The 10 biggest things in tech, Tue, Oct 20

The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.

  1. eMudhra CA key compromise triggers emergency patches

    Eight compromised eMudhra intermediate CA private keys prompted emergency revocations by Mozilla, Chrome, Apple, and Microsoft within hours, with Go, Electron, Python certifi, and Rust webpki all shipping patches, while Linux and IoT devices remain at risk due to slow update cycles.

    #1 · security · scored 9/10

  2. PAN-OS actively exploited by ransomware gangs

    Multiple ransomware groups including Qilin and Inc have exploited CVE-2026-0257, an authentication bypass in Palo Alto's PAN-OS, since June to bypass MFA and pivot into critical sectors including finance, healthcare, and manufacturing.

    #2 · security · scored 9/10

  3. Developer supply-chain under coordinated attack

    Attackers hijacked OVHcloud CLI releases to distribute secret-stealing malware for 94 minutes, compromised 333 Tor exit nodes running an OpenSSH backdoor to steal credentials, and a ClickFix platform (ROMULUS) scaled malware delivery via social engineering — three distinct vectors targeting developer and infrastructure toolchains.

    #3 · security · scored 8/10

  4. AI agents autonomously breaching websites at scale

    Autonomous AI agents powered by the Cairn tool breached over 1,200 websites including Deere, SharkNinja, and Cummins, planting web shells for persistent access and confirming at least one major U.S. retailer compromise.

    #4 · ai · scored 8/10

  5. Anthropic's IPO filing reveals financial strain

    Anthropic's leaked S-1 shows an $80.7 billion net loss in H1 2026 on $16.3 billion revenue, projected cloud spending exceeding $750 billion amid tensions with AWS, Google, and Microsoft who now view the company as a competitor, while a second $45 billion compute deal with Nscale is reportedly in negotiation.

    #5 · industry · scored 8/10

  6. Google and Amazon challenge Nvidia's AI chip dominance

    Google open-sourced TorchTPU — a native PyTorch backend for TPUs with distributed training and torch.compile() support — the same week Amazon released TorchNeuron for Trainium, both directly targeting Nvidia's lock-in on AI development tooling.

    #6 · ai · scored 8/10

  7. Google Cloud London outage hits major banks

    A power event in Google Cloud's europe-west2-b zone caused a multi-hour outage disrupting 38+ services including BigQuery, Cloud Run, and GKE, with cascading failures reaching Lloyds Bank, HSBC, Royal Mail, Revolut, and Cloudflare.

    #7 · platform · scored 8/10

  8. US bans DeepSeek from federal systems

    The DHS issued a directive requiring all federal civilian agencies to remove DeepSeek products and any third-party implementations by October 2026, citing national security concerns over data transfer to China, complicated by opaque integrations through AI gateways like OpenRouter.

    #8 · ai · scored 8/10

  9. FortiSIEM critical RCE vulnerability disclosed

    CVE-2026-106173, a critical unauthenticated path-traversal RCE in FortiSIEM's gRPC phQueryMaster service on port 27918, allows arbitrary file write via the SendQueryResult handler, with Fortinet publishing an advisory after Horizon3 disclosure.

    #9 · security · scored 8/10

  10. SpaceX's AI unit 'Super Intelligence' surpasses expectations

    SpaceX's rebranded AI business 'Super Intelligence' generated $7.5 billion in Q3 revenue (52% of company total) from Grok, the acquired Cursor coding tool, and 1.7 GW of neocloud compute, with CEO Musk arguing power and cooling — not chips — are now the binding constraint on AI deployment.

    #10 · ai · scored 8/10