Daily Briefing

[Daily Briefing] 🏭 TSMC bets $265bn, 🛡️ an 11-byte killer, 🔬 DNA on a chip

18 July 2026

TSMC is spending $265 billion on the assumption the AI boom is real

TSMC said it will put another $100 billion into its Arizona manufacturing sites, taking its total committed investment there to roughly $265 billion. The same week, it reported quarterly revenue and profit that comfortably beat estimates, with sales up 36% year on year and June revenue alone hitting about NT$442 billion, a 67.9% jump on last year. If you make the chips that every AI company is queuing for, business is good.

What makes this interesting is the timing. Semiconductor stocks have been having a rough month. Intel is down more than 20% since the start of July, and Wall Street has spent several weeks openly asking whether the AI capital spending spree is sustainable or whether we are watching a very expensive round of musical chairs. So you have the market pricing in doubt while the company with the best view of actual order books commits another $100 billion to concrete and lithography machines.

The Arizona money is not only about wafer output. A meaningful chunk goes to advanced packaging, the unglamorous step where chips get stitched together into the modules Nvidia actually ships. Packaging has been the real bottleneck for AI hardware for a while now, and having it on the same continent as the customers cuts weeks of logistics out of the process.

Why it matters: TSMC's capital expenditure is the closest thing the industry has to an honest signal. Marketing decks are free, but a fab is a multi-year, multi-billion-pound bet you cannot quietly walk back. When the market says one thing and the supplier's chequebook says another, the chequebook is usually worth more attention. That said, fabs take years to come online, so this tells you what TSMC believes about 2029, not about next quarter.

Quick hits

Eleven bytes can take down an OpenSSL server. A flaw nicknamed HollowByte lets an unauthenticated attacker knock over OpenSSL servers with an 11-byte payload. No credentials, no clever chain, just a very small packet in the wrong place. Our take

CISA added another SharePoint bug to its exploited list. CVE-2026-58644 is a critical deserialisation flaw allowing remote code execution, and federal agencies had until 19 July to patch. That is the second SharePoint emergency this month. Our take

Ernst & Young breached through a support ticket system. Not EY's own systems, but a third-party tool its IT staff used. The supply chain keeps proving that your security is only as good as the least interesting vendor you have signed up with. Our take

A particle detector that is basically one glowing block. PLATON replaces millions of fiddly detector components with a single block of light-producing material, a light-field camera and AI that reconstructs particle paths from the glow. Fewer moving parts, less to break. Our take

A silicon chip that writes DNA with electricity and water. Researchers built a chip that synthesises dozens of DNA sequences at once using electricity and water-based enzymes, skipping the harsh solvents conventional DNA manufacturing relies on. Cheaper synthetic biology starts with boring plumbing like this. Our take

Tool of the day: Syncthing

An honest take: Syncthing is free, open source, and syncs folders directly between your own devices with no cloud in the middle and no account to sign up for. If you have ever wanted Dropbox without the subscription or the question of whose servers your files are sitting on, this is it.

The caveat is real though. Setup asks more of you than Dropbox does, there is no web interface for grabbing a file from a device you left at home, and if all your machines are switched off, nothing syncs, because there is no server. It suits people with a couple of always-on devices and a mild allergy to subscriptions. If you want something that just works on a phone you use once a week, stick with what you have.