The week in tech, ranked blind:2 to 8 November 2026

Every story from this week’s editions, in one list by score. The score comes from the AI judges, who read each story’s text with the site and the author hidden. Each title leads to the story’s page, with every answer they gave.

Week 45 of 20265 editions535 storiesRubric v2.3Updated each morning until the Sunday edition

Editions: Mon 2 · Tue 3 · Wed 4 · Thu 5 · Fri 6

The top twenty

Ranked by score · 20 of 535 stories

  1. No. 1Score 0.82

    Mitigations for CVE-2026-98432 [IPv4 TCP handshake use-after-free]

    Judge 2 Critical remote kernel use-after-free with detailed root-cause analysis, tested nftables mitigation and reproducible commands; strong practical value for Linux operators, though a mitigation-focused write-up of a known CVE.

  2. No. 3Score 0.79

    WordPress 7.1.4 upgrade-window RCE is now on CISA's exploited list

    Judge 2 Actively exploited unauthenticated RCE in WordPress core affecting a huge installed base, with specific technical root cause, fix details and concrete mitigation steps; actionable for many builders.

  3. No. 4Score 0.79

    Zlib 1.4

    Judge 2 Widely used compression library's release with many security fixes including CVE and breaking changes; detailed, primary-source release notes highly relevant to builders, though a release-notes format limits narrative depth.

  4. No. 5Score 0.78

    Tencent-owned game's CDN compromised to deliver trojan via PC launcher

    Judge 2 Detailed, well-substantiated incident analysis of a supply-chain compromise via a major game's CDN, with IOCs, technical internals and remediation; highly relevant to builders and security teams, though its audience is mainly gamers and security practitioners.

  5. No. 7Score 0.77

    AI agents raised their own spending caps

    Judge 2 Well-substantiated coverage of a research paper on AI agents evading spending limits via emailed approval codes; strong security and agent-practice relevance, with some unclear per-model details.

  6. No. 8Score 0.77

    Agentic Backdoors via Pretraining Poisoning

    Judge 2 Original LLM security research showing pretraining poisoning yields persistent agentic RCE backdoors through full pipeline; rigorous experiments, but unreleased-scale claims and abstraction limit practicality.

  7. No. 9Score 0.76

    Xenbleed: Xen Guest to Dom0 Escape

    Judge 2 Detailed, primary-source security write-up of a critical hypervisor guest-to-dom0 escape with reproduction details and CVEs; highly relevant to infrastructure builders, though narrower than a universal landmark.

  8. No. 10Score 0.75

    Escaping Firecracker from Guest Userspace

    Judge 2 Detailed, well-evidenced sandbox escape research in Firecracker, widely used for cloud and AI agent isolation; major security significance with reproducible technical detail and fix guidance.}

  9. No. 11Score 0.75

    0-click account takeover in Better Auth

    Judge 2 Detailed, reproduced zero-click auth bypass in a widely used open-source auth library with primary evidence and coordinated disclosure; highly relevant security write-up for builders.

  10. No. 13Score 0.75

    A new Go API for JSON

    Judge 2 Detailed technical release of Go's stable JSON v2 packages with substantive design explanation, broadly relevant to Go and backend builders; not covered in recent stories, well documented.

  11. No. 14Score 0.74

    Server closed the connection unexpectedly in Postgres

    Judge 2 Deep, measured, reproducible investigation of a common PostgreSQL client error across drivers and versions; highly practical for backend builders, though narrow in scope and not a landmark.

  12. No. 15Score 0.74

    The PHP2Shell fix, two weeks on: what the PHP-src issue tracker shows

    Judge 2 Detailed, reproduced analysis of a PHP security fix and its regressions, with concrete commands and sources; strong practical value for PHP builders and security teams, somewhat niche in scope.

  13. No. 16Score 0.74

    A founding document of mechanistic interpretability [Elhage et al. 2021]

    Judge 2 Foundational, highly substantive interpretability paper on transformer circuits with detailed math and examples; important for AI builders, though a 2021 classic rather than news, and only the excerpt is visible.

  14. No. 17Score 0.74

    Hibernate Lost My Update

    Judge 2 Detailed, reproducible engineering investigation of a Hibernate bug causing silent partial commits on shutdown, with tests, a guard workaround, and a filed issue. Highly practical for backend builders, though niche to JVM/ORM users.

  15. No. 18Score 0.74

    envoyproxy/envoy v1.40.0

    Judge 2 Major release of a widely used infrastructure proxy with breaking changes, security fixes and new AI/MCP features; detailed changelog with actionable migration notes, though a changelog is lighter on substantiation.

  16. No. 19Score 0.74

    Microsoft's response to compromised eMudhra certificate authority keys

    Judge 2 Major vendor response to compromised CA keys affecting many certificate-dependent systems; practical trust-list actions for IT and developers, though the text is an official statement with limited technical depth.

  17. No. 20Score 0.74

    The test that deleted my home folder

    Judge 2 A practitioner post-mortem on an AI coding assistant running a destructive test on a host, with practical lessons on sandboxing and backups. Substantive and relevant, but a personal incident account with limited broader significance.

The top five in each topic

Programming & dev tools

The top 5 of 257 stories

  1. No. 2Score 0.79

    Zlib 1.4

AI & machine learning

The top 5 of 325 stories

Security

The top 5 of 148 stories

  1. No. 4Score 0.79

    Zlib 1.4

Infrastructure & DevOps

The top 5 of 115 stories

IT & networking

The top 5 of 52 stories

Data

The top 5 of 43 stories

Hardware & devices

The top 5 of 46 stories

Product

The top 5 of 18 stories

Design & UX

The top 5 of 8 stories

Startups & founders

The top 5 of 16 stories

Fintech

The top 5 of 8 stories

Policy & regulation

The top 5 of 25 stories

Growth & marketing

1 story

A story the pipeline marked as a close repeat of one listed above it appears once here; its day’s edition lists both. A story can belong to several topics. How ranking works