THE DAILY BRIEF

OpenAI confirmed that two employees' devices were breached in the TanStack supply chain attack that impacted hundreds of npm and PyPI packages, forcing the company to rotate code-signing certificates as a precaution.

► Even high-security organizations can be caught in supply chain compromises, making dependency management a critical risk vector for all tech companies.

CISCO SD-WAN ZERO-DAY GIVES ADMIN ACCESS

Cisco disclosed CVE-2026-20182, a critical authentication bypass flaw in Catalyst SD-WAN Controller that was actively exploited in zero-day attacks to grant attackers administrative privileges on compromised devices.

► SD-WAN infrastructure is increasingly central to enterprise networks, making this active exploitation a high-priority patch for thousands of organizations worldwide.

The UK's Competition and Markets Authority launched a formal antitrust investigation into whether Microsoft's bundling of Word, Excel, Teams, and Copilot constitutes anti-competitive conduct.

► This marks the first major regulatory action against Microsoft's productivity suite integration strategy, potentially reshaping how tech giants can package software.

AI chip startup Cerebras raised $5.5 billion in its IPO and saw shares pop 108% on the first day of trading, marking the year's first major tech public offering after a period when such exits seemed unlikely.

► The explosive IPO signals investor appetite for specialized AI infrastructure plays, potentially unlocking capital for the broader AI chip ecosystem.