Daily Edition · Page 9

THE DAILY INDEX

Technology, AI, software, security, crypto and business

GENERAL

TLDR Dev

THE DANGERS OF POSTGRES SUBTRANSACTIONS

Accumulating excessive subtransaction IDs in PostgreSQL can lead to performance issues across the cluster, affecting throughput and preventing new read replicas from accepting connections due to overflowed running transaction states. To mitigate these risks, it is recommended to keep transactions short and monitor subtransaction cache and activity, while potential solutions on the PostgreSQL side could involve increasing the cache size or implementing a new snapshot methodology.

SHATTERING THE DREAM - WHEN A JOB OFFER BECOMES A ZERO-DAY ATTACK

The Operation Dream Job campaign, linked to the Lazarus group, is targeting the defense sector worldwide by distributing modified PDF viewers that execute malicious payloads when opened. The attackers exploit zero-day vulnerabilities, including CVE-2026-68820, to deploy advanced malware like the Troy backdoor and FudModule rootkit, while using compromised web servers for command-and-control operations.

STOLEN THOUGHTS

This paper shows that encrypted chain-of-thought traces returned by OpenAI, Anthropic, and Google APIs can be replayed into weaker, jailbroken sibling models to recover the stronger model's hidden reasoning in plaintext. The authors also decoded 315,320 reasoning blocks from public agent trajectories and found 704 distinct privacy artifacts, including API keys, passwords, access tokens, and PII, showing that these supposedly hidden traces can create a serious data-leak surface.

TLDR IndexPage 9