TeamPCP’s Massive Supply Chain Blitz

The hacking group TeamPCP has executed an unprecedented series of supply chain attacks, compromising over 3,800 internal GitHub repositories and hundreds of other organizations including OpenAI. The breach was triggered by a single employee installing a poisoned VS Code extension, highlighting a critical security blind spot in developer workstation tooling.

Linux Kernel’s 9-Year-Old Root Flaw

A vulnerability (CVE-2026-46333) that existed undetected since 2016 allows local attackers to execute arbitrary commands as root and steal sensitive files like /etc/shadow on major distributions including Ubuntu, Debian, and Fedora.

xAI’s $40B Compute Monetization Deal

Anthropic will pay xAI $1.25 billion per month through 2029 to use the Colossus 1 data center. The deal, revealed in SpaceX’s IPO filing, suggests xAI overbuilt its capacity as Grok usage declined, turning a competitor into a primary revenue source.

Google’s Botched Chromium Exploit Leak

Google prematurely published exploit code for a Chromium vulnerability that has remained unpatched for 42 months. The flaw allows websites to turn millions of devices into a botnet for DDoS attacks and user monitoring, affecting Chrome, Edge, and Brave.

Microsoft Defender Zero-Days in the Wild

Microsoft is patching two zero-day vulnerabilities in Defender that are being actively exploited. One allows attackers to gain SYSTEM privileges, while the other can trigger denial-of-service states on Windows devices.

Local AI Video Indexing at Scale

A developer successfully indexed a year of raw video footage locally using a five-year-old M1 Max MacBook, proving that local 31B-parameter models can replace expensive cloud AI for bulk semantic indexing of personal archives.

Seattle’s Private Surveillance Network

An investigation revealed ‘Seattle Shield,’ a secretive network where the Seattle Police Department shares intelligence with private companies like Amazon and Facebook. The system is used to monitor protests and report ‘suspicious activity,’ effectively creating a private-sector informant apparatus.