frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Google says criminal hackers used AI to find a major software flaw

https://www.nytimes.com/2026/05/11/us/politics/google-hackers-attack-ai.html
58•donohoe•9h ago
Unlocked: https://www.nytimes.com/2026/05/11/us/politics/google-hacker..., https://archive.ph/I4Ui5

https://apnews.com/article/google-ai-cybersecurity-exploitat...

https://www.cnbc.com/2026/05/11/google-thwarts-effort-hacker...

Comments

CrzyLngPwd•1h ago
People used LLMs to find flaws in Google software.
amelius•56m ago
But did they use Gemini?
freedomben•17m ago
I don't know, but given how often Gemini refuses benign requests IME, I would suspect it's a complete non-starter for finding security holes.
Andrex•9m ago
> the company added that it did not believe it was its own Gemini chatbot.

-TFA

simmerup•1h ago
Can google please use AI to find bugs then?

Software is in such a state now, Gmail is full of bugs around sharing attachments to the position that I have to tell my dad to turn his phone off and on again in order to attach a document

j2kun•1h ago
https://secgemini.google/

https://projectzero.google/2024/10/from-naptime-to-big-sleep...

https://deepmind.google/blog/introducing-codemender-an-ai-ag...

JCTheDenthog•58m ago
Those are all for security vulnerabilities, OP is talking about bugs with functionality.
andrepd•27m ago
It's probably the AI overuse introducing many of those bugs in the first place...
SecretDreams•1h ago
If "bad guy AI" can find flaws, can "good guy AI" patch them faster when backed by trillion dollar companies?
cyanydeez•59m ago
If I sell weapons to both sides of a conflict, can I become rich?
SecretDreams•53m ago
Ask anyone selling AI hardware recently!
mindcrime•6m ago
No. To become really rich you have to draw a 3rd player into the conflict, and then sell weapons to them as well.
j2kun•59m ago
The bottleneck is probably validating and deploying the fix, which requires coordination.
boothby•35m ago
Do your AI patches introduce fewer flaws than they repair?
4128-1228•59m ago
The Google Threat Intelligence Group wants to increase its relevance and casually point out the it was not Mythos which found the exploit!

Security "researchers" are overpaid buffoons who hype things for their own salaries and their companies. And the stenographers from the press dutifully copy everything.

This is a despicable game to fool politicians into giving money and favorable AI legislation.

Strangely enough these buffoons never offer their models to open source developers. It is always a select group of highly paid other buffoons that throws some very occasional results over the wall.

s3p•59m ago
>But new A.I. models like Anthropic’s Mythos, which was announced last month, appear to be so good at finding such holes that Anthropic shared it only with a limited number of firms and government agencies in the United States and Britain.

Immediate distrust of the article. GPT 5.5 is out with nearly the same capability. The author might be parroting company marketing, unable to discern that a lot of this is much less complex than it seems. For all we know this group could have had a model examine some obscure line of code thousands of times until it found something.

reaperducer•37m ago
Immediate distrust of the article… The author might be parroting company marketing, unable to discern that a lot of this is much less complex than it seems.

https://www.nytimes.com/by/dustin-volz

> I am based in The Times’s Washington bureau, and much of my focus is on the dealings of U.S. cybersecurity and intelligence agencies, including the National Security Agency, Central Intelligence Agency, Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation, as well as their counterparts abroad, chiefly in China, Russia, Iran and North Korea.

> My remit spans nation-state hacking conflict, digital espionage, online influence operations, election meddling, government surveillance, malicious use of A.I. tools and other related topics.

> Before joining The Times, I worked at The Wall Street Journal, where I spent eight years covering cyber conflict and intelligence. My recent work at The Journal included a series of articles revealing a major Chinese intrusion of America’s telecommunications networks that breached the F.B.I.’s wiretap systems and has been described as one of the worst U.S. counterintelligence failures in history. I have also worked at Reuters and National Journal, where I began my career in Washington chronicling congressional efforts to reform surveillance practices at the N.S.A. in the wake of the 2013 Edward Snowden disclosures.

> My work has been internationally recognized, including by the White House Correspondents’ Association, the Gerald Loeb Awards, the Society of Publishers in Asia and the Society for Advancing Business Editing and Writing.

What have you done lately?

flextheruler•29m ago
https://www.logicallyfallacious.com/logicalfallacies/Appeal-...
reaperducer•25m ago
Not at all.

OP posited that the author didn't know what he's talking about. I pointed out that the author has far more knowledge and experience in the field than rando internet griefers on HN who immediately reach for "shoot the messenger" when they read something that doesn't neatly fit into their pre-conceived worldview, instead of perhaps learning things from other people.

But at least your trope acknowledges that he's an authority on the subject.

LudwigNagasena•25m ago
Reporting on such stuff requires networking skills, not technical knowledge.
reaperducer•21m ago
Reporting on such stuff requires networking skills, not technical knowledge.

Guess how I know you've never been a reporter.

megous•14m ago
How many zeroday vulns had the article author discovered using AI assisted methods?
himata4113•11m ago
nytimes reporters have recently been very disappoiting and starting to feel like they're people who managed to become relevant long time ago, but haven't kept up with recent changes and are just parroting things others have said instead of unique thoughts.
sowbug•57m ago
Security will be a wedge to restrict the sophistication of open-weight and local LLMs, just as it's been used to demonize and restrict cypherpunk technologies.
kshacker•45m ago
As long as it is within the country, restriction works. How do you restrict the capability from a foreign entity, especially a hostile one?
jazzyjackson•17m ago
netsplit, I guess. decide that the risk of an open network is too great and simply block all routing out of the country through the ISPs and consider the political power that goes along with a global satellite constellation under rule of a single, government-aligned corporation.
ppqqrr•51m ago
...says yet another company hell bent on integrating it into every facet of our lives. This reads like a celebration, if you ask me.
atrocities•38m ago
Can we link to the actual google article, instead of these editorialized articles about the article?

https://cloud.google.com/blog/topics/threat-intelligence/ai-...

gman2093•36m ago
Black hat hacking seems to be a well-fit use case for these LLMs. Attackers only need to be right once, so the sometimes-wrongness of the attacks might be trivial. This probably devalues stashes of zero-day exploits for those that have been witholding them.
0xWTF•33m ago
Wait until the bio version of this shows up.
wnc3141•30m ago
But in exchange we get to also waste vast energy and carbon while depleting job prospects for just about any college grad.
andrepd•27m ago
It's not all bad though. We also managed to turn the Information Superhighway of the 1990s into the Slop Wasteland of the 2020s.
bouncycastle•14m ago
Meanwhile, I cannot ask ChatGTP how to pick my own lock. Even though this information is available in a book in the library.
skywhopper•8m ago
Drives me nuts that the NYT just uncritically cites Anthropic’s unverified claims of “thousands of zero-days” without a hint of skepticism.

TanStack NPM Packages Compromised

https://github.com/TanStack/router/issues/7383
232•varunsharma07•1h ago•58 comments

GitLab Announces Workforce Reduction and End of Their CREDIT Values

https://about.gitlab.com/blog/gitlab-act-2/
140•AnonGitLabEmpl•1h ago•89 comments

Google says criminal hackers used AI to find a major software flaw

https://www.nytimes.com/2026/05/11/us/politics/google-hackers-attack-ai.html
60•donohoe•9h ago•34 comments

Library for fast mapping of Java records to native memory

https://github.com/mamba-studio/TypedMemory
79•joe_mwangi•3h ago•21 comments

UCLA discovers first stroke rehabilitation drug to repair brain damage (2025)

https://stemcell.ucla.edu/news/ucla-discovers-first-stroke-rehabilitation-drug-repair-brain-damage
114•bookofjoe•4h ago•27 comments

Nullsoft, 1997-2004 (2004)

https://slate.com/technology/2004/11/the-death-of-the-last-maverick-tech-company.html
200•downbad_•3d ago•63 comments

Can someone please explain whether Cloudflare blackmailed Canonical?

https://www.flyingpenguin.com/can-someone-please-explain-whether-cloudflare-blackmailed-canonical/
196•speckx•4h ago•109 comments

Ratty – A terminal emulator with inline 3D graphics

https://ratty-term.org/
584•orhunp_•12h ago•189 comments

The rise and fall of snake oil

https://www.historytoday.com/archive/history-matters/rise-and-fall-snake-oil
14•samizdis•4d ago•5 comments

Gmail registration now requires scanning a QR code and sending a text message

https://discuss.privacyguides.net/t/google-account-registration-now-requires-sending-an-sms-via-p...
513•negura•15h ago•360 comments

I hate soldering existentially

https://user8.bearblog.dev/rant/
27•James72689•3d ago•28 comments

Show HN: OpenGravity – A zero-install, BYOK vanilla JS clone of Antigravity

https://github.com/ab-613/opengravity
22•ab613•2h ago•8 comments

Interfaze: A new model architecture built for high accuracy at scale

https://interfaze.ai/blog/interfaze-a-new-model-architecture-built-for-high-accuracy-at-scale
92•yoeven•6h ago•19 comments

Training an LLM in Swift, Part 1: Taking matrix mult from Gflop/s to Tflop/s

https://www.cocoawithlove.com/blog/matrix-multiplications-swift.html
200•zdw•1d ago•10 comments

CUDA-oxide: Nvidia's official Rust to CUDA compiler

https://nvlabs.github.io/cuda-oxide/index.html
333•adamnemecek•6h ago•103 comments

Bild AI (YC W25) Is Hiring Founding Product Engineers

https://bild.ai/jobs
1•rooppal•4h ago

AMÁLIA and the future of European Portuguese LLMs

https://duarteocarmo.com/blog/amalia-and-the-future-of-european-portuguese-llms
106•johnbarron•3d ago•54 comments

Show HN: E2a – Open-source email gateway for AI agents

https://github.com/Mnexa-AI/e2a
11•mnexa•2h ago•1 comments

The Boston library where you still can borrow a giant puppet

https://binj.news/2026/05/06/the-boston-library-where-you-still-can-borrow-a-giant-puppet/
37•gnabgib•2d ago•4 comments

Counting Fast in Erlang with:counters and:atomics

https://andrealeopardi.com/posts/erlang-counters-and-atomics/
59•malmz•2d ago•2 comments

Interaction Models

https://thinkingmachines.ai/blog/interaction-models/
40•smhx•1h ago•5 comments

Linux Terminal Memory Usage

https://gilesorr.com/blog/linux-terminal-memory-usage.html
27•speckx•2h ago•22 comments

From Buffon's Needle to Buffon's Noodle

https://mbmccoy.dev/posts/buffons-noodle/
21•_alternator_•4d ago•6 comments

Silverback Imfura took a chance, and ended up alone

https://gorillafund.org/mountain-gorillas/silverback-imfura-took-a-chance-and-ended-up-alone/
5•alex000kim•1d ago•0 comments

Venom and hot peppers offer a key to killing resistant bacteria

https://www.wired.com/story/mexican-science-transforms-scorpion-venom-and-habanero-chile-into-ant...
157•littlexsparkee•2d ago•67 comments

Griffin PowerMate driver for modern macOS

https://github.com/jameslockman/Griffin-PowerMate-Driver
3•classichasclass•1h ago•0 comments

Building a web server in aarch64 assembly to give my life (a lack of) meaning

https://imtomt.github.io/ymawky/
89•theanonymousone•3d ago•29 comments

Software engineering may no longer be a lifetime career

https://www.seangoedecke.com/software-engineering-may-no-longer-be-a-lifetime-career/
309•movis•8h ago•528 comments

The greatest shot in television: James Burke had one chance to nail this scene (2024)

https://www.openculture.com/2024/10/the-greatest-shot-in-television.html
333•susam•19h ago•184 comments

Hardware Attestation as Monopoly Enabler

https://grapheneos.social/@GrapheneOS/116550899908879585
2059•ChuckMcM•1d ago•695 comments