The 10 biggest things in tech, Mon, Jun 15
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Active nation-state and VPN intrusions
Palo Alto Networks confirmed active exploitation of a CVSS 7.8 authentication bypass in PAN-OS GlobalProtect VPN, while Google disclosed a year-long PRC-linked espionage campaign that compromised US military and medical networks to exfiltrate drone and pathogen data — two concurrent high-severity intrusion stories hitting critical infrastructure.
#1 · security · scored 9/10
Anthropic model pullback, US export controls
The US government directed Anthropic to suspend Claude Fable 5 and Mythos 5, triggering a public dispute between Anthropic leadership and officials, an Anthropic lobbying push in Washington, and EU calls for AI sovereignty — marking the sharpest government intervention yet in frontier AI model availability.
#2 · ai · scored 8/10
Salesforce acquires Fin for $3.6B
Salesforce acquired AI customer service platform Fin (formerly Intercom) for $3.6 billion to bolster its Agentforce AI agent platform, marking one of the largest enterprise AI acquisitions of the year.
#3 · industry · scored 8/10
FCC proposes burner phone ban
The FCC proposed rules mandating carriers collect government ID and physical addresses for all customers, effectively eliminating anonymous prepaid phones and drawing sharp warnings from privacy advocates.
#4 · industry · scored 8/10
Salesforce doubles down on AI agents
Salesforce acquired Intercom's AI customer service platform Fin for $3.6 billion to bolster its Agentforce platform, signaling that enterprise AI agent infrastructure is now a multi-billion-dollar battleground.
#5 · ai · scored 7/10
AI coding model wave intensifies
Cohere shipped its first coding model, Moonshot AI open-sourced Kimi K2.7-Code with a 21.8% benchmark improvement and 30% lower token usage, and AWS added Gemma 4 to Bedrock — collectively marking a week where coding-focused AI models became a mainstream enterprise offering.
#6 · ai · scored 7/10
Supply chain attacks broaden in scope
Three distinct supply-chain abuse campaigns emerged simultaneously: Arch Linux's AUR froze new accounts after a flood of malicious commits, 152 Chrome extensions across 38 publisher accounts were caught distributing adware, and Docker joined the Athena coalition citing AI-accelerated vulnerability exploitation as a growing threat to software supply chains.
#7 · security · scored 7/10
Microsoft 365 Copilot one-click exfiltration flaw
Varonis Threat Labs discovered SearchLeak, a chained three-bug vulnerability in Microsoft 365 Copilot Enterprise Search that allows attackers to exfiltrate emails, calendar data, and files via a single click on a trusted microsoft.com link, bypassing conventional anti-phishing defenses.
#8 · security · scored 7/10
Surveillance and biometric privacy concerns mount
The FCC proposed eliminating anonymous 'burner' phone access by requiring carriers to store government IDs and addresses for all customers, while Meta was revealed to be working with a Pentagon-linked firm to develop face recognition for smart glasses — two parallel moves drawing sharp criticism from privacy advocates.
#9 · security · scored 7/10
Serverless execution limits expand
Vercel doubled max function execution time to 30 minutes for Node.js and Python, while AWS Lambda streaming and Java cold-start optimizations (SnapStart, GraalVM) signal a broader push to make serverless viable for longer-running, compute-intensive workloads.
#10 · cloud · scored 7/10