Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

Conceptual scene of a remote connection bypassing a broken authentication latch and reaching a protected computer interior almost immediately, representing a macOS Screen Sharing flaw that can grant unauthenticated attackers root access.
AI-generated editorial illustration

MACOS SCREEN SHARING BUG HANDED HACKERS ROOT, NO PASSWORD

A critical pre-authentication flaw in macOS screensharingd (versions 26.5 and earlier) allows unauthenticated network attackers to achieve root access in under 60 seconds. By sending oversized frames to trigger a stale success code, attackers can completely bypass password checks and encryption to gain arbitrary root-level file access. Users must update to macOS 26.6 immediately, or disable Screen Sharing in System Settings while keeping System Integrity Protection enabled to mitigate the risk.

HOW WE BUILT A SOFTWARE FACTORY TO DRIVE ASTRO'S GITHUB ISSUE COUNT TO ZERO

Astro handed more than 200 open GitHub issues to four agents that separately reproduce, diagnose, verify, and fix each report. The backlog is now around 30, and the team expects to reach zero for the first time in Astro's five-year history. The four-agent split matters more than the agent count. No agent owns an issue from start to finish. Each leaves evidence for the next one, GitHub labels hold the state, and the original reporter tests a preview package before a pull request opens.

SAMSUNG REVEALS NEW 3D-MEMORY ROADMAP, BETTING ON STACKING MEMORY DIRECTLY ATOP AI CHIPS

At FMS 2026, Samsung unveiled zHBM, a concept architecture that vertically stacks HBM directly on top of an AI accelerator instead of placing it alongside the chip, shortening the distance data travels and targeting roughly 8x the performance of next-gen HBM5 alongside more than 10x the memory density, using advanced wafer-bonding technology. Samsung also showed zNAND-O, an edge-AI-focused NAND design combining high space efficiency with low latency, and V10 BV-NAND, a bonding-based V-NAND architecture breaking past 400 layers for the first time, a roughly 58% density jump over its prior generation.

A UNIFIED API FOR AI MODEL ROUTING

Model routing on the Google Cloud API Gateway is now available in public preview. The API gateway provides a lightweight, serverless ingress layer that accepts OpenAI-compatible requests and dynamically routes them to Gemini, Claude, or OpenAI OSS-GPT. It can be used standalone for simple rate limiting and token tracking or paired seamlessly with the Gemini Enterprise Agent Platform. This article contains a step-by-step guide on how to configure router logic.

GOOGLE PAUSES AI SATELLITE IMAGES, AFTER FEARS OF DEEPFAKES IN THE SKY

Google has removed a newly launched Google Earth feature that let users generate AI satellite images, citing screenshots violating its policies. Open-source researchers and journalists had shown the tool could produce convincing fake imagery of disasters, like fires on Iran's Kharg Island or Capitol flooding, raising misinformation concerns. Experts warned such tools threaten satellite imagery's role as a trusted verification source, especially as fake satellite images had already circulated during the US-Israel-Iran conflict.

GATEWAY API V1.6: TCPROUTE AND UDPROUTE GRADUATE TO STANDARD

Kubernetes Gateway API v1.6.0 shipped with its biggest change being the graduation of TCPRoute and UDPRoute from experimental to standard, giving workloads like databases, DNS, and VoIP a portable routing model at layer 4. The release also introduces XBackend, a new experimental resource in the separate gateway.networking.x-k8s.io API group that acts as a decorator for Service backends and adds support for ExternalHostname destinations. Going forward, all new experimental resources will live in that separate group with an X prefix in their type names, making the experimental versus standard boundary visible at the API group level rather than through version strings.

RENEWED PUSHES TO ADD PREDICTION MARKETS PROVISION TO CLARITY ACT

At a Senate Indian Affairs Committee roundtable, Indian Gaming Association VP Tehassi Hill urged lawmakers to amend the Clarity Act to bar sports and casino gambling via prediction markets and affirm state/tribal jurisdiction over the CFTC, with Senator Tina Smith suggesting similar language could be added to the Farm Bill. CFTC Chair Michael Selig has argued the agency has exclusive jurisdiction over prediction markets and sued several states, while platforms like Polymarket and Kalshi favor CFTC oversight. Senate Agriculture Chair John Boozman said he's sympathetic but doesn't think the amendment belongs in Clarity, calling it a separate issue from crypto.

TIME HAS STARTED SERVING ADS TO AI AGENTS

More bots than people visit Time on most days now. So it started selling ads to the bots. Every article gets a stripped-down markdown twin with one sponsored FAQ telling crawlers what a brand wants them to know. Ally Bank and the Project Management Institute are among the first buyers. Time charges more than it does for a human ad because an answer engine could repeat the message across thousands of answers. The catch is that nobody knows whether models will absorb it, ignore it, or treat the whole page as cloaking.

LONELY PLANET: WHY ARE WE ADDICTED TO THE SOCIAL MEDIA SCROLL WHEN IT IS SO CLEARLY HARMING US?

People keep scrolling because social media exploits a tension between connection and loneliness. While feeds create the feeling of being connected through endless updates, curated lives and online communities often leave people feeling more isolated and inadequate. The scroll is reinforced by FOMO, habit and the search for belonging, even when it worsens feelings of emptiness. Many users stay because these platforms offer brief moments of connection and entertainment, despite the emotional cost of constant comparison and digital dependence.

TLDR IndexPage 1