The Kyiv Independent disclosed on November 4 that a breach of one of its systems led subscribers to receive a fraudulent Russian-language email. It falsely warned that a nuclear warhead had been launched toward Kyiv and claimed Ukrainian President Volodymyr Zelenskyy and Russian leader Vladimir Putin had joined forces. Editor-in-Chief Olga Rudenko stressed that the newsroom had not sent the message and that there was no evidence for its claims. She said the information available, including the email’s contents, pointed to a Russian operation.
The attackers also tried to place similar messages on the outlet’s website, but staff removed them quickly. The Kyiv Independent said it was working to fix the breach and improve its security, while apologizing to readers and thanking them for their support. Rudenko compared the incident to a cyberattack two days earlier on a Ukrainian air-raid alert app, which had displayed a false warning about an incoming Russian missile. She described such attacks as part of the war, aimed at creating confusion and weakening public trust in the institutions and news organizations Ukrainians rely on.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Brazil’s Credit Guarantee Fund (FGC) reported unauthorized access to personal data in systems used for guarantee payments, but has found no evidence of disclosure, misuse, or financial loss. It restricted access, blocked unauthorized accounts, notified Brazil’s data protection authority, and continues investigating the incident. (fgc.org.br)
Data collected through ads in popular apps gives police a way to track users’ phones. The surveillance relies on advertising technology rather than direct access to a device. (bloomberg.com)
Mark Cuban says Facebook knowingly runs scam ads featuring AI-generated deepfakes. Documents reportedly estimate the platform earns $16 billion from fraudulent ads. (finance.yahoo.com)
Claude Code allegedly sends users’ email addresses to third-party websites in the User-Agent header during web searches. The reported privacy issue prompted a request to remove the behavior entirely. (github.com)
CVE-2026-83844 is listed as a remote code execution vulnerability in MS Paint. The provided page contains no details about affected versions, exploit conditions, or fixes. (cve.org)
A remote code execution vulnerability affects Microsoft Paint. An attacker can exploit it by getting a user to open a specially crafted file in the app. (msrc.microsoft.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.