The 10 biggest things in tech, Sun, Jul 19

The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.

  1. Active zero-days in critical infrastructure

    Two high-severity pre-auth remote code execution vulnerabilities are under active or imminent exploitation — a WordPress Core zero-day affecting millions of sites and a SonicWall SMA 1000 zero-day exploited by threat actor UTA0533 to gain root access on VPN appliances before public disclosure.

    #1 · security · scored 9/10

  2. Qwen 3 model family expands

    Alibaba shipped two variants of Qwen 3 this week — the open-weight 3.8 model and the Qwen 3.8 Max preview — reinforcing its position as a tier-1 competitor in the open foundation model race alongside Moonshot AI's new Kimi release.

    #2 · ai · scored 7/10

  3. AI tools sharpen, context shrinks

    Google's AlphaEvolve reached GA on Gemini Enterprise (delivering 2x ML training throughput at Klarna) while OpenAI quietly cut Codex's max context window from 372k to 272k tokens, showing that enterprise AI tooling is maturing but not uniformly improving.

    #3 · ai · scored 7/10

  4. Apache Spark adds vector database support

    Apache Spark 4.2 shipped built-in vector database capabilities, positioning the ubiquitous data processing platform as a potential replacement for standalone vector stores in enterprise AI pipelines.

    #4 · ai · scored 7/10

  5. Sandworm ClickFix campaign targets Ukraine

    Russian GRU-affiliated group Sandworm (UAC-0145) is exploiting fake CAPTCHA ClickFix lures to deliver malware against Ukrainian targets, with CERT-UA formally attributing the campaign.

    #5 · security · scored 7/10

  6. Cloud deployment speed improvements

    Google and AWS each shipped infrastructure acceleration tools this week — AlphaEvolve on Gemini Enterprise delivering 2x ML training throughput at Klarna, and AWS CloudFormation Express Mode cutting deployment times by skipping full resource stabilization waits.

    #6 · cloud · scored 7/10

  7. AWS CloudFormation accelerates deployments

    AWS introduced CloudFormation Express Mode, which speeds up infrastructure deployments by marking stacks complete after configuration application rather than waiting for full resource stabilization.

    #7 · infrastructure · scored 7/10

  8. Apache Spark 4.2 ships vector DB

    Apache Spark 4.2 adds built-in vector database capabilities, signaling Spark's expanded role in AI workloads and potentially displacing dedicated vector storage systems in enterprise pipelines.

    #8 · data · scored 7/10

  9. AI confidence gap and hype distortion

    Multiple pieces this week converge on a single warning: AI tools measurably increase user confidence while decreasing accuracy, and AI hype is driving billion-dollar corporate strategies led by executives without AI expertise.

    #9 · ai · scored 5/10

  10. Browser-based local-first dev tools

    Several new tools — Simon Willison's SQLite Query Explainer (Pyodide), OfflineTTS (local speech AI), and a WebRTC peer-to-peer file transfer app — share a narrative of developers shipping capable, privacy-respecting utilities that run entirely in the browser without cloud dependencies.

    #10 · programming · scored 5/10