You're listening to Tech Beat, your daily read on the stories shaping the digital world.
Apple's bug bounty program is drawing fire after a Milan-based startup says it discovered a full macOS takeover vulnerability using ChatGPT, only to be blocked from reporting it by a new submission cap. The flaw reportedly carried a two-hundred-thousand-dollar bounty, but the company hit Apple's limit before the filing ever went through. It raises a pointed question about whether AI-assisted security research is outpacing the systems designed to receive it.
Shifting to supply chain security, the popular NPM packages Keyv and Cacheable have been compromised in what researchers are calling a targeted hijacking attack. Both packages carry millions of weekly downloads, meaning the blast radius here is significant. Developers relying on either library are being urged to audit their dependencies immediately and watch for any unexpected behavior in downstream applications.
And in the chip race, China is making measured but notable progress on domestic lithography. A state-owned Shanghai manufacturer is on track to produce roughly five immersion DUV machines this year, with projections climbing to around twenty by two thousand twenty seven. News of the roadmap already knocked forty-four billion dollars off ASML's market value, a sign that investors are watching Beijing's semiconductor ambitions very closely.
That's your Tech Beat for today. Keep surfing. Tech Beat out.
