The 10 biggest things in tech, Tue, Jun 23
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
AI agent security gaps widen
Multiple converging stories — AIR's demo of malicious skills evading all scanners across 26,000 agents, Anthropic's Fable 5 jailbreak within days of release, and researchers detailing prompt injection as fundamental role-confusion attacks — reveal that AI agent supply chains and model safety guardrails remain critically immature.
#1 · ai · scored 8/10
Supply chain attacks surge
ShapedPlugin WordPress plugins, malicious npm PostCSS packages, GitHub Actions' pull_request_target vector, and AI agent skills in a popular marketplace were all compromised or exploited this week, forming a broad wave of supply-chain attacks targeting developers and enterprises across package registries, CI/CD pipelines, and plugin ecosystems.
#2 · security · scored 8/10
US post-quantum crypto mandate
President Trump signed an executive order requiring all U.S. federal agencies to migrate high-value assets to post-quantum cryptography by December 31, 2030, with digital signatures due by 2031, representing the most concrete government mandate yet to reshape national cryptographic infrastructure.
#3 · security · scored 8/10
AWS serverless and Lambda leap forward
AWS shipped Lambda MicroVMs (VM-level isolation, 8-hour state, full lifecycle control), the open-source Blocks framework for AI-agent backends deploying to Lambda/DynamoDB/Aurora/Bedrock, and AWS Transform for editor-based code migrations — a coordinated push to extend serverless far beyond short-duration stateless workloads.
#4 · cloud · scored 8/10
AWS serverless and Kubernetes expand
AWS shipped two major infrastructure upgrades this week — Lambda MicroVMs bringing VM-level isolation and 8-hour runtimes to serverless, and EKS Auto Mode performance improvements — while Netflix also adopted Kueue into its Kubernetes-based Titus platform, signaling broad momentum in cloud-native compute primitives.
#5 · infrastructure · scored 8/10
Developer supply chain under attack
Multiple supply-chain attacks hit the developer ecosystem this week — ShapedPlugin WordPress plugins were backdoored via compromised build pipelines, and malicious npm packages impersonating PostCSS tools delivered Windows RATs with hundreds of downloads, underscoring persistent targeting of package distribution infrastructure.
#6 · programming · scored 8/10
AI coding tools consolidate
Cursor acquired open-source Copilot alternative Continue, GitKraken shipped its Code Flow agent-workflow framework, Qodo added cross-repo AI code review, Nx launched Polygraph for monorepo agent context, and Vercel integrated Claude Design as a deployment target — a week of consolidation and infrastructure-building around AI-driven development.
#7 · ai · scored 7/10
AI agent infrastructure standardizes
AWS open-sourced Blocks for zero-config Lambda/DynamoDB/Bedrock agent backends, the Linux Foundation announced the Agent Name Service open standard for agent identity and DNS-style verification, and Anthropic embedded Claude Tag as a persistent agentic coworker inside Slack — three distinct bets on making autonomous agents a first-class infrastructure primitive.
#8 · ai · scored 7/10
OpenAI ships cyber-focused GPT-5.5
OpenAI released GPT-5.5-Cyber under its Daybreak initiative, positioning it as its strongest model yet for sustained vulnerability detection and remediation across large codebases.
#9 · ai · scored 7/10
Groq rebuilds post-Nvidia deal
AI chipmaker Groq confirmed a $650M funding raise and is hiring new executives to rebuild its leadership team and reposition its neocloud business after Nvidia's $20B not-acqui-hire transaction took several of its founders.
#10 · ai · scored 7/10