AI Shutdowns, Offline Tools, and Zero-Days

The White House reportedly has suspicions that a China-linked group had access to Anthropic’s powerful AI.

The group, tracked as ShinyHunters, had been exploiting the PeopleSoft vulnerability for more than two weeks before Oracle flagged it. CVE-2026-35273, as the vulnerability is tracked, carries a severity rating of 9.8 out of 10, making the former zero-day one of the year’s most critical vulnerabilities to be exploited.

Google’s Mandiant security team said it’s an SSRF (server-side request forgery), a vulnerability that allows attackers to send requests from a susceptible server to systems used by the targeted organization. Oracle said the SSRF is remotely exploitable, and the company has issued a stopgap mitigation but has yet to …

The University of Nottingham confirmed on Wednesday that it was the victim of a hack that put a “significant” amount of student data in the hands of a threat actor. The confirmation came after ShinyHunters claimed the university was one of its recent victims and published gigabytes of data it claimed to have stolen …

Mandiant said ShinyHunters has been exploiting the vulnerability since May 27. As of Wednesday, the group had targeted roughly 300 endpoints belonging to 100 user organizations. About 68 percent of the organizations operated within the higher education sector. A researcher said on Tuesday that the group responsible …

“While several organizations successfully blocked the activity or remediated the vulnerabilities, others experienced compromise, resulting in stolen data being published on the ShinyHunters DLS,” Mandiant said. (DLS is short for data leak site.)

Show HN: Kage is presented as a way to shadow any website to a single binary for offline viewing.

The project link points to github.com/tamnd/kage.

The Hacker News discussion reached 336 upvotes and 75 comments.

The pitch is useful anywhere a web page needs to be opened later without a network connection.

The author says they indexed 669 GB of GoPro videos using an M1 Max computer.

They say the indexing used local ML models.

The Hacker News post reached 239 upvotes and 52 comments.

The project is a concrete example of using local models to organize large personal media libraries.

The post says zeroserve added Caddy compatibility.

It reports 3x throughput and 70% lower latency in the comparison.

The Hacker News thread reached 147 upvotes and 43 comments.

For server-side developers, the story is a smaller service trying to speak a familiar proxy language while claiming faster response paths.