The 10 biggest things in tech, Fri, Oct 30
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Binance $6.3B North Korean crypto heist
North Korean hackers (TraderTraitor unit) stole a record $6.3 billion from Binance in 20 minutes by compromising an engineer's laptop; approximately $3 billion was frozen by industry partners, Binance suspended all withdrawals, and the company reserved $6.34 billion to cover losses.
#1 · industry · scored 9/10
eMudhra CA catastrophic key compromise
eMudhra's eight intermediate CA private keys were catastrophically weak — one literally being the number 4 — enabling anyone to forge certificates for any domain, representing an unprecedented Internet-wide CA compromise that Cloudflare and others patched within hours.
#2 · platform · scored 9/10
Critical CVEs under active exploitation
CISA added a CVSS 10.0 GitLab RCE (CVE-2026-97229) and Cisco ASA DoS flaw to its KEV catalog, while a critical Linux kernel TCP use-after-free (CVE-2026-98432, CVSS 9.8) enabling remote code execution was confirmed exploitable in controlled labs — Go 1.24+ users must disable MPTCP immediately.
#3 · platform · scored 9/10
AI developer tool supply-chain attacks
Anthropic's Claude Code VS Code extension was backdoored on Cursor's marketplace for ~12 hours affecting up to 5,000 developers, while researchers separately disclosed critical unpatched vulnerabilities in Cursor, GitHub Copilot, Claude Desktop, VS Code, and OpenAI Codex enabling code execution and data theft.
#4 · security · scored 8/10
Wave of critical security incidents
A single week saw the eMudhra CA compromise, PHP RCE vulnerabilities affecting 70% of websites, an actively exploited Drupal Commerce authorization bypass (CVE-2026-118539), a Railway secrets leak, a TiDB breach exposing 10TB of data from Booking.com and Airbnb, and a Trezor hardware wallet supply-chain implant — collectively representing an unusually severe security week.
#5 · security · scored 8/10
Azure cross-tenant compromise vulnerabilities
A security researcher disclosed five critical cross-tenant compromise vulnerabilities in Azure Logic Apps API Connections — granting full backend access including Key Vaults and SQL databases across tenants — earning $200,000 in bounties and exposing a major architectural flaw in a widely-used Azure service.
#6 · platform · scored 8/10
AI capex boom faces Wall Street skepticism
Amazon's Andy Jassy announced $220B in 2026 capex and forecast AWS reaching $1 trillion in annual revenue within 10 years, while Wall Street grows anxious about the $740B+ combined capex of Alphabet, Amazon, Meta, and Microsoft amid negative free cash flow, mounting debt, and Google's search revenue growth slowing to 12% as AI Mode cannibalizes ads.
#7 · industry · scored 8/10
Chinese state hackers deploy AI-powered attacks
CrowdStrike reports Chinese state-sponsored group Vapor Panda used an AI-powered multi-agent penetration framework (ARTEX, built on DeepSeek) to orchestrate intrusions against 200+ targets including U.S. defense and semiconductor firms, demonstrating that agentic AI is actively scaling nation-state attack operations.
#8 · ai · scored 8/10
Intel stock crash on PC weakness
Intel's stock fell 25-28% after reporting weak Q3 earnings — PC chip revenue down 9% quarter-over-quarter and gross margins contracting to 37% — wiping $12B from the U.S. government's stake, even as data center/AI revenue grew 78%.
#9 · industry · scored 7/10
GM $220M driver data privacy settlement
General Motors agreed to pay $220 million to 36 states after selling Smart Driver geolocation and driving behavior data to insurance brokers without clear user consent, building on a prior FTC settlement that prohibited data sharing for five years.
#10 · industry · scored 7/10