The Daily Index — Thursday, September 3, 2026 · TLDR Index

Across today’s newsletters

Today’s Index

A software update route is diverted through several failed verification checkpoints before reaching multiple endpoint destinations. — AI-generated editorial illustration

TLDR InfoSec

BGP HIJACK INFECTING NETWORKS CAUSED BY A COMEDY OF ERRORS THAT'S NOT FUNNY AT ALL

Attackers hijacked Softaculous' 162.55.80.0/24 prefix and redirected Virtualizor update traffic to malicious servers. Hetzner's RPKI settings accepted /24 routes, while a forged AS path matched its ROA, so the attackers also obtained TLS certificates during the diversion. Virtualizor did not cryptographically verify update packages, and Softaculous cannot identify every affected server and urges customers to investigate.

arstechnica.com · 4 min

TLDR

META RELEASES MORE POWERFUL AI MODEL, EDGING CLOSER TO RIVALS

Meta has released a new model with capabilities close to top competitors. Developers can now access and pay for Muse Spark 1.3. The model will soon roll out to Meta's social media platforms. Meta has yet to decide whether to release the model's weights. It still plans to release weights for the prior version, Muse Spark 1.2.

links.tldrnewsletter.com · 3 min

TLDR

GOOGLE RELEASES GEMINI 3.8 FLASH, ITS THIRD FLASH MODEL IN SIX WEEKS

Google has released its third Flash model in just six weeks in two variations. The standard model is good for agentic tasks and software development, while the Cyber model has been tuned for vulnerability detection and mitigation. The Cyber model is currently limited to trusted testers and governments. API access to the model is available at an introductory rate of $0.75 per million input tokens and $3.75 per million output tokens through until the end of the year.

arstechnica.com · 3 min

TLDR Dev

HOW WE MIGRATED 11 MILLION USERS TO CLINE'S BIGGEST REFACTOR

Cline replaced its VS Code extension's roughly 76,000-line monolithic agent core with a shared SDK while protecting workflows used by more than 11 million developers. Since the VS Code Marketplace lacks gradual rollouts, the team bundled legacy and new engines together behind a feature flag with automatic fallback, then ran a month-long A/B rollout that reduced tasks hitting three consecutive agent mistakes from 6.34% to 0.62%.

cline.ghost.io · 9 min

TLDR Fintech

STABLECOINS ARE MOVING FROM TRADING TO PAYMENT INFRASTRUCTURE

Stablecoins moved $33 trillion in 2025. Only about $390 billion of stablecoin activity that year went to real-economy payments for goods and services, roughly 1% of the total. The industry has largely solved how to create and move digital dollars. What it has not solved is what happens next: when someone wants to use that balance to pay a supplier, send money home, or buy something without converting back into fiat first.

links.tldrnewsletter.com · 8 min

TLDR

THE RACE TO ENGINEER NEW KNOBS FOR THE HUMAN BRAIN

Chemogenetics is a powerful technique that modifies specific neurons so they can be controlled remotely by normally inert drugs. There are several ongoing clinical trials of chemogenetics in China. The research could result in new ways of treating epilepsy, Parkinson's disease, and pain. This post looks at chemogenetics, describes what those first clinical trials are doing, and looks at how they could be improved upon.

neuroai.science · 17 min

TLDR

ROBOTAXIS TRY THEIR LUCK ON LONDON'S MEDIEVAL ROADS

The arrival of 15 robotaxis in London is an important step for the autonomous vehicle industry. Acceptance of the technology has been slower in European cities, where the driving environment can be complex, and regulation is stiff. The failure rate of a driver's license test in London is just over 50%. 15 cars will be available for ride-hailing through Uber's app during the safety testing period.

links.tldrnewsletter.com · 3 min

TLDR Dev

MAYBE WE SHOULDN'T BE REVIEWING ALL THIS CODE

AI is exposing the limits of mandatory code review by generating more code than humans can realistically inspect, turning senior engineers into a bottleneck. Teams should move design, knowledge sharing, testing, and architectural feedback earlier through pairing, collaborative design, automation, and fitness functions, then reserve human code review for exceptional changes involving security boundaries, major architectural decisions, large blast radii, or low confidence.

martinfowler.com · 6 min

TLDR IT

DROPBOX ACCOUNTS BREACHED THROUGH LENOVO EMAIL VERIFICATION FLAW

Attackers accessed Dropbox accounts by exploiting a flaw in Lenovo's email verification process to create fraudulent Lenovo IDs tied to victims' email addresses, allowing them to authenticate without the Dropbox password. Roughly 5,000 accounts were reportedly affected, making the incident a useful reminder that federated identity risk can extend well beyond your primary IdP.

links.tldrnewsletter.com · 4 min