Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

DENIAL OF SERVICE AND SOURCE CODE EXPOSURE IN REACT SERVER COMPONENTS

The React team has disclosed new high-severity Denial of Service (DoS) and medium-severity Source Code Exposure vulnerabilities in React Server Components. The DoS allows malicious requests to hang servers, while the exposure can leak hardcoded secrets from server functions, though neither enables Remote Code Execution. These issues are follow-ups to the recent React2Shell vulnerability. Previous patches (19.0.2, 19.1.3, and 19.2.2) were incomplete.

SECURITY FLAWS IN FREEDOM CHAT APP EXPOSED USERS' PHONE NUMBERS AND PINS

Two major flaws in Freedom Chat have been discovered: one allowed attackers to enumerate nearly 2,000 users' phone numbers by mass-guessing them against the app's servers, and another leaked users' PIN codes to everyone in the default public channel via backend responses. Freedom Chat reset all PINs, tightened rate limiting, removed exposed numbers, and shipped an updated version. This is founder Tanner Haas' second messaging app to face serious security issues.

FED ‘HAWKISH CUT' DECREASE CHANCES OF BTC SANTA RALLY

The Fed cut rates by 25 bps as expected, but paired it with cautious guidance as only one more cut is penciled in for 2026. The committee had its most dissents since 2018 (9-3 votes). Markets largely ignored the rate cut, with BTC dropping back to ~$90k and ETH below $3.2k as traders read the decision as a classic “hawkish cut” rather than the start of a dovish pivot. At the same time, the Fed will buy $40B in T-bills over the next month to keep reserves ample, adding a quiet liquidity tailwind even as Powell stresses data-dependence. Spot BTC ETFs continue to see healthy inflows (BlackRock added ~$193M on Tuesday), but retail selling and macro uncertainty are keeping price action range-bound instead of delivering the hoped-for Santa rally.

GOOGLE ANNOUNCES EXPERIMENTAL ‘DISCO' BROWSER WITH ‘GENTABS' POWERED BY GEMINI 3

Google Labs' Disco browser features a Gemini 3-powered 'GenTab' that can build interactive web applications to help users complete tasks. It can look at open tabs and chat history to determine what tool best serves a prompt. Every generative element ties back to the web and will link to the original sources. The most compelling ideas from Disco may one day make their way into Chrome. A link to the waitlist to try Disco is available in the article.

RIVIAN ANNOUNCES NEW AI TECH, CHIP, AND ROBOTAXI AMBITIONS

Rivian has developed a custom chip, a car computer, and new artificial intelligence models to bring autonomous features to its vehicles. The company plans to roll out a subscription in early 2026 that will provide continuously expanding capabilities powered by Rivian Autonomy Processors and autonomy computers. A near-future update will include a 'Universal Hands-Free' capability that will enable Rivian customers to drive hands-free on more than 3.5 million miles of roads in North America.

TLDR IndexPage 1