June 10, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
Anthropic launches Claude Fable 5 and Claude Mythos 5
Anthropic has released Claude Fable 5 as its most capable widely available model, alongside Claude Mythos 5 for Project Glasswing participants. Both models support a 1M token context window, 128k max output tokens, and always-on adaptive thinking.
OpenAI confidentially files for IPO and plans ChatGPT superapp overhaul
OpenAI has confidentially submitted a draft S-1 to the SEC with no set timeline for going public, preserving the option while weighing the tradeoffs of remaining private. The company is simultaneously planning a major ChatGPT redesign into a superapp focused on AI agents and coding tools to attract enterprise clients ahead of its eventual listing.
Apple introduces Siri AI powered by Google Gemini architecture
Apple announced a long-delayed Siri upgrade, rebranded as "Siri AI," featuring a more conversational assistant coming in fall OS releases. The new architecture runs Apple Foundation Models co-developed with Google both on-device and on Apple's Private Cloud Compute infrastructure.
NAVER expands AI infrastructure to gigawatt scale with NVIDIA
NAVER announced plans to scale its sovereign AI infrastructure from 55MW to gigawatt levels using NVIDIA's DSX platform, starting with its GAK Sejong data center in South Korea. The partnership is designed to accelerate the design and deployment of full-stack AI factories.
Xiaomi's MiMo-V2.5-Pro-UltraSpeed runs 15x faster than ChatGPT and Claude
Xiaomi and inference partner TileRT built a 1-trillion-parameter model that delivers 1,000 tokens per second on a standard 8-GPU commodity node. The speed comes from FP4 quantization on expert layers and DFlash speculative decoding.
Security
Hackers compromised Microsoft's open source tools to steal AI developer credentials
Microsoft took down roughly 70 GitHub-hosted open source projects after malware was discovered in tools tied to Azure, Claude Code, Gemini's CLI, and VS Code. Attackers used the infected packages to capture passwords and credentials whenever developers opened the tools.
VS Code adds 2-hour extension update delay to limit supply chain attacks
Microsoft now delays automatic VS Code extension updates by two hours, with trusted publishers like Microsoft, GitHub, and OpenAI still updating immediately. The cooldown mirrors similar controls already present in Bundler, Bun, npm, pnpm, and Yarn.
Patched Cursor vulnerability allowed remote code execution via indirect prompt injection and sandbox breakout
Researchers found a now-patched flaw in the Cursor editor that let an attacker execute code on a victim's machine with no user interaction beyond opening a repository. The attack combined a sandbox breakout from a parser bug in Cursor's shouldBlockShellCommand with indirect prompt injection.
Dashlane explains how attackers downloaded encrypted password vaults
Attackers abused Dashlane's device-enrollment APIs to brute-force one-time 2FA codes, successfully registering new devices on fewer than 20 accounts and downloading their encrypted vaults. The vaults remain protected by Argon2-hardened master passwords, making cracking them difficult.
Free smart TV apps secretly turn devices into AI proxy exit nodes
Include Security disclosed that Bright Data's SDK, embedded in free Samsung, LG, and Roku apps from partners including PlayWorks Digital and Viber, silently converts connected TVs into residential proxy exit nodes with a 200 GB monthly cap. An ignore_screen_on:true flag is used to hide the activity from users.
Dev
Microsoft ships MXC sandbox and open-sources OpenClaw agent runtime at Build 2026
Microsoft unveiled MXC, a platform-agnostic OS-level sandbox for running untrusted and agentic code, at Build 2026. It also open-sourced the OpenClaw runtime powering its always-on work agent Scout, while monetizing the surrounding control plane covering identity, governance, and enterprise management.
IT
Google to pay SpaceX nearly $1 billion a month for data center capacity
Google will pay SpaceX $920 million per month from October 2026 to June 2029 to rent data center capacity backed by 110,000 Nvidia chips. xAI's new hosting deals with both Anthropic and Google are making the company look more like a data center REIT than a frontier AI lab.