The 10 biggest things in tech, Mon, Jun 29
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Critical zero-days in Chrome and libssh2
Two severe vulnerabilities disclosed this week — CVE-2026-6307 'Longinus' breaking Chrome's V8 sandbox and renderer boundaries, and CVE-2026-55200 (CVSS 9.2) in libssh2 allowing unauthenticated code execution on SSH clients via a public PoC — pose immediate exploitation risk to millions of users across browsers and SSH tooling.
#1 · security · scored 9/10
Supply-chain attacks surge across ecosystems
A wave of supply-chain compromises hit multiple ecosystems this week: hijacked npm and Go packages deployed a Python stealer via VS Code tasks, Microsoft purged 119 malicious Edge extensions hiding malware in images since 2021, Mustang Panda APT abused Zoho WorkDrive as a C2 channel against Indian government targets, and Nissan disclosed an Oracle PeopleSoft breach exposing employee SSNs — together illustrating that package managers, browser stores, cloud services, and ERP systems are all live attack surfaces.
#2 · security · scored 8/10
Rocket Lab acquires Iridium
Rocket Lab's $8 billion all-stock acquisition of Iridium Communications marks a major consolidation in commercial space infrastructure, positioning the combined company to compete directly with SpaceX and Amazon on satellite connectivity and launch capabilities.
#3 · industry · scored 8/10
AI productivity paradox at scale
GitLab's 2026 AI Accountability Report, Ford's rehiring of experienced engineers, and a Panterra survey of 406 IT leaders all converge on the same finding: AI tools deliver local speed gains but fail to improve — or actively harm — overall delivery quality and reliability at the system level.
#4 · ai · scored 7/10
Supreme Court limits geofence warrants
The U.S. Supreme Court ruled that geofence warrants require constitutional privacy protections, setting a landmark precedent that constrains law enforcement's ability to conduct broad device-location surveillance nationwide.
#5 · security · scored 7/10
Telecom and media restructuring
Comcast's spinoff of NBCUniversal and Sky into independent companies, alongside BT and Verizon's $4 billion international networking joint venture, signal a wave of major restructuring across telecom and media incumbents.
#6 · industry · scored 7/10
Tech regulation and privacy pressure
The US Supreme Court's geofence warrant ruling, Meta's non-consensual use of Instagram photos in ads, and Australia's investigation of five social media platforms for age-restriction failures collectively mark a broad tightening of legal and regulatory pressure on tech companies across multiple jurisdictions.
#7 · industry · scored 7/10
Enterprise AI systems ship concrete results
Netflix, Target, and Groundcover each shipped production AI systems this week — Netflix with a generative homepage recommendation engine, Target with an LLM-based marketing forecasting system hitting 75% top-1 accuracy, and Groundcover with an observability agent integrating Slack, Linear, and GitHub — collectively showing LLMs moving into core enterprise workflows.
#8 · ai · scored 6/10
Agentic AI developer tooling evolves
DeepReinforce released Ornith-1.0, an open-weight agentic coding model up to 397B MoE, while JavaScript teams are actively migrating away from LangChain.js to direct LLM integrations, and AWS published architectural guidance for fault-tolerant multi-agent workflows — signaling rapid maturation and fragmentation in the agentic developer tooling space.
#9 · ai · scored 6/10
Post-quantum cryptography gains urgency
Autocrypt v2 shipped post-quantum cryptography support for encrypted email, while researchers scanning Certificate Transparency logs found weak real-world RSA keys in the wild and commentary highlighted the credential-exposure risk as quantum hardware advances — signaling that PQC adoption is moving from theory to active deployment pressure.
#10 · security · scored 6/10