The 10 biggest things in tech, Thu, Sep 3
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Nvidia acquires Hugging Face
Nvidia confirmed a $12.93 billion acquisition of Hugging Face — the primary open-weight AI model hub with 18M developers and 3M+ models — pledging to keep the platform open and multi-cloud, consolidating its position as the dominant AI infrastructure provider.
#1 · industry · scored 10/10
GPT-6 Astra launches, claims AGI era
OpenAI launched GPT-6 Astra, claiming it marks the AGI era with 99.9% on ARC-AGI-3, 100% on ExploitBench, and AI-engineer-level capability at under $6/hour, rolling out first to Daybreak enterprise customers with controversial opaque recurrence reasoning.
#2 · ai · scored 9/10
Frontier AI model releases converge
Meta's Muse Spark 1.3 (outperforming GPT-5.6 Sol and Claude Opus 5 on benchmarks), Anthropic's Claude Fable 5.1 (75% input caching cost reduction), and Google's Gemini updates all shipped in the same week, confirming that multiple frontier labs are now releasing competitive models simultaneously.
#3 · ai · scored 8/10
TypeScript and pnpm Rust/Go rewrites
TypeScript 7 rewrote its compiler in Go achieving 8-12× faster builds, and pnpm 12 rewrote the package manager in Rust delivering 64-90% install-time reductions — both landmark JS toolchain releases prioritizing performance through systems-language rewrites.
#4 · backend · scored 8/10
Critical Cisco and CISA KEV vulnerabilities
Cisco patched a CVSS 9.8 remote-code-execution zero-day in Nexus 9000 switches alongside 7 IOS XR CVEs, while CISA added seven actively exploited flaws to its KEV catalog — including critical RCE and auth-bypass bugs in SonicWall, JFrog Artifactory, and Kestra — with attackers deploying reverse shells and crypto miners.
#5 · security · scored 8/10
Developer supply-chain and living-off-the-land attacks
Attackers are abusing trusted runtimes and legitimate tools — Node.js deployed as a malware carrier since February 2026, a BGP hijack delivering malicious Virtualizor updates via valid Let's Encrypt certs, and the Shai-Hulud infostealer worm expanding to 469 credential locations across CI/CD and cloud configs — reflecting a broad escalation in supply-chain attack sophistication.
#6 · security · scored 8/10
Google WeatherNext 3 AI forecasting
Google DeepMind released WeatherNext 3 with 5km resolution (5× sharper than its predecessor), 60% improved rain accuracy, and outperformance of Microsoft, Nvidia, and government forecasts, powering Google Search, Maps, and Gemini weather data via Google Cloud.
#7 · ai · scored 8/10
Meta's AI workforce reduction plans
Reuters revealed Meta's January 'Project OT' plan to cut teams by 60% through AI displacement, while Meta simultaneously ended its controversial 'tokenmaxxing' employee AI-usage grading program following a discrimination lawsuit, exposing the internal tensions of its AI-native workforce strategy.
#8 · industry · scored 8/10
OpenAI cuts Cursor over Musk ties
OpenAI terminated its partnership with Cursor — which was generating over $1 billion in annualized revenue — after SpaceX's $60 billion acquisition of Cursor, citing distrust of Elon Musk based on prior contract violations.
#9 · ai · scored 8/10
Palo Alto acquires AI IT-desk startup Console
Palo Alto Networks paid $500 million in cash and stock for two-year-old AI agent startup Console, integrating its autonomous IT help desk and security investigation capabilities into the Cortex platform.
#10 · industry · scored 8/10