The Daily Index — Tuesday, August 4, 2026 · TLDR Index

Across today’s newsletters

Today’s Index

A contained AI testing environment has several basic access-control gaps, allowing activity to spill into a database, a software distribution path, and external systems. — AI-generated editorial illustration

TLDR InfoSec

ANTHROPIC SAYS CLAUDE MODELS HACKED 3 ORGANIZATIONS DURING CYBER TESTS

A misconfigured internet-connected evaluation environment caused issues with Claude Opus 4.7, Claude Mythos 5, and an internal research model across three incidents identified in a review of 141,006 evaluation runs. Opus 4.7 retrieved production database rows after a fictional company's name coincided with a real one. Mythos 5 published a malicious PyPI package that was executed on 15 real systems, including a security vendor's scanner. Anthropic stated that these incidents did not require new exploits, but were due to weak passwords and exposed endpoints. They have halted evaluations, notified affected organizations, and are improving network isolation and vendor monitoring before resuming. Noma Security's CISO, Diana Kelley, emphasized that this should be viewed as a controls failure rather than an intent failure and recommends implementing isolation, least privilege, and kill switches for autonomous agent testing.

hackread.com · 3 min

TLDR IT

DATA CENTER APPROVALS IN TEXAS HALTED UNTIL AUDITS COMPLETED, GOV. GREG ABBOTT SAYS

Texas has paused approvals for new data centers seeking connections to the state power grid while regulators audit their electricity and water use, tax incentives, cooling systems, ownership and community impact. ERCOT has more than 1,800 large projects requesting 474 gigawatts of power, with data centers accounting for roughly 90% of the new demand.

texastribune.org · 6 min

TLDR InfoSec

CARECLOUD BREACH EXPOSES MEDICAL AND FINANCIAL DATA OF 345K

Health tech company CareCloud disclosed that data belonging to 345k people was stolen in a March data breach. The attackers breached CareCloud's AWS environment and exfiltrated data from databases over 6 days. The stolen data may include names, home addresses, SSNs, government ID numbers, bank account details, payment card numbers, and other PHI.

securityaffairs.com · 2 min

TLDR IT

PALANTIR EARNINGS WILL TEST THE REAL SHAPE OF ENTERPRISE AI

Palantir's upcoming earnings will reveal whether enterprise AI is becoming operational infrastructure rather than remaining trapped in pilots. Its rapid growth is driven largely by existing customers expanding usage and by forward-deployed engineers embedded in organizations, but that model also creates a sovereignty paradox: Palantir warns against dependence on AI providers while deepening customers' dependence on Palantir.

fastcompany.com · 8 min

TLDR Crypto

UNISWAP PROTOCOL REVENUE NEARLY TRIPLES AFTER V4 FEE SWITCH AS UNI TOPS $4

Uniswap's v4 fee switch, activated July 27, pushed daily protocol revenue from ~$114,000 to ~$325,000 within three days, directing those funds to UNI burns totaling ~$28 million since December. Robinhood Chain generated over half of 24-hour revenue at $170,353, with Ethereum contributing $81,866 (+82% week-over-week), Base $48,398, and Arbitrum $16,546. UNI rose 12% in 24 hours to ~$4.40, up 16% on the week, as governance approved the mechanism with 46.6 million UNI votes across seven chains. A technical dispute centers on LP impact: v4 charges traders 5 basis points on top of LP fees rather than extracting from LP earnings as v2/v3 do, but critics including Panoptic's Guillaume Lambert argue aggregator routing around costly pools will pressure LPs to lower fees to compete, absorbing the protocol cost regardless.

thedefiant.io · 4 min

TLDR AI

FORMER OPENAI EXEC FIDJI SIMO DISCUSSES HER BATTLE WITH POTS AND HER STARTUP'S PLANS TO CURE IT WITH AI AND 3,500 VIALS OF BLOOD

Fidji Simo left OpenAI's leadership team after a seven-year battle with Postural Orthostatic Tachycardia Syndrome (POTS). Her new startup, ChronicleBio, will focus on using AI to cure POTS and other chronic diseases. The company has collected 153 terabytes of data from blood draws from people with chronic diseases so far. It plans to launch home blood draws to further increase its dataset. ChronicleBio plans to use the data to learn more about diseases and improve the success of clinical drug trials.

finance.yahoo.com · 11 min

TLDR IT

MICROSOFT TESTS NEW MAI REALTIME VOICE MODEL

Microsoft appears to be testing MAI Realtime, its first native real-time voice model, through a hidden early-access listing in MAI Playground. The bidirectional system supports simultaneous listening and speaking, multilingual conversations, configurable turn-taking, two voices, and low-latency interruptions, but it is not yet announced for broad release. The model could eventually reduce Microsoft's reliance on OpenAI's GPT-Realtime for voice experiences.

testingcatalog.com · 2 min

TLDR

BASE POWER RAISES $1B TO ROLL OUT ITS GIANT NEW HOME BATTERY

Base Power's Core is a 39.2-kWh home battery that can keep a house running for up to 36 hours. Core, which can be installed in under an hour, can be connected to solar and has a built-in port for recharging from a portable generator. The lithium iron phosphate battery is designed to operate between -22F and 122F and has an IP67 rating for submersion in up to 3 feet of water. Core will only be available as part of a subscription service, and the company will retain ownership of the battery.

electrek.co · 3 min

TLDR InfoSec

THE XCODE ASSASSIN RETURNS: A DEEP DIVE INTO THE LATEST XCSSET VERSION

The latest iteration of the macOS malware XCSSET, version 40, uses supply chain tactics to propagate by hiding malicious run-script phases in legitimate Xcode projects. To maximize stealth, the malware employs a multi-layered polymorphic evasion stack that uses dual-key encryption and in-memory execution, while actively impairing macOS defenses by disabling security updates and locking XProtect signature databases. XCSSET v40 also introduces a novel fileless persistence mechanism that abuses the macOS defaults configuration system, along with new operational modules designed to hijack Google Chrome via the Chrome DevTools Protocol and deploy trojanized Telegram binaries.

unit42.paloaltonetworks.com · 16 min