June 11, 2026
Today's top tech stories, deduped across the newsletters I read and briefly summarized. Click a source to open the original article.
AI
Anthropic launches Claude Fable 5 and Mythos 5 with hidden safety guardrails
Anthropic released Claude Fable 5 for general use and Claude Mythos 5 for selected cyber defenders, featuring a 1-million-token context window and pricing at $10 per million input tokens. The models include silent safety mechanisms that degrade performance for competitors without notifying users, sparking debate about transparency.
Google backstops Anthropic's $35 billion chip lease deal
Google is guaranteeing payments across five data centers to underpin Anthropic's $35 billion chip lease, financial backing that had not previously been disclosed. The arrangement highlights the deepening business alliances between major tech companies in the AI sector.
Apple unveils Siri AI and new Google Gemini-based AI architecture at WWDC 2026
Apple introduced Siri AI at WWDC 2026, a rebuilt assistant that runs on Google Gemini models via Private Cloud Compute and can chain requests across messages, maps, calendar, and email in a single conversation. Security researchers warn that prompt injection via the inbox and sharing private context with third-party AI services create real attack surfaces.
Security
Critical Linux kernel flaw enables local root access — public exploits now available
CVE-2026-23111, a use-after-free bug in nf_tables, lets an unprivileged local user gain root and escape containers on systems with user namespaces enabled. Working exploits now exist for Debian, Ubuntu, and RHEL, making kernel updates an urgent priority for admins.
Check Point VPN zero-day actively exploited by Qlin ransomware group
CISA ordered federal agencies to patch a critical authentication-bypass vulnerability in Check Point VPN within three days after evidence of active exploitation emerged. The flaw affects gateways using deprecated IKEv1 configurations and has been linked to the Qlin ransomware gang.
Miasma worm hits 73 Microsoft GitHub repositories in supply chain attack
A Miasma variant compromised 73 Microsoft GitHub repos—mostly in Azure—taking key Actions like Azure/functions-action offline and breaking CI/CD workflows globally. Attackers had previously infected Microsoft's durabletask PyPI package with a modular cloud intrusion framework that steals secrets and credentials.
Hades cluster compromises 19 PyPI packages using Python startup hooks
Attackers gained publishing rights over 19 legitimate scientific and deep-learning PyPI packages and uploaded 37 malicious wheels that drop a hades-setup.pth file into site-packages, exploiting Python's path configuration hook to auto-execute malicious code at startup. The incident underscores persistent risks in open-source supply chains.
Microsoft patches roughly 200 vulnerabilities in June 2026 Patch Tuesday
Microsoft's June 2026 update fixes around 200 flaws, with nearly 40 rated critical across Windows, Azure, Office, Outlook, Exchange, and AI tools. CISA simultaneously added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog.
Dev
Apple WWDC 2026: iOS 27, foldable iPhone Ultra signals, and free AI for small developers
Apple announced iOS 27 with performance improvements, three new AI-powered photo editing tools, and developer APIs designed to support a foldable iPhone Ultra with dynamic screen sizes. Apple is also offering free access to Foundation Models running in Private Cloud Compute for developers with fewer than 2 million first-time App Store downloads.
PostgreSQL 19 Beta 1 available in Amazon RDS with native graph query support
Amazon added PostgreSQL 19 Beta 1 to the RDS Database Preview Environment so users can evaluate the upcoming release on a fully managed service. Highlights include native graph query support via SQL/PGQ, concurrent table repacking, and improved vacuum performance.
Web
Over two-thirds of Google searches now end without a click
68% of Google searches ended without a click in early 2026, up from 60% in 2024, driven by AI Overviews appearing on more than 20% of queries and cutting click-through rates by nearly 60%. The trend puts growing pressure on content marketers and SEO strategies.
Other
SpaceX AI1 satellite: 70-meter wingspan and 150 kW compute payload in orbit
SpaceX has detailed its AI1 compute satellite, which will deploy a 70-meter wingspan, carry a 150 kW peak compute payload, and feature an interchangeable hardware design that lets different chipmakers supply processors. SpaceX has already filed with the FCC to launch up to 1,000 such satellites.