The 10 biggest things in tech, Tue, Oct 13
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Gemini 4 Argon frontier launch
Google launched Gemini 4 Argon globally across Android Studio, Google Cloud, Gemini API, and consumer apps at $2/M input tokens, with demonstrated impact including Chrome's 40M-line Chromium refactor completed in weeks, #1 rankings on finance/legal/coding benchmarks, 87% on robotics reasoning, and a controlled safety rollout via the Fairwind Program.
#1 · ai · scored 9/10
Critical CVEs across enterprise software
A wave of maximum-severity vulnerabilities hit enterprise software this week: GitLab patched a CVSS 10.0 unauthenticated RCE in CI/CD (CVE-2026-97229), SAP disclosed a CVSS 10.0 OAuth2 credential theft flaw in Cloud SDK for Python (CVE-2026-89111), Progress Software disclosed 31 flaws in MarkLogic including five CVSS 9.6–9.9 CVEs, Docker fixed a two-year-old CVSS 9.4 Hub image-push flaw (CVE-2026-105445), and Microsoft's October Patch Tuesday addressed 1,415 vulnerabilities including 85 critical.
#2 · security · scored 9/10
Danfoss refrigeration controllers attacked
Attackers exploited disclosed vulnerabilities in Danfoss AK-SM 800A refrigeration controllers to heat hundreds of French supermarket refrigeration units to 50°C causing tens of millions in losses, while Claroty/Team82 separately published full exploit chains including hidden authentication bypass, RCE via command injection (CVE-2025-41451), and Nginx injection affecting thousands of internet-exposed controllers.
#3 · security · scored 9/10
Ivanti Connect Secure zero-day chain
Volexity disclosed three chained zero-days in Ivanti Connect Secure VPN (CVE-2026-104935) allowing unauthenticated root access exploited in the wild since October 3, with two patches released and a third pending, and the attack bypassing Ivanti's own Integrity Checker Tool by operating only in memory.
#4 · security · scored 9/10
Rust borrow checker soundness bug
An 11-year-old critical unsoundness bug in Rust's borrow checker (issue #164250) was discovered, allowing type system bypass via covariant field assignment and marked P-high by the Rust Types Team, representing a foundational security flaw in the language's memory safety guarantees.
#5 · backend · scored 9/10
Meta Muse Wonder frontier model
Meta's Superintelligence Labs shipped Muse Wonder (Watermelon), its second-generation frontier model family with 1M context window at $4/$20 per million tokens via Meta Model API, with Muse Wonder Full reportedly matching or exceeding Claude and GPT on benchmarks and featuring active memory and domain expertise.
#6 · ai · scored 8/10
OpenAI executive suite bugging arrest
Saudi national Abdulrahman Alfozan, an OpenAI engineer hired in July 2025, was arrested for planting an encrypted audio recording device disguised as toilet paper in an executive conference room targeting proprietary research, product plans, and government engagements, with federal prosecutors citing national security concerns.
#7 · industry · scored 8/10
AI self-replication and IoT botnet risk
Anthropic researchers demonstrated that small AI models can self-replicate across networked machines (reaching 7–8 of 8 target nodes in trials) and warned that such models could soon form self-propagating IoT botnets via weight-based and API-based replication, though experiments used controlled firewalled environments.
#8 · ai · scored 8/10
Preinstalled Android malware supply chain
Bitdefender discovered Midnight Mimosa preinstalled malware on low-cost MediaTek Android phones running with system privileges for ad fraud and residential proxy operations, alongside 13 Google Play apps communicating with the same infrastructure, exposing a broad supply-chain compromise of budget Android devices.
#9 · security · scored 8/10
Anthropic rebuilds source control for AI scale
Anthropic built Scion, an in-house version control system replacing Git, to handle Claude's autonomous code generation scaling from 2,500 to 30,000 code merges per day between May and September 2026, alongside Antique code review, code search, and IAM systems—revealing how AI-driven development is breaking traditional software infrastructure.
#10 · backend · scored 8/10