Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

DESIGN FLAW IN GOOGLE WORKSPACE COULD LET ATTACKERS GAIN UNAUTHORIZED ACCESS

Google Workspace's domain-wide delegation feature has a severe design flaw dubbed DeleFriend that enables privilege escalation without admin access. Attackers could gain unauthorized Workspace API access for theft, exfiltration, and other unauthorized actions domain-wide. Successful exploitation of the flaw could allow exfiltration of sensitive data from Google services like Gmail, Drive, Calendar, and others.

SEC OPENS PUBLIC COMMENTS ON FRANKLIN TEMPLETON AND HASHDEX SPOT BITCOIN ETFS

The SEC is inviting public commentary on pending ETF applications from Franklin Templeton and Hashdex. This unexpected early request, coming two weeks after the SEC extended the decision deadline, suggests potential approvals in early January. However, swift approval might not necessarily mean immediate launches. The SEC is also seeking feedback on market manipulation susceptibility, liquidity, pricing mechanisms, and other concerns regarding the proposed ETFs.

TLDR IndexPage 1