Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

ANTHROPIC SUES PENTAGON OVER ‘SUPPLY CHAIN RISK' LABEL

Anthropic has filed two lawsuits against the Department of War to change the Pentagon's decision to label it a 'supply chain risk'. One of the lawsuits is in the US District court in the Northern District of California, and the other is in the US Court of Appeals for the District of Columbia Circuit. The supply chain risk designation is typically applied to firms that are deemed a major national security risk and has never been used on an American company. Anthropic has offered to continue negotiating with the Pentagon and also offered to help move the Pentagon off its technology and onto another AI system. OpenAI and xAI have signed agreements to provide technology on the Department of War's classified systems in recent weeks.

PROMPTFOO IS JOINING OPENAI

Promptfoo has agreed to be acquired by OpenAI. It will remain open source and continue to serve users and customers. The company was founded in 2024 to make it easy for developers to systematically test AI applications. It is joining OpenAI so that the security, evaluation, and compliance platform can have the greatest impact on how teams build and deploy AI. OpenAI will improve and integrate Promptfoo's core tech within its model and infrastructure layers so that teams can catch vulnerabilities early and ship secure AI from the beginning.

THE STORY OF PYTHON'S LAZY IMPORTS: WHY IT TOOK THREE YEARS AND TWO ATTEMPTS

Python suffered from slow startup times for a long time due to eager imports of heavy libraries. An initial proposal, PEP 690, aiming for global lazy imports, was rejected by the Python Steering Council over fears of splitting the ecosystem and deep interpreter modifications. Three years later, a re-envisioned proposal, PEP 810, gained unanimous acceptance by introducing an explicit `lazy` keyword for individual imports.

CRITICAL NGINX UI FLAW CVE-2026-27944 EXPOSES SERVER BACKUPS

CVE-2026-27944 (CVSS 9.8) in Nginx UI exposes the unauthenticated `/api/backup` endpoint, which leaks the AES-256 encryption key and IV via the `X-Backup-Security` response header, enabling full backup decryption without credentials. Successful exploitation yields admin credentials, session tokens, SSL private keys, Nginx configurations, and database secrets, giving attackers complete control over the management interface and mapped infrastructure. A PoC is available. Organizations should restrict management interfaces to private networks or VPNs and apply IP allowlisting and MFA.

BITCOIN RISES AS OIL SPIKES, EQUITIES DROP

Bitcoin rose 2.8% during European trading hours even as US equity futures fell more than 1.5% and oil increased to $115 per barrel amid the Iran conflict and supply disruptions through the Strait of Hormuz. Analysts noted that while BTC has yet to fully earn its digital gold narrative, its practical use case as a digital escape hatch is becoming increasingly relevant, particularly in Gulf countries, amid episodes of currency volatility and political uncertainty, highlighting Bitcoin's resilience to oil shocks and geopolitical risks.

APPLE POSTPONES SMART HOME DISPLAY LAUNCH AS IT WAITS FOR NEW AI AND SIRI

Apple's smart home display has been delayed until later this year. The project was first scheduled to launch in the spring of 2025, but it was postponed to let the company finish work on a new Siri digital assistant. It was then scheduled to be released this month, but the new Siri is still not yet ready. The display is designed to be a central AI hub for the home that can display personalized data, such as calendar appointments, reminders, notes, and more.

CHINA LEADS THE HUMANOID ROBOT RACE — BUT THE US STILL HAS A SHOT

China's humanoid robots now dominate the market with over 90% of global sales and thousands of units shipped last year. Tesla's Optimus robots still won't be ready for launch until at least next year. While Chinese vendors are more advanced when it comes to production scales, US companies are very strong at the technical side of things, especially in the hardware and software departments. By the time humanoid robot startups build up their production bases, they will be ready for large-scale deployment.

CODE REVIEW, A NEW FEATURE FOR CLAUDE CODE

Code Review is a new feature for Claude Code that dispatches a team of agents on every PR to catch bugs. Built for depth, not speed, the system is now in research preview for Team and Enterprise. Anthropic runs Code Review on nearly every PR. The tool doesn't approve PRs, but it closes the gap so reviewers can cover what's shipping. Reviews are billed on token usage, and admins have several ways to control spend and usage.

TLDR IndexPage 1