The 10 biggest things in tech, Tue, Oct 6
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Schneider Electric acquires PTC for $22.6B
Schneider Electric announced a $22.6B all-cash acquisition of industrial software firm PTC to expand its datacenter infrastructure portfolio, following earlier investments in liquid-cooling and industrial automation amid AI-driven infrastructure demand.
#1 · industry · scored 10/10
KVM hypervisor zero-day escape flaw
Security researcher Paulos Yibelo disclosed a zero-day KVM guest-to-host escape vulnerability confirmed via Vercel's bug bounty program, potentially affecting AWS, Google Cloud, and other hyperscale providers relying on KVM for VM isolation.
#2 · security · scored 9/10
Mistral Large 4 open-weight launch
Mistral released Large 4 ('Le Chonk'), a 1-trillion-parameter sparse MoE model with 49B active parameters trained on European infrastructure, claiming state-of-the-art performance for open-weight models across coding, cybersecurity, and agentic tasks — with full weights available within weeks.
#3 · ai · scored 8/10
Paramount–Warner Bros. mega-merger closes
Paramount completed its ~$111B acquisition of Warner Bros. Discovery to form Skydance, combining HBO Max, Paramount+, CBS, CNN, and major franchises under David Ellison's control, with all three streaming services set to unify over time.
#4 · industry · scored 8/10
ccTLD hijacks enable fake TLS certificates
Attackers hijacked .gh, .sl, and .as country-code top-level domains to obtain counterfeit TLS certificates for Google and other major services by passing DNS-based domain validation, prompting Chrome CRLSet blocks and CA revocations.
#5 · security · scored 8/10
Denmark CPR national ID breach
A compromised private company account exposed CPR data — names, addresses, and national ID numbers — for 8.8 million people in Denmark over roughly 10 days, exceeding the country's total population and prompting police investigation and calls to reform CPR as a sole identity mechanism.
#6 · security · scored 8/10
Critical Atlassian Data Center vulnerability
Atlassian disclosed CVE-2026-21589 (CVSS 9.3) allowing unauthenticated file reads across eight Data Center products including Confluence, Jira, Bitbucket, and Bamboo, requiring urgent patching of self-hosted deployments.
#7 · security · scored 8/10
Kubernetes cgroup v2 migration mandate
Kubernetes v1.35 deprecated cgroup v1 support and the kubelet now refuses to start on cgroup v1 nodes by default, requiring all Linux nodes to migrate to cgroup v2 ahead of tracked removal in KEP-5573.
#8 · platform · scored 8/10
Next.js 16.4 ships Cache Components
Next.js 16.4 makes Cache Components the recommended default for all apps, enabling fast personalized-page loads and instant client navigation, bundled with React 19.3, smaller bundles, and reduced build/memory overhead.
#9 · frontend · scored 8/10
Polars 2.0 major release
Polars 2.0 ships out-of-core spill-to-disk, first-class SQL integration, a new Map data type, and stricter type enforcement, claiming benchmark wins over DuckDB and DataFusion on TPC-H and TPC-DS workloads.
#10 · data · scored 8/10