The 10 biggest things in tech, Mon, Nov 2
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Record crypto heist hits Binance
The FBI attributed a record $6.43 billion theft from Binance to North Korea's TraderTraitor group, with Binance resuming phased withdrawals after recovering 95% of stolen assets and committing to absorb all losses without passing costs to users.
#1 · security · scored 8/10
Critical LXD/MicroCloud auth bypass
Canonical patched a CVSS 10.0 flaw (CVE-2026-112816) in LXD and MicroCloud that allows attackers to impersonate trusted clients over mTLS without possessing the private key, requiring urgent upgrades across multiple LXD and MicroCloud versions.
#2 · security · scored 8/10
AI accelerates software vulnerability discovery
AI models are fundamentally reshaping the vulnerability landscape — speeding zero-day discovery at a pace that broke PostgreSQL 19's release schedule (60% more back-patches, multiple feature reverts) and, per speculative analysis, could collapse median exploit time to one minute by 2027, putting open-source maintainers under unsustainable pressure.
#3 · ai · scored 7/10
Supply-chain and third-party script attacks
Attackers compromised DebugBear's RUM script via DNS hijacking to steal $2.7M from 726 Polymarket traders, while a separate supply-chain attack used a legitimate Patch My PC installer to deliver undocumented NetamLoader malware to Asian government systems, and Trigger.dev disclosed an incident exposing customer environment variables — three distinct incidents reinforcing supply-chain risk as a dominant attack vector.
#4 · security · scored 7/10
Linux kernel 7.4 AI contribution surge
Linus Torvalds announced Linux kernel 7.4 RC with ~20,000 commits — well above the typical 15,000 — crediting AI-driven patch contributions and describing a new, 'much healthier' model where AI-generated fixes integrate into normal development rather than post-release stabilization.
#5 · ai · scored 7/10
AI hallucinations cause real-world harm
Across multiple domains — hiking (Mount Shasta rescues, Grand Teton incidents), gaming (AI-generated fan wikis flooding search results with false information), and agent benchmarks (swarms devolving into bureaucracy in Minecraft) — AI systems are demonstrating a consistent pattern of plausible but dangerous or useless output at scale.
#6 · ai · scored 6/10