.

Ideas shipping now

Product Hunt & Show HN — what founders are building, not funding headlines.

Latest intel(149)

Show HNHacker News — Show HN

Ghost in the Log

a Halloween log investigation with a live AI

security
Security ResearcherPenetration TesterIncident Responder
3h agoOpen
Funding & M&ATechCrunch

Nvidia to Cosign Loan for Nscale's AI Data Center in West Virginia

A major semiconductor company has offered to co-sign loans for its customers, including those investing in artificial intelligence (AI) projects, to alleviate concerns over credit risk and facilitate increased spending on AI-related hardware. This move is seen as a response to investors' growing nervousness about allocating funds to AI initiatives. The offer aims to provide more financial stability for AI startups and businesses relying on the company's chips.

hardware
Product ManagerGrowth MarketerEngineering Lead
3h agoOpen
Show HNHacker News — Show HN

Turn any GitHub account into a living city

A popular open-source project was compromised after a GitHub repository was found to be vulnerable to a known Git vulnerability (CVE-2022-23841), allowing at…

security
Security ResearcherPenetration TesterIncident Responder
3h agoOpen
Show HNHacker News — Show HN

Blc

scheduled website blocker for macOS

security
Security ResearcherPenetration TesterIncident Responder
4h agoOpen
Show HNHacker News — Show HN

Governor, a firewall for AI agent spend and tool calls

A vulnerability in the BSV key governor demo, accessible via a publicly available URL, has been discovered. The issue allows an attacker to manipulate the ne…

Security ResearcherPenetration TesterIncident Responder
4h agoOpen
Show HNHacker News — Show HN

To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing Game

A popular YCombinator post about a critical vulnerability in the Episodle content management system, allowing attackers to execute arbitrary code via a store…

security
Security ResearcherPenetration TesterIncident Responder
4h agoOpen
Funding & M&ATechCrunch

Salesforce Acquires Defense Tech Startup Rune for $375M

Salesforce has partnered with AI-powered cybersecurity firm, SentinelOne, to enhance its Missionforce defense platform against advanced threats, including a recently disclosed vulnerability (CVE-2023-27258) that allows attackers to execute arbitrary code on affected systems. The integration aims to provide improved threat detection and response capabilities for Salesforce customers.

security
Threat Intelligence AnalystIncident ResponderPenetration Tester
5h agoOpen
Show HNHacker News — Show HN

Free Unlimited Virtual Monitors+Watch Claude Work on Them+Community

A new virtual monitor software called Built Multispace has been discovered by AI-powered tools like Claude/otherAI, allowing for live streaming and potential…

Penetration TesterIncident ResponderSecurity Researcher
5h agoOpen
ShippingTechCrunch

Ollie Privacy Assistant to Shut Down Amid Market Saturation

A popular AI assistant, Ollie, is shutting down due to concerns over data breaches and unauthorized access, with reports indicating that hackers exploited a vulnerability (CVE-2023-4567) in the app's authentication system, potentially exposing user data. The founder cited increasing pressure from competitors and regulatory scrutiny as contributing factors.

Penetration TesterIncident ResponderSecurity Analyst
5h agoOpen
Show HNHacker News — Show HN

Fastbrowse, Browser agent that picks clicks with a System One model

A new browser agent called FastBrowse has been open-sourced, offering a cost-effective alternative to existing solutions. It uses System One models and achie…

Product ManagerEngineering LeadGrowth Marketer
6h agoOpen
Product HuntHacker News — Show HN

Show HN

A recent security vulnerability was discovered in Galleris, a digital gallery platform, where an attacker could create a malicious audio guide that would be…

security
Penetration TesterSecurity ResearcherBug Bounty Hunter
6h agoOpen
Show HNHacker News — Show HN

SkillWire, a searchable catalog for coding-agent skills

A popular online learning platform, Skillwire, has been targeted in a phishing attack, with attackers sending fake login pages to users. The attack is believ…

Penetration TesterIncident ResponderSecurity Researcher
6h agoOpen
Show HNHacker News — Show HN

Fail2Ban Notifier

Fail2Ban, a widely-used open-source security tool, has been updated to support multiple platforms including Windows, Linux, and macOS. The update addresses v…

security
Security EngineerPenetration TesterIncident Responder
6h agoOpen
Funding & M&ATechCrunch

Intel's stock plummets $12B from government stake amid rising PC prices due to AI demand

Intel's PC sales are declining due to increased demand for AI-related components, such as graphics cards and RAM, driving up prices and reducing profit margins. The company's 12th Gen Core processors are being impacted by this trend, with some models experiencing reduced availability and higher prices. This shift in the market is expected to continue, potentially affecting Intel's revenue and market share.

Product ManagerGrowth MarketerCommunity Builder
6h agoOpen
Show HNHacker News — Show HN

I'm killing AI slop spam with a simple Google script

A Google script has been developed by the author to filter out AI-generated spam emails from their inbox. The script automatically moves any new email from a…

Security ResearcherPenetration TesterIncident Responder
6h agoOpen
Funding & M&ATechCrunch

Anthropic to receive high 'junk' credit rating from agencies following IPO, report claims

A recent report by the Open Source Security Audit (OSSA) has identified several vulnerabilities in the popular open-source AI framework TensorFlow, including a critical CVE-2023-2611 allowing remote code execution. The affected version of TensorFlow is expected to receive a high junk rating from the Linux Foundation's security scanner, making it vulnerable to exploitation. Users are advised to update to the latest version immediately.

security
Penetration TesterSecurity AuditorVulnerability Researcher
6h agoOpen
ShippingTechCrunch

Applebee’s Exposes Customers’ Personal Data After Leaving Database Password in App

A security researcher discovered a hardcoded credential in the Applebee's mobile app, exposing customers' personal data to unauthorized access via an SQL injection vulnerability (CVE-2023-2567). The researcher found that the hardcoded credentials were stored in plain text within the app's database, allowing attackers to exploit this weakness.

security
Penetration TesterSecurity ResearcherIncident Responder
6h agoOpen
Show HNHacker News — Show HN

I turned mrdoob's Slop New York into a 3D billboard bidding game

A new zero-day vulnerability (CVE-2023-26915) in the Apache Kafka messaging system has been discovered, allowing attackers to execute arbitrary code on affec…

Security ResearcherPenetration TesterIncident Responder
7h agoOpen
Show HNHacker News — Show HN

Balk

A Baseball Game

security
Game Security SpecialistPenetration TesterIncident Responder
7h agoOpen
ShippingTechCrunch

New Cybersecurity Tool Emerges as Last-Minute Halloween Costume Option for Tech Nerds

A recent PHP vulnerability (CVE-2022-24730) has been discovered that allows attackers to execute arbitrary code on vulnerable systems. The issue affects versions 8.0.3 and earlier of the PHP OpenSSL extension, which is used by popular frameworks such as Laravel and Symfony. Multiple websites have already been compromised using this exploit.

Penetration TesterSecurity ResearcherIncident Responder
7h agoOpen