The Daily Index — Friday, December 19, 2025 · TLDR Index

Across today’s newsletters

Today’s Index

TLDR

TIKTOK SIGNS AGREEMENT TO CREATE NEW US JOINT VENTURE, MEMO SAYS

TikTok's US operations will soon be housed in a new joint venture named TikTok USDS Joint Venture LLC. The company has signed agreements with Oracle, Silver Lake, and Abu Dhabi-based MGX. The deal's closing date is on January 22. Oracle will serve as the 'trusted security partner' in charge of auditing and validating that TikTok complies with agreed-upon national security terms.

cnbc.com · 3 min

TLDR AI

OPENAI'S NEW FUNDRAISING ROUND COULD VALUE STARTUP AT AS MUCH AS $830 BILLION

OpenAI is in the early stages of a fundraising round that could raise as much as $100 billion, valuing the startup at as much as $830 billion. It aims to complete the round by the end of the first quarter at the earliest. It is unclear whether there will be sufficient investor demand to reach the goal. The round will be one of the biggest tests OpenAI has faced since the public market's exuberance for AI spending waned.

links.tldrnewsletter.com · 4 min

TLDR Dev

HOW WE PWNED X (TWITTER), VERCEL, CURSOR, DISCORD, AND HUNDREDS OF COMPANIES THROUGH A SUPPLY-CHAIN ATTACK

Daniel, a 16-year-old hacker, along with friends, uncovered supply-chain vulnerabilities in Mintlify, an AI documentation platform used by many top companies. Daniel specifically found a cross-site scripting (XSS) vulnerability that allowed malicious scripts to be injected into documentation through SVG files, exploiting Mintlify's internal file fetching. This flaw had a widespread impact, affecting major customers like Discord, X (Twitter), Vercel, and Cursor, but Mintlify quickly fixed the issue once the hackers notified it.

gist.github.com · 7 min

TLDR InfoSec

TWO CHROME FLAWS COULD BE TRIGGERED BY SIMPLY BROWSING THE WEB: UPDATE NOW

Google patched two Chrome vulnerabilities exploitable via malicious web pages: a use-after-free in WebGPU (CVE-2025-14765) that enabled heap corruption, and an out-of-bounds read/write in the V8 JavaScript engine (CVE-2025-14766). Both flaws affect Chrome's 3.4 billion users and require no user interaction beyond visiting a crafted site. Update to version 143.0.7499.146 or later immediately.

malwarebytes.com · 3 min

TLDR Crypto

ETHEREUM FOUNDATION RESEARCHERS WARN OF STORAGE BURDEN

Ethereum's state only grows. It is getting harder and more expensive for nodes to store, serve, and sync. Centralization is a risk if only large operators can run full infra. There are three potential initial directions: State Expiry (prune inactive state with proof-based revival), State Archive (separate hot vs. cold state so node performance stays stable), and Partial Statelessness (nodes hold subsets while clients/wallets cache what they need).

links.tldrnewsletter.com · 3 min

TLDR

WARNER DEMANDS LARRY ELLISON'S PERSONAL GUARANTEE IN PARAMOUNT BID

Warner has urged shareholders to reject Paramount's hostile takeover bid due to concerns about the financing. Paramount is using an Ellison family trust to backstop the deal - Warner wants Larry Ellison to give a stronger personal guarantee that he is fully committed to the bid. Paramount isn't likely to raise its bid. Instead, it is engaging with shareholders and gathering feedback on its tender about what it needs to do.

links.tldrnewsletter.com · 6 min

TLDR

THE INSIDE STORY OF SPACEX'S HISTORIC ROCKET LANDING THAT CHANGED LAUNCH FOREVER

SpaceX launched the Orbcomm-2 mission on an upgraded version of its Falcon 9 rocket on December 21, 2015. That night, the company landed the first stage for the first time. This article tells the inside story of the landing, starting with the disintegration of a Falcon 9 rocket in June 2015, the first time a Falcon 9 had been lost in flight.

arstechnica.com · 60 min

TLDR

TRUMP COMMITS TO MOON LANDING BY 2028, FOLLOWED BY A LUNAR OUTPOST TWO YEARS LATER

President Donald Trump signed an executive order outlining NASA's policy objectives for the next three years a couple of hours after a judge formally swore Jared Isaacman as the agency's administrator. The executive order states that the country must pursue a space policy that will extend the reach of human discovery, secure the nation's vital economic and security interests, unleash commercial development, and lay the foundation for a new space age. There are no concrete plans to send humans to Mars in the document. There's also a lack of reference to space science. An overview of the contents of the executive order is available in the article.

arstechnica.com · 5 min

TLDR

INTRODUCING GPT-5.2-CODEX

GPT‑5.2-Codex is a version of GPT‑5.2 optimized for agentic coding. It features improvements in long-horizon work through context compaction, stronger performance on large code changes, improved performance in Windows environments, and significantly stronger cybersecurity capabilities. The model is now available in all Codex surfaces for paid ChatGPT users. OpenAI is working towards safely enabling the model for API users in the coming weeks.

links.tldrnewsletter.com · 9 min