Open it on Monday and know what happened in tech last week in ten minutes. One issue a week, pulling from security advisories, cloud and open-source releases, AI and developer tooling, industry moves, EU regulation, and the Hacker News pulse. Not a Hacker News digest. The intelligence a technology leader needs to decide what to patch, what to evaluate, and what changed in cost, risk, or obligations.
Two unauthenticated RCE flaws hit PHP with exploits already circulating. A certificate authority's signing keys turned out to be small integers. A backdoored LiteLLM package and a Railway breach put secrets at risk, and the EU AI Act got its first binding standard.
Microsoft fixed more than 1,400 flaws in one month, including an exploited zero-day. A cyberattack pushed supermarket refrigeration into defrost mode across France. An AI coding tool leaked stored provider API keys, and Anthropic explained why it left Git.
A trusted third party ran millions of queries against Denmark's central population register, exposing most of the country. A Dutch regulator issued one of the largest GDPR fines yet over automated driver deactivation. Cloudflare bought Deno, and a one-click Telegram flaw surfaced.
Apple, Cisco and Fortinet all had actively exploited flaws added to CISA's catalog in one week. A Firebase SDK crashed apps worldwide while the vendor's status page stayed green. Anthropic shipped a stronger mid-tier model at the same price, and a German lab released a sovereign open model.
