The 10 biggest things in tech, Sat, Jul 11

The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.

  1. Linux kernel GhostLock vulnerability

    GhostLock, a critical use-after-free vulnerability in Linux kernel stack handling, has gone undetected across all distributions for 15 years, exposing the entire Linux ecosystem to long-term risk.

    #1 · security · scored 8/10

  2. Linux kernel GhostLock CVE

    A critical use-after-free vulnerability dubbed GhostLock has existed undetected in the Linux kernel stack handling across all distributions for 15 years, representing a systemic risk to the entire Linux ecosystem.

    #2 · infrastructure · scored 8/10

  3. AI chip supply chain reshoring

    SK Hynix's record $26.5B US IPO and Meta's first in-house AI chip Iris signal accelerating momentum to control AI silicon supply chains, with policymakers pushing semiconductor manufacturing back to US soil.

    #3 · infrastructure · scored 8/10

  4. AI chip and semiconductor reshoring

    SK Hynix's $26.5B US IPO — the largest foreign IPO in US history — underscores the financial momentum behind AI chip demand and policymaker pressure on chipmakers to build domestic manufacturing capacity.

    #4 · industry · scored 8/10

  5. AI agent security vulnerabilities

    Researchers documented two distinct attack surfaces targeting AI agents this week: slopsquatting, where attackers register hallucinated package names from AI coding suggestions in npm and pip, and cross-site prompt injection in web-based agents, with a Prismata confinement technique proposed as mitigation.

    #5 · ai · scored 7/10

  6. Meta custom AI chip debut

    Meta is manufacturing its first in-house AI chip, Iris, marking a major shift toward custom silicon among tech giants seeking infrastructure control for large-scale AI workloads.

    #6 · ai · scored 7/10

  7. OpenAI safety leadership departure

    OpenAI's Head of Safety Johannes Heidecke is departing as the company merges its research and safety teams, raising questions about how the organization will govern AI safety going forward.

    #7 · ai · scored 7/10

  8. Apple vs OpenAI trade secret theft

    Apple has sued OpenAI alleging systematic corporate espionage, claiming the company directed poached employees to steal confidential hardware presentations, secret prototypes, and supplier details under the guidance of OpenAI's senior leadership.

    #8 · security · scored 7/10

  9. AI-driven supply chain attacks emerge

    Slopsquatting — a novel supply chain attack exploiting AI coding agents' package hallucinations — has been documented in active 2025–2026 incidents where attackers pre-registered fake npm and pip packages to distribute malware to developers following AI suggestions.

    #9 · security · scored 7/10

  10. CISA unprepared for its own breach

    CISA revealed it was forced to improvise incident response procedures during an active breach caused by a contractor who exposed passwords in a public GitHub repository, exposing severe gaps in the nation's top cybersecurity agency's own access controls and preparedness.

    #10 · security · scored 7/10