Feed aggregator

Hi HN, I'm Michael. I built Korva because I listen to a lot of podcasts but forget the things I want to remember. While I'm listening, I think to myself, "I should remember this," but then I can't tell you what it was five minutes after the episode ends.

Korva pulls out the ideas and insights from podcasts and puts them in a feed you can explore. You can come back to ideas from your own podcasts, share them, discover what other people are learning, and go deeper on something that interests you.

I'm just starting distribution and would love to get Korva in the hands of more podcast listeners. Give it a try and tell me what you think! I'm especially interested in whether it finds the things you wanted to remember and whether you find yourself coming back. Feedback would help me more than anything right now.

Comments URL: https://news.ycombinator.com/item?id=49659996

Points: 1

# Comments: 0

Article URL: https://www.axios.com/pro/climate-deals/2026/09/08/helion-energy-fusion-net-electricity-date-year

Comments URL: https://news.ycombinator.com/item?id=49659986

Points: 1

# Comments: 0

Article URL: https://rbaldwin.substack.com/p/chinas-subsidies-worked-countervailing

Comments URL: https://news.ycombinator.com/item?id=49659980

Points: 1

# Comments: 0

Open-source agentic workspace enterprises can make their own. Connect the systems you already run — 100+ integrations, MCP, chat tools, apps, browser, local files — with shared memory. Any agent (Claude Code, Codex), any model, or BYOK. Set up in clicks, not months. Local-first: your data never leaves your machines.

Comments URL: https://news.ycombinator.com/item?id=49659974

Points: 1

# Comments: 0

Article URL: https://timleland.com/codex-pricing-comparisons/

Comments URL: https://news.ycombinator.com/item?id=49659963

Points: 1

# Comments: 0

Article URL: https://www.forbes.com/sites/barrycollins/2026/07/22/rogue-openai-attack-fuels-demands-to-rein-in-big-tech/

Comments URL: https://news.ycombinator.com/item?id=49659891

Points: 1

# Comments: 0

Article URL: https://chuks.org/blog/chuks-v012-the-standard-library-release/

Comments URL: https://news.ycombinator.com/item?id=49659890

Points: 2

# Comments: 0

Article URL: https://www.therepository.email/matt-mullenweg-swears-for-the-first-time-in-42-years-and-posts-hiring-call-to-move-my-stuff-off-automattic

Comments URL: https://news.ycombinator.com/item?id=49659871

Points: 1

# Comments: 0

Article URL: https://emirhuseyin.tech/proofframe/

Comments URL: https://news.ycombinator.com/item?id=49659870

Points: 1

# Comments: 0

Article URL: https://www.reuters.com/legal/litigation/anthropic-disrupts-russian-chinese-ai-campaigns-targeting-its-claude-models-2026-09-10/

Comments URL: https://news.ycombinator.com/item?id=49659863

Points: 1

# Comments: 0

Article URL: https://www.machinesociety.ai/p/bioweapons

Comments URL: https://news.ycombinator.com/item?id=49659857

Points: 1

# Comments: 1

Article URL: https://iae.gg

Comments URL: https://news.ycombinator.com/item?id=49659837

Points: 1

# Comments: 0

Article URL: https://github.com/jskswamy/aide

Comments URL: https://news.ycombinator.com/item?id=49659811

Points: 2

# Comments: 0

Article URL: https://medium.com/@flaviopilotodasilva/get-inspired-and-try-out-new-things-165ef37bd2b5

Comments URL: https://news.ycombinator.com/item?id=49659804

Points: 1

# Comments: 0

Article URL: https://kolesnik.io/blog/my-agents-did-better-with-bm25

Comments URL: https://news.ycombinator.com/item?id=49659803

Points: 1

# Comments: 0

This is the first time I experienced iPhone app development. I've never really had the confidence to finish one.

The last mile ended up being very difficult and I've tested it on a marathon, bird pooing on me, many many field tests outside.

My main motivation was showing where I was during the marathon and talk to my family and friends then it evolved from there.

There's also an event planned for tomorrow at 4pm PST if you want to test out the multiplayer run feature, just go at your own pace, talk with short voice clips, send cheers.

https://apps.apple.com/us/app/onlyrun/id6764187221

Comments URL: https://news.ycombinator.com/item?id=49659764

Points: 1

# Comments: 0

Article URL: https://github.com/nextblock-cms/nextblock

Comments URL: https://news.ycombinator.com/item?id=49659727

Points: 1

# Comments: 0

An attacker breached an email marketing platform and launched targeted attacks against the newsletter subscribers of some of its customers, especially those working in cryptocurrency and adjacent fields.

The incident was a supply-chain phishing campaign carried out through Brevo, an email marketing provider used by several cryptocurrency companies and other firms.

Brevo initially said an attacker had gained access to 120 customer accounts, some of which were used to send phishing emails to the customers’ contact lists.

Brevo later said 138 customer accounts had been accessed in its postmortem:

“On September 10th at 6:30 AM UTC we identified a security issue where an attacker exploited a flaw in the way Brevo handles SAML SSO to gain access to 138 Brevo accounts. 6 of those accounts were used to send phishing emails to the contacts stored there, and for 43 accounts they exported the contacts. 93 accounts have no meaningful activity.”

According to reports, popular cryptocurrency companies Trezor, CoinTracking, and BitBox confirmed that phishing emails were sent to customers subscribed to their newsletters. Trezor warned its roughly 347,000 newsletter subscribers that a security incident at a third-party provider had resulted in a massive phishing campaign.

Trezor makes hardware wallets that store cryptocurrency private keys offline. Its customers received a phishing email titled “Critical Security Alert: STM32 Entropy Bug Identified.”

The subtitle read: “Urgent update regarding hardware microcontroller vulnerability.”

The email said:

“Dear customer,

We have some difficult news to share. Unfortunately, our engineering team has identified a critical hardware-level vulnerability in the STM32 microcontrollers used in a range of Trezor devices.

Currently we believe the majority of defective devices were initialized prior to 2023, however some newer devices also may be vulnerable. The bug is a hardware factory defect present in an estimated 1 in 4 devices.

The vulnerability results in:

• Insufficient randomness in recovery phrase generation
• Exposure of seeds to brute-force cracking
• Seeds with as little as 40 bits of entropy”

That phishing email also contained a link that prompted recipients to download an app and enter their wallet backup.

CoinTracking said the attackers sent its customers an email titled “Data Breach Notice: Please refresh API Keys as soon as possible,” which also contained a malicious link. 

Because the emails came from legitimate company domains and looked convincing, some recipients may have fallen for them. The exact number is not currently known.

How to stay safe

It can be difficult to recognize a phishing email when it comes from a legitimate company domain and looks convincing. But there are a few things to keep in mind:

• If a company emails you about an urgent security problem, check its official website or app for confirmation.
• Do not install apps through links in unsolicited emails, no matter how urgent the message claims to be.
• Never enter your recovery phrase anywhere other than on your physical device.
• Reputable companies will not ask for recovery phrases, API keys, or login details by email.
• Use Malwarebytes Scam Guard to check whether a message might be a scam and get guidance on what to do next.
• Keep an eye out for further information about other Brevo customers that have been affected. The attackers exported contacts from 43 accounts, which could be used in future targeted phishing attacks.

What to do if you followed the link

Trezor advises moving your funds to a new wallet if you entered your wallet backup in any form. If you followed a link in a similar email from another provider, contact that company directly for advice.

Something feel off? Check it before you click.  

Malwarebytes Scam Guard helps you analyze suspicious links, texts, and screenshots instantly.  

Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.  

Try it free → 

Noteworthy stories that might have slipped under the radar: Invisible Unicode slips past phishing filters, US puts $10 million bounty on Iranian cyber official, military ties of Chinese hacking group QTFY.

The post In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review appeared first on SecurityWeek.

Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.

The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek.