HN Top Links - Popular Stories from Hacker News

1.

PHP 8.2.35 (github.com)

955 points by tuyuri 10 hours ago | 529 comments

2.

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds (scotthelme.co.uk)

821 points by hkc 14 hours ago | 393 comments

3.

Today's PHP security release, and how we're strengthening security (thephp.foundation)

639 points by ejohnso49 8 hours ago | 317 comments

4.

The 1.5°C goal of the Paris Agreement is no longer viable (unric.org)

611 points by velo_aprx 14 hours ago | 745 comments

5.

The Future of CSS (joshwcomeau.com)

590 points by soheilpro 22 hours ago | 261 comments

6.

The No Kings Takedown Is Why You Shouldn't Rent Your Megaphone from Zuck (techdirt.com)

488 points by robtherobber 9 hours ago | 472 comments

7.

EA is shutting down BioWare (theverge.com)

481 points by aaronbrethorst 6 hours ago | 287 comments

8.

PHP2Shell: AI uncovers critical RCE in PHP (wiz.io)

429 points by danlark1 10 hours ago | 171 comments

9.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

412 points by abhisek 9 hours ago | 129 comments

10.

Muse exposes users' personal and business secrets when they share conversations (arstechnica.com)

380 points by gumby 23 hours ago | 162 comments

11.

DuckDB 2.0.0 LTS “Cinnamon Teal” (duckdb.org)

353 points by nnx 9 hours ago | 43 comments

12.

Mistral Large 4 (mistral.ai)

315 points by funnym0nk3y 4 hours ago | 92 comments

13.

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case (cnbc.com)

313 points by cbg0 6 hours ago | 190 comments

14.

Claude Duet (claude.com)

288 points by kuberwastaken 4 hours ago | 242 comments

15.

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out (php.net)

276 points by timvdalen 10 hours ago | 2 comments

16.

Dutch National Cyber Security Center is Offline because it uses PHP (ncsc.nl)

266 points by jacquesm 11 hours ago | 94 comments

17.

Qwen3-Coder writes less secure code when told it's for a US persona (hirundo.io)

238 points by mattifrank 11 hours ago | 117 comments

18.

Railway Security Disclosure (blog.railway.com)

228 points by passenger 2 hours ago | 103 comments

19.

Patch the Planet: global response coordination as agents uncover vulnerabilities (openai.com)

224 points by nr378 9 hours ago | 146 comments

20.

OpenAI models are coming to Google Cloud (openai.com)

218 points by armcat 11 hours ago | 94 comments

21.

GitLab Critical Patch Release (docs.gitlab.com)

218 points by artooro 4 hours ago | 51 comments

22.

Meta hit with $25B penalty for deceiving users about privacy on Facebook (nmdoj.gov)

206 points by DeepLogin 4 hours ago | 2 comments

23.

Good type against all odds (unsung.aresluna.org)

197 points by firloop 22 hours ago | 20 comments

24.

Whatever Happened to Fire Escapes (practical.engineering)

185 points by sohkamyung 13 hours ago | 151 comments

25.

PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619) (jackalsyn.com)

184 points by rfarley04 19 hours ago | 62 comments

26.

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin (apnews.com)

164 points by surprisetalk 8 hours ago | 79 comments

27.

Google's Rust Style Guide (google.github.io)

161 points by kaycebasques 4 hours ago | 104 comments

28.

C# now beats Rust on WASM size (github.com)

152 points by sumnole 21 hours ago | 101 comments

29.

Most advice is right for the person giving it (coached.com)

143 points by rohanm93 10 hours ago | 132 comments

30.

In Hilbert space, all things are quantumly possible (quantamagazine.org)

141 points by unprovable 21 hours ago | 75 comments