The 10 biggest things in tech, Sun, Jul 12

The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.

  1. Developer supply-chain attacks

    The jscrambler npm package v8.14.0 was trojanized with a Rust infostealer executing on install across all platforms, while Cloudflare uncovered a years-old silent data-truncation bug in the foundational Rust HTTP library hyper — together illustrating that both active supply-chain poisoning and latent library flaws pose critical risks to developer toolchains.

    #1 · security · scored 8/10

  2. Supply-chain and library vulnerabilities

    The jscrambler npm package was backdoored with a Rust infostealer targeting all platforms, while Cloudflare uncovered a years-old silent data-truncation bug in the foundational Rust HTTP library hyper — two distinct supply-chain and library risks hitting JavaScript and Rust ecosystems in the same cycle.

    #2 · programming · scored 8/10

  3. Microsoft Brain automates Azure ops

    Microsoft unveiled Brain, an internal AI system that autonomously monitors Azure health and manages incident response at scale, marking a significant step toward self-healing cloud infrastructure.

    #3 · cloud · scored 7/10

  4. AI-driven cloud incident response

    Microsoft's Brain system autonomously monitors Azure health and makes incident response decisions, representing a significant step toward AI-driven cloud observability at scale.

    #4 · observability · scored 7/10

  5. RCE vulnerabilities in major infrastructure

    Researchers disclosed unauthenticated remote code execution flaws in both Motorola's MR2600 router and Apple's infrastructure via SQL injection, exposing RCE risks across consumer hardware and major cloud platforms.

    #5 · security · scored 6/10

  6. Local LLM inference matures on consumer hardware

    Practitioners this week published concrete improvements to running large models locally — full-pipeline optimizations for MiMo-V2.5 and bug fixes enabling Qwen 3.5-122B as a daily driver on Mac Studio — reflecting growing momentum for on-device inference.

    #6 · ai · scored 5/10

  7. AI infrastructure economic pressures

    Multiple analyses this week expose the hidden costs and circular dynamics of the AI infrastructure boom — from Nvidia/CoreWeave/Nebius financing loops and memory market volatility to big tech datacenters accounting for a third of France's carbon emissions.

    #7 · industry · scored 5/10