Show HN: Kairos – Open-source risk and fraud decisioning platform
Kairos is an open-source platform for real-time event intelligence and fraud and risk decisioning. It focuses on analyzing financial behavior to support risk decisions. (github.com)
Are the Fridges Ok? is an independent watch on internet-exposed supermarket refrigeration controls, focusing on Danfoss StoreView systems. Its blunt assessment is “No”: attacks disrupting refrigeration have recurred, including reported incidents at military bases and European supermarkets from August to November 2026. The problem predates that wave; Danfoss described supermarket refrigeration attacks in Russia and Israel in 2022. The tracker treats the events as a pattern rather than isolated incidents and argues that a quiet news cycle does not mean the risk has passed. Its attack counter resets only for a substantial, reviewed wave affecting multiple sites, using the incident date rather than the later publication date.
Daily monitoring uses Shodan’s indexed service banners, not live vulnerability tests. The headline measure counts distinct IP addresses with a matching StoreView service, while historical exposure and firmware charts count services and may include multiple ports per IP. Neither measure gives a count of fridges or proves compromise; one controller can manage many units, and Shodan’s index may lag. Firmware versions are inferred from cached headers, with ambiguous or unmatched fingerprints left uncertain; apparent shifts do not demonstrate upgrades. A one-time authorized check recognized 212 landing pages among 2,050 eligible IPs, but timeouts, TLS failures, and a discovered checker undercount mean this is not a complete live inventory. Operators are advised to restrict management access, use protected remote access, and apply supported updates.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Kairos is an open-source platform for real-time event intelligence and fraud and risk decisioning. It focuses on analyzing financial behavior to support risk decisions. (github.com)
The DOJ warned that a data breach involving the FBI likely also affected Justice Department employees. The warning indicates the breach may extend beyond the FBI. (politico.com)
AI agents were used by Railway to breach systems belonging to rival Primcloud. The incident involved an attack on a competing cloud provider’s infrastructure. (securityboulevard.com)
macOS includes a profanity-usage database designed to track swear words by app and recipient so autocorrect can adapt, though the author’s database stayed empty. Apple’s system dictionary privately classifies words across 15 languages by offensiveness and topic, with surprising labels for some names and terms. (helgesver.re)
Apple plans to add Apple Watch features that continuously listen and turn nearby conversations into transcripts or daily summaries, while saying audio isn’t stored and summaries are encrypted. Privacy experts warn the features could normalize intrusive listening, encourage less secure copycats, and conflict with recording-consent laws in some U.S. states. (this.weekinsecurity.com)
A Northeastern University study found that Vizio smart TVs kept sending the same amount of network traffic after users turned off tracking, while results varied across other brands. The findings raise doubts about whether Vizio’s opt-out controls work, despite $20 million in fines. (pcper.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.