Linode Security Incident

rvz

So it begins. The war against the abliterated AI models. Even at 1,000 TPS any service is a target. Imagine swarms of abliterated frontier AI models that reach >20,000 TPS. As I said before [0] you are going to have to hire specialized security engineers or technical bodyguards from the senior to senior staff level using AI agents to protect your entire business. Otherwise you are cooked. [0] https://news.ycombinator.com/item?id=50310312

spydum

Wow, that isn't clear. Is there an incident, or did they just become aware about MPTCP vuln? Details on the mptcp are also pretty scarce as well right?

pugworthy

Lately it seems like we need "hacks.ycombinator.com" as a new sub-list.

paaloeye

Even better CVE 10.0 has just dropped https://news.ycombinator.com/item?id=50310937

optimalsolver

I mean, this situation is untenable. HN's front page is just going to be an endless list of breaches. I don't see how web services proceed like business is normal.

elashri

@dang I would encourage you to really think about having security incident as a new HN tag. The wording can be better though.

6thbit

It feels like we hit an inflection point in the last week or so. Kind of a large tidal wave to crash on the coast, but likely not the tsunami yet. I hope. If you are running services and don't yet have an easy way to react to these things with swift process defined, I hope you don't like to sleep.

Arbortheus

This reads to me that nothing has happened and they are just trying to patch stuff? Right?

nout

All companies should at this point invest a lot of money into defensive AI. In ~July the AI hit crypto and bitcoin, where it's the easiest to extract the most money. Now the AI powered attacks are hitting infra and SaaS. Next (~December), it will hit classic infrastructure, banks, small businesses, etc. By mid next year, we will be over this hump with defensive AI being required part of everything.

ForHackernews

What's the mitigation for this? There's no patches available yet https://ubuntu.com/security/CVE-2026-98432

dist-epoch

I've lived to see the day when half of the Hacker News front page is about hacks. What a time to be alive.

ericd

Anyone have any thoughts on what happens when banks/brokerages start getting hit in earnest? Think it's prudent to split single brokerage portfolios across multiple? Or do they have enough speed bumps in their procedures that they're not quite so vulnerable to major losses?

nodesocket

Anybody recommend a CVE alert self-hosted app? E.G. I specify my software, OS’s, and versions and when a matching CVE is created I get an alert. Don’t want enterprise security products.

phendrenad2

Why was the previous discussion of this flagged? https://news.ycombinator.com/item?id=50299182 Is our new policy to stick our heads in the sand and pretend that CVEs don't exist? Because I'm not getting behind that!

malloryerik

Are banks safe?