A Russian drone struck Kyiv’s National Institute of Traumatology and Orthopedics at about 3 a.m., hitting its second floor and an adjoining historic building. Three people were injured, and 30 patients were evacuated; hospital services were temporarily suspended while crews dealt with the damage. The blast shattered windows in nearby buildings, including the National Academy of Arts. The attack came after President Volodymyr Zelenskyy said restrictions on SpaceX’s Starshield satellite system had again disrupted Ukrainian defenses. He said Ukrainian interceptor systems that depend on the service could not reach the speed needed to bring down some Russian drones. The White House had not explained the latest slowdown.
The strike is part of an intensified Russian campaign against civilian infrastructure, including power plants, trains and bridges. Overnight attacks also caused outages in 12 Ukrainian regions as repair crews worked under air-raid alerts. Moscow, meanwhile, said it had downed nearly 1,200 Ukrainian drones and reported four deaths in Volgograd. The military disruption unfolded amid US-led negotiations: Donald Trump’s envoys met Vladimir Putin and then briefed Zelenskyy, while the Kremlin demanded that Ukraine surrender four provinces and called for a European security order that would reverse NATO’s eastern expansion. French President Emmanuel Macron argued that European countries must be included in decisions about Ukraine’s future security, particularly as US support appears uncertain.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Penlink’s Webloc, which uses advertising data for surveillance, has been purchased by security agencies across multiple countries. Citizen Lab warns the system enables intrusive mass surveillance, with particular risks in authoritarian states. (citizenlab.ca)
Nvidia chips reportedly reached China in large quantities after Commerce Secretary Howard Lutnick declined to enforce export controls and failed to replace them. Lutnick should resign, the author argues, over the resulting national security risks. (nytimes.com)
DOC-foundry uses AI agents to create Sigma security detection rules, then has a simulated attacker test them. A deterministic referee checks coverage before a stakeholder review chain approves the rule and records its review trail. (github.com)
The FBI warns that the FaceStealer scheme targets cryptocurrency holders and steals their funds. Treat unsolicited offers and links with caution, and verify crypto services before sharing information or sending money. (fbi.gov)
Cloudflare’s abuse-reporting page is reportedly blank, leaving visitors unable to use the form it directs them to. The page is intended for reporting abuse hosted through Cloudflare. (news.ycombinator.com)
Home Assistant stores refresh-token secrets and signing keys in plaintext, while some tokens never expire and survive password changes. Anyone who obtains the configuration directory or a backup can retain access to the home, and restoring a backup can revive old tokens. (seclists.org)
Today's best Hacker News stories, summarized and screenshotted, one email a day.