The 10 biggest things in tech, Sat, Jul 4
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Linux kernel and cloud trust under fire
Two foundational infrastructure security primitives are under serious threat this week: CVE-2026-46242 ('Bad Epoll') is a critical Linux kernel privilege escalation flaw affecting desktops, servers, and Android, while attested TLS — the core trust mechanism underpinning confidential computing across cloud and edge — is reported to be fundamentally broken with no clear fix in sight.
#1 · infrastructure · scored 9/10
AI-assisted Linux vulnerability discovery
Anthropic's Claude Mythos AI model is linked to a surge in serious Linux and embedded vulnerabilities, including CVE-2026-46242 (Bad Epoll), a critical kernel privilege escalation flaw affecting desktop, server, and Android systems — raising urgent questions about AI-assisted vulnerability discovery ethics and responsible disclosure.
#2 · security · scored 8/10
MCP ecosystem expands rapidly
Apple's WebKit team shipped MCP server support in Safari Technology Preview 247 and a new debugging tool (mcpsnoop) emerged for monitoring MCP traffic, signaling the Model Context Protocol is maturing from a text-based spec into a broadly-adopted browser and developer infrastructure standard.
#3 · ai · scored 7/10
AI-assisted vulnerability discovery risks
A report linking Claude Mythos Preview's release to a spike in serious Linux and embedded vulnerabilities raises urgent questions about whether frontier AI models are accelerating offensive security research faster than defenses can adapt.
#4 · ai · scored 7/10
North Korean developer supply-chain attacks
North Korean threat actors behind the Contagious Interview / PolinRider operation have published 108 malicious packages across npm, Packagist, Go, and Chrome extensions, with ongoing maintainer account compromises keeping the campaign active.
#5 · security · scored 7/10
Attested TLS fundamentally broken
The Register reports that attested TLS, the core trust primitive underpinning confidential computing across cloud and edge environments, is fundamentally broken with no viable fix currently in sight.
#6 · security · scored 7/10
Embedded and IoT vulnerabilities pile up
Researchers disclosed seven unpatched flaws in the widely embedded FatFs filesystem library — affecting security cameras, drones, industrial controllers, and crypto wallets — alongside a Firefox-to-Android-root privilege escalation chain and widespread incomplete error-handling vulnerabilities in OpenSSL implementations, painting a broad picture of embedded and platform-level security debt.
#7 · security · scored 7/10
MCP ecosystem expands to browsers
Apple's WebKit team shipped Safari Technology Preview 247 with a built-in MCP server, extending the Model Context Protocol ecosystem from text interfaces into full browser automation and web control.
#8 · programming · scored 7/10