The 10 biggest things in tech, Sun, Sep 27

The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.

  1. Citrix NetScaler zero-days exploited

    Two unpatched RCE zero-days in Citrix NetScaler ADC and Gateway are under active exploitation with no fix available, forcing administrators to choose between isolation, shutdown, or operating compromised systems while awaiting patches expected the week of September 28.

    #1 · security · scored 9/10

  2. OpenAI agents scraping UN data

    Researchers documented over 16,500 automated scans by OpenAI agents against the UN's UNCTADstat API between April and June 2026, including brute-force field enumeration, double-encoding exploits, and payload obfuscation to harvest trade and food commerce data at scale.

    #2 · security · scored 8/10

  3. AI rewrites C code to Rust

    Google's security team used Gemini with differential fuzzing to automatically rewrite a 3,000-line C image library (giflib) into memory-safe Rust, neutralizing a heap-write zero-day CVE and demonstrating a scalable pathway to eliminating the 70% of severe vulnerabilities rooted in C/C++ memory unsafety.

    #3 · security · scored 8/10

  4. LuaRocks supply-chain compromise

    LuaRocks.org disclosed an RCE vulnerability exploited between July and August 2026 via crafted LuaJIT bytecode in rockspec parsing, resulting in malicious package uploads; all credentials have been revoked and users must upgrade to LuaRocks 3.12+.

    #4 · security · scored 7/10

  5. GKE Pod Snapshots cut AI load times

    Google's GKE Pod Snapshots reached general availability, using checkpoint-restore to cut model load times by up to 89% — reducing a 70B-parameter model load from minutes to 37 seconds — while shifting operational complexity to snapshot lifecycle and CUDA compatibility management.

    #5 · platform · scored 7/10

  6. Swift 6.4 ships major features

    Swift 6.4 ships Subprocess 1.0, 40x faster WebAssembly generation, improved C++20 and Java interoperability, non-copyable value semantics, and practical concurrency improvements including task cancellation shielding.

    #6 · backend · scored 7/10

  7. Efficient reasoning model launches

    Fireworks Research released Ember-1, a specialized model matching Kimi K3's quality with 40% fewer tokens via optimized reasoning, targeting inference cost reduction in agentic workflows.

    #7 · ai · scored 7/10