Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

Four researchers branch from a large established institution toward a smaller new company while a continuing connection represents Google's promised computing support.
AI-generated editorial illustration

FOUR TOP GOOGLE AI RESEARCHERS FORM NEW START-UP

Jeff Dean, Sanjay Ghemawat, Quoc Le, and Oriol Vinyals have left Google to start a company called Discovery Loop. The team aims to build AI that can improve itself with little or no help from humans. Google plans to collaborate with the new startup and has agreed to provide the computing power it needs to build its AI technologies for at least the next year. Discovery Loop will operate as a public benefit corporation.

SHAI-HULUD NPM WORM RETURNS, POISONING OVER 1,280 NPM PACKAGES

A new Shai-Hulud worm variant has compromised over 1,280 npm packages, including the well-known Keyv library, by injecting malicious commits via hijacked GitHub Actions pipelines. The worm employs a preinstall hook to download Bun and run an obfuscated payload that aggressively extracts developer and cloud credentials such as AWS, Kubernetes, and Vault, which it then uses to spread further. Organizations that have installed affected versions should assume an immediate breach, requiring them to rotate all secrets immediately and perform manual log reviews, rather than waiting for scheduled vulnerability scans.

ARTISTS ARE LAWYERING UP AGAINST AI SLOP, AND SOME ARE EVEN WINNING

Illustrators, authors, and musicians are increasingly suing AI companies like Anthropic, Meta, Google, and Suno over unauthorized use of their work in training models. Some have already secured wins, notably a $1.5 billion settlement in the Bartz v. Anthropic case over pirated ebooks, though a judge ruled that training on legally acquired scanned books counted as fair use. Despite mixed rulings, several plaintiffs and lawyers say the legal and public-opinion tide is shifting toward artists, even as concerns persist about creators' long-term ability to earn a living from their work.

VISA TO ACQUIRE BIOCATCH FOR $2.4B

Visa agreed to acquire behavioral biometrics and fraud-prevention company BioCatch for $2.4 billion, strengthening its defenses against account takeovers, scams, and other AI-enabled financial crimes. The deal follows Visa's $1 billion acquisition of Featurespace and expands its value-added services with technology that analyzes behavioral, device, and network signals to distinguish legitimate users from fraudsters in real time.

THE AGENT ACCESS MODEL

The Agent Access Model (AAM) enhances enterprise security by redefining access control for software agents, focusing on task-specific and ephemeral credentials. By removing implicit trust in task execution graphs and evaluating every action against the task's state, AAM minimizes agent capabilities, thus reducing risk. Core principles include short-lived credentials, harness and network enforcement, minimal human oversight, evidence-based grant reviews, and unidirectional capability changes.

TLDR IndexPage 1