The 10 biggest things in tech, Thu, Jul 2
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
AI infrastructure investment race
Microsoft committed $2.5B to a new AI deployment group while Together AI raised $800M at an $8.3B valuation and NVIDIA began offering startups compute-for-revenue-share deals, collectively signaling that AI infrastructure spending is accelerating across hyperscalers, independents, and chipmakers alike.
#1 · ai · scored 8/10
Linux kernel security regressions
Three distinct Linux security issues emerged this week: a critical unprivileged root escalation via FUSE readdir (CVE-2026-31694), a LUKS encryption key memory leak introduced in kernel 6.9 during suspend, and NSA interference in ML-KEM post-quantum crypto standardization — together painting a picture of systemic pressure on Linux security primitives.
#2 · security · scored 8/10
SharePoint RCE actively exploited
CISA added CVE-2026-45659, a CVSS 8.8 SharePoint unsafe-deserialization RCE, to its Known Exploited Vulnerabilities catalog, confirming active exploitation despite Microsoft's earlier 'less likely' assessment and requiring immediate patching of on-premises servers.
#3 · security · scored 8/10
Argo CD critical unpatched RCE
A critical unpatched vulnerability in Argo CD's repo-server allows unauthenticated code execution and full Kubernetes cluster takeover via internal network access, with no CVE or fix available, posing an urgent threat to widely-deployed GitOps infrastructure.
#4 · security · scored 8/10
Government and treasury breaches
Two significant government security incidents surfaced: a deep-dive into the December 2024 BeyondTrust breach where a stolen API key let Chinese Silk Typhoon actors access U.S. Treasury systems, and a fresh breach of DHS's intelligence-sharing network flagged by the Senate Intelligence Committee as a national security risk.
#5 · security · scored 8/10
AI compute infrastructure race intensifies
Microsoft committed $2.5B to a dedicated AI deployment group, Meta announced plans to monetize excess inference capacity as a cloud business, and SoftBank entered the GPU rental market — all racing to capture AI infrastructure revenue alongside Amazon, Google, and Anthropic.
#6 · cloud · scored 8/10
Apple Private Cloud expands to Google
Apple expanded Private Cloud Compute to Google Cloud for the first time, using NVIDIA Blackwell GPUs, Intel TDX, and Google's Titan chip with dual-vendor attestation — a significant multi-cloud AI inference partnership that notably excludes AWS and Azure.
#7 · cloud · scored 8/10
BeyondTrust AWS breach anatomy
A deep-dive post-mortem of the December 2024 BeyondTrust incident details how Chinese state-sponsored Silk Typhoon used a stolen API key to access U.S. Treasury systems via AWS, spotlighting machine identity as cloud-native infrastructure's primary security liability.
#8 · cloud · scored 8/10
Argo CD critical unpatched RCE
A critical unauthenticated remote code execution vulnerability in Argo CD's repo-server has no CVE or fix available, leaving widely-deployed GitOps clusters open to full Kubernetes takeover via internal network access.
#9 · infrastructure · scored 8/10
Apple-Google confidential AI cloud deal
Apple expanded Private Cloud Compute to Google Cloud — the first non-Apple cloud partner — using NVIDIA Blackwell GPUs, Intel TDX, and Google Titan with dual-vendor attestation, establishing a significant multi-cloud AI inference architecture that bypasses AWS and Azure.
#10 · infrastructure · scored 8/10