The week in tech, ranked blind:26 October to 1 November 2026

Every story from this week’s editions, in one list by score. The score comes from the AI judges, who read each story’s text with the site and the author hidden. Each title leads to the story’s page, with every answer they gave.

Week 44 of 20267 editions748 storiesRubric v2.2, v2.3Final

Editions: Mon 26 · Tue 27 · Wed 28 · Thu 29 · Fri 30 · Sat 31 · Sun 1

The top twenty

Ranked by score · 20 of 748 stories

  1. No. 1Score 0.83

    Native addon camouflage: 42 armed GitHub repos reveal hidden NPM publisher

    Judge 2 Detailed supply-chain security investigation of npm and GitHub compromise with decoded payloads, IOCs and remediation; highly actionable and substantiated, though some attribution remains inferential.

  2. No. 4Score 0.80

    We Took over ChatGPT Accounts

    Judge 2 Detailed, well-substantiated engineering write-up of a cross-user account takeover chain in a major AI product; highly relevant to builders, with strong technical depth and new information, though the framing is somewhat dramatic.

  3. No. 5Score 0.78

    4 real? Tracking exploitation and patching of eMudhra’s weak keys

    Judge 2 Detailed, data-backed incident follow-up on a compromised CA with weak keys; major security impact and actionable patching guidance for builders, with substantial technical detail and largely unique information.

  4. No. 6Score 0.78

    Apple's git still trusts the compromised eMudhra certificates

    Judge 2 Concrete, actionable security advisory on macOS developer tools trusting compromised eMudhra CA certificates; well-evidenced with reproducible tests, though it is a follow-up to an ongoing incident and mostly relevant to security-minded builders.

  5. No. 10Score 0.77

    How the built-in browsers in five AI coding tools broke basic browser rules

    Judge 2 Detailed security research on AI coding tools' embedded browsers with reproducible exploit details, vendor patch status, and a practical grep-based detection method; mostly self-reported testing, some vendor claims unverified.

  6. No. 12Score 0.77

    North Korea Steals USD 6.36B from Binance in the Largest Hack in History

    Judge 2 Major security incident with strong onchain evidence and technical detail on EIP-7702 abuse and signing compromise; largely new relative to recent stories, though it is a crypto-industry event with narrower builder relevance in parts.

  7. No. 13Score 0.77

    Official Claude Code extension compromise

    Judge 2 Detailed technical incident analysis of a backdoored official IDE extension with IOCs and remediation; highly relevant to builders and security teams, strongly substantiated, and new relative to recent coverage.

  8. No. 16Score 0.76

    TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

    Judge 2 Critical Linux kernel TCP use-after-free with detailed fix, distro status, and mitigations; highly actionable security news, with a promotional consulting footer and a few sensational framing points.

  9. No. 17Score 0.76

    ChatGPT leaked users' data, and nobody hacked it

    Judge 2 Detailed, well-sourced post-mortem of a 2023 ChatGPT data exposure caused by a redis-py async cancellation bug; practical lessons for builders, though the incident is older and not new in the last-7-day list beyond the Garante follow-up.}

  10. No. 18Score 0.75

    Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers

    Judge 2 Detailed, technically specific exploit-chain write-up on widely used firewall software with vendor-verified claims; strong security relevance, though the vendor-sourced framing and attribution claims limit substantiation and add some promotional tone.

  11. No. 19Score 0.75

    Broccoli2Shell: The One Decoder We All Depend On

    Judge 2 Widely deployed Brotli decoder vulnerability with an actionable affected-package inventory. Substantiated by version ranges and upstream fix, though the exploitability detail is thin and the text is partly list-driven marketing-adjacent framing.

  12. No. 20Score 0.75

    When sandboxed agents talk through the CPU cache

    The panel Rated highest on technical depth (0.95) and reader interest (0.87), lowest on significance (0.71).

The top five in each topic

Programming & dev tools

The top 5 of 379 stories

AI & machine learning

The top 5 of 423 stories

Security

The top 5 of 248 stories

Infrastructure & DevOps

The top 5 of 138 stories

IT & networking

The top 5 of 65 stories

Data

The top 5 of 51 stories

Hardware & devices

The top 5 of 61 stories

Product

The top 5 of 14 stories

Design & UX

The top 5 of 6 stories

Startups & founders

The top 5 of 23 stories

Fintech

The top 5 of 6 stories

Policy & regulation

The top 5 of 41 stories

Growth & marketing

1 story

A story the pipeline marked as a close repeat of one listed above it appears once here; its day’s edition lists both. A story can belong to several topics. This week mixes rubric v2.2 and v2.3, and scores under different versions are not strictly comparable. How ranking works