The 10 biggest things in tech, Sun, Aug 30

The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.

  1. AI training data IP litigation

    Sony Music, Warner Chappell, and other major publishers sued Anthropic for using copyrighted works to train Claude via illegal torrenting and scraping, escalating a wave of IP litigation against AI labs that follows a $1.5B judgment in the Bartz v. Anthropic case.

    #1 · ai · scored 8/10

  2. Omarchy privilege escalation patched

    Omarchy 4.0.0 contained a critical Docker-group privilege escalation flaw allowing any user process — including browsers and AI agents — to reach root without sudo, patched in 4.0.1.

    #2 · security · scored 8/10

  3. TerminalFix ClickFix variant attack

    Microsoft disclosed TerminalFix, a sophisticated ClickFix variant that chains fake Cloudflare CAPTCHAs, PowerShell, DLL sideloading, steganographic payloads, and a Python reverse-tunnel backdoor into a multi-stage attack with persistent C2 access.

    #3 · security · scored 8/10

  4. Qubes OS arbitrary code execution

    Qubes Security Bulletin 118 details an arbitrary code execution flaw in qvm-copy-to-vm where compromised qubes can inject commands into dom0 via unsanitized filenames in qfile protocol responses.

    #4 · security · scored 8/10

  5. Algorithmic rent-pricing regulation wave

    Following the RealPage litigation, U.S. states and cities including San Francisco, Seattle, and Philadelphia enacted laws restricting algorithmic rent-pricing software, creating a simpler statutory liability path with damages up to $1,000 per dwelling unit per month.

    #5 · security · scored 8/10

  6. Government surveillance vs. press freedom

    The Trump administration is using a customs law (19 USC 1509) to compel journalist phone and platform records without judicial oversight, as revealed by DHS obtaining six months of Minneapolis journalist Georgia Fort's data to track coverage of a church protest.

    #6 · security · scored 7/10

  7. Encryption backdoor policy push

    The EU Commission's ProtectEU strategy revives mandatory encryption backdoors under the euphemism 'lawful access,' while a CDT poll shows 89% of British adults require court orders for message access and two-thirds distrust any government with decryption keys — directly contradicting UK policy as well.

    #7 · security · scored 7/10

  8. Tencent Hy4 770B open-weight model

    Tencent released and open-sourced Hy4 Preview, a 770B-parameter LLM with 1M-token context that outperforms GLM-5.3 and Kimi K3 on internal benchmarks, representing a major scale jump from the 295B Hy3 and available free for two weeks on WorkBuddy and CodeBuddy.

    #8 · ai · scored 7/10

  9. vLLM v0.28 major release

    vLLM v0.28.0 shipped with 584 commits from 270 contributors, bringing tiered KV cache disk offloading, Rust frontend support, speculative decoding advances, and major inference optimizations for Kimi-K3 and DeepSeek V4.

    #9 · backend · scored 7/10

  10. Claude Code prompt injection exposed

    A researcher achieved a 60–80% prompt injection success rate against Claude Code Opus 5 Auto Mode via malicious website content, directly contradicting Anthropic's commissioned evaluation that claimed 0% attack success.

    #10 · ai · scored 7/10