The 10 biggest things in tech, Sat, Aug 15
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
npm supply chain worm escalates
ChainDrop, a new Shai-Hulud npm worm variant, compromised 444 packages with 2 billion monthly downloads by propagating through tarballs and evading detection via IDE-triggered Git hooks, harvesting npm tokens and cloud credentials at unprecedented scale.
#1 · security · scored 9/10
Frontier model race intensifies
Grok 4.6, DeepSeek V4-Pro, Qwen 3.8-Max, and Alibaba's Qwen 3.8 27B all launched within days of each other, compressing API pricing to $0.66–$2 input versus Claude Fable 5 at $10/$50, while two releases include downloadable weights — signaling a pivot from capability to cost competition at the frontier.
#2 · ai · scored 8/10
macOS screen sharing RCE exploited
CVE-2026-65400, a severity-7.1 macOS screen sharing vulnerability enabling remote code execution and root access, is under active exploitation with attackers deploying Monero miners post-compromise; Apple patched all three active macOS versions.
#3 · security · scored 8/10
AI agent platforms multiply
Microsoft shipped VS Code 1.133 with a dedicated open-source Agent Host Protocol enabling cross-window, SSH-remote, and mixed-model agent sessions; Cloudflare launched agent tracing with per-span pricing; and Databricks added SQL-native AI inference functions — collectively marking a week where agent infrastructure moved from prototype to production-grade platform.
#4 · ai · scored 7/10
AI agent security failures exposed
NVIDIA's AI Red Team found enterprise agents systematically fail due to missing access controls, arbitrary code execution, and plaintext secrets, while dbt Labs data shows only 15% of organizations deploying agents are data-ready — with Gartner projecting 40% project cancellations by 2027.
#5 · ai · scored 7/10
AI designs functional bacteriophages
Stanford researchers used the Evo 2 foundation model to design 16 novel bacteriophages from scratch that successfully infected antibiotic-resistant E. coli, published in Science, while simultaneously raising biosecurity concerns that the same methods could be repurposed for malicious biological agent design.
#6 · ai · scored 7/10
Apple builds China-only AI model
Apple is building a China-specific AI backend with Alibaba and Baidu to satisfy regulators, creating a split where the same iOS app will behave differently by region — forcing developers to maintain incompatible AI backends behind a shared framework abstraction.
#7 · ai · scored 7/10
LLM-generated GPU kernels unreliable
A new academic verifier for LLM-generated GPU kernels found 39.5% of kernels accepted by standard harnesses are broken and 62.1% contain correctness violations, while also delivering the first native Blackwell backward pass for gated-linear-recurrence training validated against double-precision oracles.
#8 · ai · scored 7/10
VS Code AI agent architecture
VS Code 1.133 decouples AI agents into a dedicated Agent Host process via a new open-source Agent Host Protocol, enabling persistent cross-window sessions, remote SSH execution, and mixed-model turns with Copilot, Claude, and Codex.
#9 · frontend · scored 7/10
Firefox last uBlock Origin bastion
With Edge completing its Manifest V3 migration and Safari and DuckDuckGo lacking support, Firefox is now the only major browser where uBlock Origin's full blocking APIs still function.
#10 · frontend · scored 7/10