■ TOP STORY

GEMINI HITS THE ROAD: GM DEPLOYS AI TO 4M VEHICLES

Google's Gemini AI assistant is coming to approximately four million US vehicles across Cadillac, Chevrolet, Buick, and GMC model year 2022 and newer with Google built-in integration.

► WHY IT MATTERS: This marks a major shift in automotive AI adoption—consumer-grade LLMs are now embedded in mainstream vehicles, creating new revenue streams for both Google and automakers while raising questions about data collection in cars.

GOOGLE I/O: GEMINI TASKS, SMART GLASSES UNVEILED

Google announced significant Gemini updates focused on task automation and new smart glasses hardware at I/O 2026, signaling broader AI-driven automation capabilities.

► As Google pushes automation deeper into its product stack, the question of job displacement moves from hypothetical to immediate—tech professionals need to understand which roles are actually at risk.

CRITICAL GITHUB RCE COULD HAVE EXPOSED MILLIONS

Wiz Research discovered a critical remote code execution vulnerability in GitHub's internal git infrastructure that could have allowed attackers to access millions of public and private repositories; GitHub employees patched it in under six hours.

► A zero-day in GitHub's infrastructure threatens the entire developer supply chain—this incident demonstrates both the fragility of centralized dev platforms and the speed at which critical patches must move.

DISCORD ADDS E2E ENCRYPTION TO CALLS

Discord has deployed end-to-end encryption across its voice and video calling features, extending privacy protections to real-time communications on the social platform.

► As workplace communication increasingly shifts to consumer platforms, E2E encryption on Discord closes a gap for teams handling sensitive discussions outside traditional enterprise tools.

MINI SHAI-HULUD: DOZENS OF OSS PACKAGES BREACHED

A coordinated supply chain attack campaign called Mini Shai-Hulud has compromised multiple open source projects, affecting developers and companies downstream who depend on these packages.

► Open source dependency chains remain a critical weak point—developers using compromised packages can unknowingly distribute malicious code to production without detection.