Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

PROMPT INJECTION INSIDE GITHUB ACTIONS: THE NEW FRONTIER OF SUPPLY CHAIN ATTACKS

PromptPwnd is a new vulnerability class that affects GitHub Actions and GitLab CI/CD pipelines that use AI agents like Gemini CLI, Claude Code, and OpenAI Codex. In this vulnerability, untrusted user input from issues, pull requests, or commit messages is injected into prompts, leading to the execution of privileged tools. The attack allows secret exfiltration by tricking AI agents into leaking GITHUB_TOKEN or cloud credentials through shell commands such as gh issue edit. Google's Gemini CLI repository was confirmed vulnerable before the patch. To mitigate this, organizations should restrict AI toolsets, avoid injecting untrusted input into prompts, treat AI output as untrusted code, and limit GitHub token permissions by IP.

AAVE DAO VS. AAVE LABS - TOKEN HOLDERS LOOK TO RECLAIM CONTROL

An AAVE token holder has proposed a radical escalation in Aave governance, using a “poison pill” lawsuit to transfer Aave Labs' IP, trademarks, and even equity to the DAO, effectively turning the for-profit developer into a DAO subsidiary. The move follows backlash over a CoW Swap integration that redirected frontend swap fees from the DAO to a private address, reigniting long-standing tensions over who controls Aave's brand, revenue, and protocol direction.

WARNER BROS. PLANS TO REJECT PARAMOUNT BID ON FUNDING, TERMS

Warner Bros. plans to reject Paramount's hostile takeover bid due to concerns about financing and other terms. The board will urge shareholders to reject the tender offer. It views the company's existing agreement with Netflix as offering greater value, certainty, and terms than what Paramount has proposed. While Warner Bros.' agreement with Netflix bars it from soliciting proposals from other bidders, it is allowed to entertain incoming proposals.

IF AI COULD INTERACT AND LEARN FROM THE PHYSICAL WORLD, COULD IT MAKE MORE SCIENTIFIC ADVANCES?

OpenAI partnered with Red Queen Bio to introduce a new evolutionary framework that uses GPT-5 to optimize cloning protocols. The project involved the pilot of an autonomous robot to carry out the protocols. GPT-achieved a 79x cloning efficiency gain and introduced a new enzyme-based approach. While this is not a bio breakthrough, the novel optimization shows that GPT-5 is at the level of a competent PhD student at this task.

TLDR IndexPage 1