Det Centrale Personregister (CPR) har konstateret en alvorlig sikkerhedshændelse: uvedkommende har fået adgang til navne, adresser, CPR-numre og lignende oplysninger for cirka 8,8 millioner registrerede personer ved at misbruge en dansk virksomheds lovlige adgang til at søge i CPR-systemet. Gennemgangen viser, at personer, der har valgt navne- og adressebeskyttelse, ikke er ramt. Hændelsen er offentliggjort 5. oktober 2026 og omfatter systematisk uautoriseret udtræk af persondata i meget stort omfang.
CPR-administrationen har straks lukket virksomhedens adgang og arbejder sammen med sikkerhedsspecialister og relevante myndigheder på at kortlægge hændelsesforløbet. Sagen er anmeldt til Datatilsynet, og politiet fører efterforskning i samarbejde med andre myndigheder. Yderligere oplysninger og officielle meddelelser kan findes på Forsknings-, Uddannelses- og Digitaliseringsministeriets hjemmeside.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
GrapheneOS has a partial port to the Pixel 11 but cannot complete it due to lack of support for ARM hardware memory tagging (MTE), a key security feature. Google reportedly cut MTE support to save costs, despite newer Pixel models and iPhones implementing similar security measures. (discuss.grapheneos.org)
The @subql/common version 5.8.3 was compromised with a postinstall credential stealer, affecting the popular SubQuery repository with 18,000 stars. The malicious release was reported on GitHub, raising security concerns among users. (github.com)
Uceprotect is blacklisting entire hosting provider networks like DigitalOcean based on ASN reputation, affecting innocent websites. The blacklist demands monthly fees for whitelisting, which can cut off access for users on networks that rely on these filters. (news.ycombinator.com)
AI vulnerability scanning has become essential for maintaining software security and quality in 2026, as human developers struggle with unsafe languages. Improved AI tools now effectively identify security and non-security bugs, significantly enhancing software reliability. (blogs.gnome.org)
A zero-day vulnerability in KVM allows virtual machines to escape their sandbox and execute code on the host system. The flaw affects KVM, a popular open-source virtualization technology used in many cloud and server environments. (cybernews.com)
A vulnerability in macOS (CVE-2026-65400) enabled remote code execution via the screen sharing feature, prompting Apple to release a patch. The author's Mac Mini, running only AI agents like Claude and Codex, was protected from the exploit due to its limited access. (stratechery.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.