HN

Need help?
<- Back
Linode Security Incident

Linode Security Incident

lacoolj

Comments (86)

  • 6thbit
    It feels like we hit an inflection point in the last week or so. Kind of a large tidal wave to crash on the coast, but likely not the tsunami yet. I hope.If you are running services and don't yet have an easy way to react to these things with swift process defined, I hope you don't like to sleep.
  • spydum
    Wow, that isn't clear. Is there an incident, or did they just become aware about MPTCP vuln? Details on the mptcp are also pretty scarce as well right?
  • paaloeye
    Even better CVE 10.0 has just dropped https://news.ycombinator.com/item?id=50310937
  • ericd
    Anyone have any thoughts on what happens when banks/brokerages start getting hit in earnest? Think it's prudent to split single brokerage portfolios across multiple? Or do they have enough speed bumps in their procedures that they're not quite so vulnerable to major losses?
  • nout
    All companies should at this point invest a lot of money into defensive AI. In ~July the AI hit crypto and bitcoin, where it's the easiest to extract the most money. Now the AI powered attacks are hitting infra and SaaS. Next (~December), it will hit classic infrastructure, banks, small businesses, etc. By mid next year, we will be over this hump with defensive AI being required part of everything.
  • Arbortheus
    This reads to me that nothing has happened and they are just trying to patch stuff? Right?
  • phendrenad2
    Why was the previous discussion of this flagged? https://news.ycombinator.com/item?id=50299182 Is our new policy to stick our heads in the sand and pretend that CVEs don't exist? Because I'm not getting behind that!
  • elashri
    @dang I would encourage you to really think about having security incident as a new HN tag. The wording can be better though.
  • dist-epoch
    I've lived to see the day when half of the Hacker News front page is about hacks. What a time to be alive.
  • anon
    undefined
  • nodesocket
    Anybody recommend a CVE alert self-hosted app? E.G. I specify my software, OS’s, and versions and when a matching CVE is created I get an alert. Don’t want enterprise security products.
  • ForHackernews
    What's the mitigation for this? There's no patches available yet https://ubuntu.com/security/CVE-2026-98432
  • optimalsolver
    I mean, this situation is untenable. HN's front page is just going to be an endless list of breaches.I don't see how web services proceed like business is normal.
  • rvz
    So it begins. The war against the abliterated AI models. Even at 1,000 TPS any service is a target.Imagine swarms of abliterated frontier AI models that reach >20,000 TPS. As I said before [0] you are going to have to hire specialized security engineers or technical bodyguards from the senior to senior staff level using AI agents to protect your entire business.Otherwise you are cooked.[0] https://news.ycombinator.com/item?id=50310312
  • pugworthy
    Lately it seems like we need "hacks.ycombinator.com" as a new sub-list.