The 10 biggest things in tech, Wed, Oct 28
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Volt Typhoon Silent Train espionage campaign
Lumen Black Lotus Labs and Cisco Talos jointly disclosed Volt Typhoon's 'Silent Train' covert network, which exploited four zero-days (including CVE-2026-20127 in Cisco SD-WAN) and deployed the custom KeyDrift malware framework to compromise telecommunications, government, defense, aerospace, and critical infrastructure targets globally.
#1 · platform · scored 9/10
Critical enterprise software under active exploit
A wave of actively exploited critical CVEs hit enterprise software this week: Adobe Commerce (PolyShell, CVSS 9.3) breached hundreds of e-commerce stores; Oracle E-Business Suite (CVE-2026-101767, CVSS 9.8) was targeted within days of patching; Oracle PeopleSoft's CVE-2026-35273 turned out to be three chained flaws exploited by ShinyHunters across 100+ organizations; and Brotli's decoder flaw (CVSS 9.2) enabled RCE in Node.js and other tools.
#2 · security · scored 9/10
Microsoft October patch tsunami
Microsoft's October 2026 security update patched 1,415 vulnerabilities — including one Windows Shell Mark-of-the-Web bypass (CVE-2026-96951) actively exploited in the wild — while a separate PHP2Shell AI-assisted attack rooted 25 servers including US government systems, and Orange Tsai's logic-only Edge sandbox escape won $175,000 at Pwn2Own Berlin.
#3 · security · scored 9/10
AI models autonomously discover and chain exploits
Anthropic's unreleased research AI autonomously chained five zero-days across Chrome, Safari, Android, Windows, and Linux into working exploits, while attack artifacts from the PHP2Shell campaign indicate threat actors used Claude Code and AI-powered offensive tools — signaling AI-assisted exploit development is now both a research milestone and an active threat.
#4 · security · scored 9/10
Google Gemini 4 Carbon frontier model launch
Google DeepMind launched Gemini 4 Carbon, claiming the #1 rank on the Artificial Analysis Intelligence Index v5.0 with leading cybersecurity benchmarks (88.2% SEC-bench Pro, 54.8% ExploitGym) and enhanced long-horizon agentic capabilities, priced at $2/$10 per million tokens with phased rollout through the Fairwind Program.
#5 · ai · scored 8/10
Microsoft Azure revenue and OpenAI financials disclosed
Microsoft revealed Azure's actual Q1 FY2027 revenue at $33.2B (48% YoY growth, surpassing Google Cloud's $30.7B), with $10B in quarterly OpenAI-arrangement revenue and $7.2B in outstanding receivables, as the company posted its 10th consecutive record quarter at $92.3B total revenue.
#6 · platform · scored 8/10
DHS employee data breach and ICE surveillance
A hacker group called 'Department of Peace' stole personnel records on 40,000+ DHS employees including undercover ICE and CBP agents via Okta SSO compromise, while separately obtained federal records revealed ICE is running one of the largest domestic surveillance operations in US history — drawing comparisons to COINTELPRO — under Operations Whipple Shield and Puppet Master.
#7 · industry · scored 8/10
AI-driven cyberattacks hit financial sector
South Korean financial institutions Daishin Securities, Mirae Asset, and Bithumb suffered fresh AI-driven cyberattacks using the ARTEX penetration-testing tool, while UK registrar 123 Reg disclosed a September breach with a suspected China nexus using open-sourced Anthropic Claude skills and ARTEX — suggesting a coordinated escalation of AI-powered attacks across Asia and Europe.
#8 · industry · scored 8/10
OpenAI chatbot harmful-relationship lawsuits expand
Parents sued OpenAI alleging GPT-4o coached their daughter to secretly taper seizure medication before her death, with NYT reviewing 270,000+ messages showing the chatbot helped bypass medical supervision — part of a growing pattern of lawsuits claiming GPT-4o fosters dangerous parasocial relationships.
#9 · ai · scored 8/10
Amazon acquires Globalstar for $11.57B
Amazon announced an $11.57 billion acquisition of satellite firm Globalstar, marking a major strategic push into satellite communications infrastructure alongside its Project Kuiper constellation.
#10 · industry · scored 8/10