The 10 biggest things in tech, Fri, Jul 3

The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.

  1. Pegasus targets its own investigators

    Citizen Lab and NSO Group reporting converge on a single damning narrative: European Parliament member Stelios Kouloglou, while serving on the EU spyware investigation committee, was repeatedly hacked with Pegasus by an NSO customer — the surveillance tool turned against the very officials tasked with overseeing it.

    #1 · security · scored 8/10

  2. NetNut botnet dismantled

    Google's Threat Intelligence Group, the FBI, and Lumen jointly seized hundreds of domains and degraded the NetNut (Popa) residential proxy botnet — a 2-million-device network operated by NASDAQ-listed Alarum Technologies — in one of the largest coordinated takedowns of proxy-as-a-service infrastructure.

    #2 · security · scored 8/10

  3. OpenTelemetry reaches enterprise maturity

    The CNCF graduated OpenTelemetry to its highest maturity level, formally cementing it as the production-ready industry standard for cloud-native observability.

    #3 · infrastructure · scored 8/10

  4. North Korea npm supply-chain attack

    JFrog linked North Korean threat actors to malicious npm packages spoofing Rollup polyfill tools to steal developer credentials and enable remote access, marking another targeted supply-chain attack on JavaScript developers.

    #4 · programming · scored 8/10

  5. OpenTelemetry reaches top CNCF maturity

    The CNCF graduated OpenTelemetry to its highest maturity level, formally cementing it as the production-ready industry standard for cloud-native observability.

    #5 · observability · scored 8/10

  6. Pegasus spyware targets oversight actor

    An NSO Group customer deployed Pegasus against a European politician investigating the spyware industry itself, a landmark case of commercial surveillance tools being weaponized against the very regulators scrutinizing them.

    #6 · industry · scored 8/10

  7. AI chip custom silicon race

    Anthropic is designing proprietary chips with Samsung, following OpenAI's Broadcom partnership, as major AI labs race to build custom silicon to cut inference costs and reduce cloud vendor dependency.

    #7 · ai · scored 7/10

  8. Multi-model routing goes enterprise

    Microsoft's $2.5B bet on model routing infrastructure — admitting single-model strategies were a mistake — is validated by industry analysis showing intelligent routing as a fast-growing enterprise AI efficiency category.

    #8 · ai · scored 7/10

  9. AI agent platforms proliferate

    Google, OpenAI, and Vercel each shipped distinct agent infrastructure this week — Google's A2UI v0.9 standard for cross-platform UI intent, OpenAI's Agent RFT fine-tuning platform, and Vercel's eve framework — while Meta's Zuckerberg publicly acknowledged agent development is behind schedule.

    #9 · ai · scored 7/10

  10. Developer supply-chain under attack

    North Korea-linked actors deployed fake npm Rollup polyfill packages to steal developer credentials, while a separate Lobsters thread surfaced best-practice concerns about LLM-generated code in dependencies — together signaling sustained adversarial pressure on JavaScript and AI-assisted development pipelines.

    #10 · security · scored 7/10