The Daily Index — Thursday, December 18, 2025 · TLDR Index

Across today’s newsletters

Today’s Index

TLDR

GOOGLE RELEASES GEMINI 3 FLASH, PROMISING IMPROVED INTELLIGENCE AND EFFICIENCY

Gemini 3 Flash is coming to the Gemini app, Search, the Gemini API, Vertex AI, AI Studio, and Antigravity. It offers better performance than Gemini 2.5 Pro while running workloads three times faster. Gemini 3 Flash will become the new default model in the Gemini and web interface. Google will be adjusting the free limits for Gemini 3 Pro, but it has yet to specify what the changes will be.

arstechnica.com · 4 min

TLDR AI

GEMINI 3 FLASH

Google has introduced Gemini 3 Flash, a fast, lightweight model designed to deliver frontier-level intelligence with lower latency. It's built to help users quickly learn, plan, and build across a range of everyday tasks and applications.

blog.google · 7 min

TLDR Dev

HOW SQLITE IS TESTED

SQLite has a thorough and multi-faceted testing process, with test code outweighing its core library. This includes four independent test harnesses that collectively run billions of test cases to verify functionality, cross-database compatibility, and resilience to malicious inputs. Specialized anomaly tests simulate and verify proper handling of out-of-memory conditions, I/O errors, and power loss.

sqlite.org · 36 min

TLDR InfoSec

ARCTIC WOLF OBSERVES MALICIOUS SSO LOGINS ON FORTIGATE DEVICES FOLLOWING DISCLOSURE OF CVE-2025-59718 AND CVE-2025-59719

Arctic Wolf observed active exploitation of critical Fortinet authentication bypass vulnerabilities (CVE-2025-59718 and CVE-2025-59719) starting December 12, just three days after Fortinet's disclosure. Attackers used crafted SAML messages to gain unauthenticated admin access to FortiGate devices with FortiCloud SSO enabled. Threat actors logged in via SSO from hosting provider IPs and immediately exfiltrated device configurations containing hashed credentials via the GUI. Organizations should promptly upgrade affected versions of FortiOS, FortiProxy, FortiWeb, and FortiSwitchManager, disable FortiCloud SSO as a workaround, reset all firewall credentials if compromise indicators are observed, and restrict management interface access to trusted internal networks.

arcticwolf.com · 9 min

TLDR Crypto

SEC SAYS BROKER-DEALERS NEED TO MAINTAIN CRYPTO PRIVATE KEYS

The SEC's Division of Trading and Markets indicate that a broker-dealer can treat itself as having possession/control when it has exclusive access to the private keys needed to transfer the token. It also requires written policies and systems to protect keys from theft, loss, or unauthorized use, plus preparedness for operational events like network attacks, blockchain malfunctions, and hard forks, and processes to comply with legal orders to freeze/burn/seize assets. Custodians must monitor protocol/governance developments and reduce exposure if there are material security or operational weaknesses.

links.tldrnewsletter.com · 3 min

TLDR

OPENAI OPENS CHATGPT TO THIRD-PARTY APPS AFTER REVIEW PROCESS

OpenAI has opened submissions for third-party apps inside ChatGPT. Developers can publish their tools directly to the platform following a review process. Apps will be positioned alongside existing built-in tools. The rollout is global. Monetization details have not been fully outlined yet.

testingcatalog.com · 1 min

TLDR

CONNECTOME PIONEER SEBASTIAN SEUNG IS BUILDING A DIGITAL BRAIN

Sebastian Seung, a neuroscience and computer science professor at Princeton University, was one of the researchers who helped create the first complete wiring diagram of a fly's brain. He has created a startup called Memazing to create the technology needed to reverse engineer the fly brain (and eventually more complex organisms) and create full recreations of the brain in software. The company's goal is to use an existing map of how nature has produced intelligence to create a new form of artificial intelligence. The startup is still in a very early stage and is in the process of raising funds, but the team has already begun work on the fly brain emulation and has started connecting a model to a simple robotics system.

corememory.com · 9 min

TLDR

NASA FINALLY—AND WE REALLY DO MEAN IT THIS TIME—HAS A FULL-TIME LEADER

Jared Isaacman, at 42 years old, is the youngest person to lead NASA. The agency has faced an extraordinarily difficult year. About 20% of the agency employees took buyouts or early retirements thanks to the Department of Government Efficiency. NASA is locked into a high-stakes race with China to return humans to the Moon, but the agency has to deal with an administration that sought to cut its budget by 24%.

arstechnica.com · 5 min

TLDR

2025 STACK OVERFLOW DEVELOPER SURVEY

Stack Overflow Developer Survey looks at the tools and technologies developers are currently using and the ones they want to use. This year's survey included questions about embedded technology tools and industry-sourced, community-vetted technology options. Python's adoption has accelerated significantly due to its ability to be the go-to language for AI, data science, and back-end development. Redis saw significant growth in usage, demonstrating the need for high-speed, in-memory caching and data structures. Docker is now a near-universal tool for cloud development. AI-enabled IDEs weren't able to topple the dominance of Visual Studio and Visual Studio Code - both have maintained the top spots for four years.

survey.stackoverflow.co · 17 min