Top all-time · #6334
Horizon3
Company blog · horizon3.ai/attack-researchsecurity
Horizon3 is the company blog at horizon3.ai, writing about security. Since 2022, 13 different Hacker News readers have linked it 14 times, most often “Rust Won't Save Us: An Analysis of 2023's Known Exploited Vulnerabilities”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN commenters mostly post Horizon3 job listings for NodeZero, its autonomous penetration testing product. One links a CVE-2025-3248 disclosure write-up from its attack-research section.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Horizon3 uses real-world attacks to safely show what attackers can actually do in your environment—so you can fix and prove what matters.
Most-linked posts?
- Rust Won't Save Us: An Analysis of 2023's Known Exploited Vulnerabilities4 people · 4 mentions · first linked 2024-02-06
- /join-our-team/2 people · 3 mentions · first linked 2022-01-04
- Unsafe at Any Speed: Abusing Python Exec for Unauth RCE in Langflow AI2 people · 2 mentions · first linked 2025-05-19
What Hacker News says?
Horizon3 A.I. | Multiple Roles | REMOTE (US) | Full-time | www.horizon3.ai At Horizon3 we are pushing the boundaries on traditional security assessments by providing an autonomous penetration testing solution with our core product NodeZero. NodeZero conducts a penetration test just as a person would by discovering assets, enumerating services, exploiting weaknesses and misconfigurations, but with all the advantages…
Comment linking /join-our-team/
on “Ask HN: Who is hiring? (January 2022)”Submitted Rust Won't Save Us: An Analysis of 2023's Known Exploited Vulnerabilities as a story · 13 points
HN discussion> > The choice of handcoding some low-level string manipulation is similar to the choice of using unsafe rust. One can do it or not. > But most of the time programmers don't make a conscious choice at all. So opt-out unsafety versus opt-in unsafety is a huge difference. I don't think so. A programmer being careless will be careless with Rust "unsafe" too. Don't get me wrong, I think marking code without guaranteed m…
Comment linking /attack-research/attack-blogs/analysis-of-2023s-known-exploited-vulnerabilities
on “Making memcpy(NULL, NULL, 0) well-defined”Submitted Rust Won't Save Us: An Analysis of 2023's Known Exploited Vulnerabilities as a story · 7 points
HN discussionHorizon3.ai | Multiple Roles | Full Time | Bay Area, NYC, Boulder, RTP | https://www.horizon3.ai/join-our-team/ The product: NodeZero provides autonomous penetration testing delivered as a self-service SaaS offering. Red Teams use NodeZero as a force multiplier that can conduct infrastructure pentesting at-scale so humans can be a scalpel. Blue Teams rely on NodeZero to proactively harden their infrastructure. SOCs…
Comment linking /join-our-team/
on “Ask HN: Who is hiring? (November 2023)”Submitted Rust Won't Save Us: An Analysis of 2023's Known Exploited Vulnerabilities as a story · 4 points
HN discussionHorizon3.ai | Multiple Roles | Full Time | Bay Area, RTP, Boulder | https://www.horizon3.ai/join-our-team/ The product: NodeZero provides autonomous penetration testing delivered as a self-service SaaS offering. Red Teams use NodeZero as a force multiplier that can conduct infrastructure pentesting at-scale so humans can be a scalpel. Blue Teams rely on NodeZero to proactively harden their infrastructure. SOCs use N…
Comment linking /join-our-team/
on “Ask HN: Who is hiring? (September 2023)”Submitted CVE-2026-106173: FortiSIEM gRPC Path Traversal RCE as a story · 3 points
HN discussionBlogspam of original report https://horizon3.ai/attack-research/disclosures/unsafe-at-an...
Comment linking /attack-research/disclosures/unsafe-at-any-speed-abusing-python-exec-for-unauth-rce-in-langflow-ai/
on “CVE-2025-3248: Serious vulnerability found in popular Python AI package”Submitted CVE-2025-5777: CitrixBleed 2 Exploit Deep Dive as a story · 3 points
HN discussionSubmitted Unsafe at Any Speed: Abusing Python Exec for Unauth RCE in Langflow AI as a story · 2 points
HN discussionSubmitted Palo Alto Expedition: From N-Day to Full Compromise – Horizon3.ai as a story · 2 points
HN discussionSubmitted Exploiting File Read Vulns in Gradio to Steal Secrets from Hugging Face Spaces as a story · 1 points
HN discussionSubmitted Rust Won't Save Us: An Analysis of 2023's Known Exploited Vulnerabilities as a story · 1 points
HN discussion