The Daily Index — Monday, September 14, 2026 · TLDR Index

Across today’s newsletters

Today’s Index

A public GitLab project folder has an open passage through its repository files leading to secured drawers containing configuration and credential documents, illustrating how an unauthenticated path-traversal flaw exposed arbitrary files. — AI-generated editorial illustration

TLDR InfoSec

GITLAB CVSS 10 FILE-READ FLAW DRAWS IN-THE-WILD PROBES AFTER DISCLOSURE

GitLab has patched CVE-2026-85706, a CVSS 10 path traversal bug in the repository commits API that let unauthenticated attackers read arbitrary files. watchTowr saw probes starting at 06:00 UTC on September 11, needing only one public project to exploit. Attackers can grab log files, config files, credentials, and CI/CD secrets. GitLab also fixed CVE-2026-87719 (CVSS 9.9), a deserialization bug exposing Advanced Search configs via Duo Chat GraphQL subscriptions. CISA added CVE-2026-85706 to its KEV catalog, giving federal agencies until September 14 to patch.

thehackernews.com · 2 min

TLDR AI

SOFTBANK GETS UPSIZED $11.9 BILLION LOAN IN OPENAI FUNDING PUSH

SoftBank just borrowed nearly $12 billion from about 20 banks to keep funding OpenAI, beating the $10 billion it first sought. Son is still aiming near $65 billion into OpenAI by October even as Altman shelves a 2026 IPO over safety and SoftBank shares sank as much as 13% Monday on the debt pile.

japantimes.co.jp · 2 min

TLDR Fintech

OPENAI TARGETS WALL STREET JUNIOR BANKER WORK WITH CHATGPT FOR FINANCIAL SERVICES

OpenAI launched ChatGPT for Financial Services, a finance-specific version of ChatGPT Work built with design partners Morgan Stanley and Evercore, using GPT-6 Astra and native data access from LSEG, Daloopa, Crunchbase, and PitchBook. The product is aimed at investment banking and equity research workflows like company research, financial analysis, M&A target evaluation, spreadsheet work, and pitchbook generation, raising questions about how Wall Street will train and staff junior bankers as AI automates more analyst-level tasks.

cnbc.com · 5 min

TLDR Data

REFRESHING THE TRAVEL-TIME MAP BEHIND LYFT'S MARKETPLACE: REBUILDING NEIGHBORHOOD REACHABILITY SIGNALS

Lyft rebuilt its outdated neighborhood travel-time dataset with more accurate ETAs, better coverage, drivable-location filtering, and self-service fields, improving how pricing and driver heatmaps understand nearby supply. It will now refresh every six months, with time-aware ETAs planned to reflect changing traffic throughout the week.

eng.lyft.com · 12 min

TLDR Hardware

AMAZON BETS ON HOLLOW CORE FIBER TO KEEP A MILLION CHIPS IN SYNC

AWS is wiring AI data centers with hollow core fiber, an air-filled strand that moves light about 50% faster than glass and cuts latency roughly 30%. Amazon has already deployed it across more than 10 sites so million-chip clusters can stay synchronized as facilities spread out for power and land.

en.sedaily.com · 5 min

TLDR Crypto

COINBASE AND MOOV BRING STABLECOIN RAILS TO 1,000+ COMMUNITY BANKS

Coinbase and Moov announced a partnership to deliver stablecoin payment acceptance, settlement, and real-time funding across Moov's network of 1,000+ US community banks and credit unions. The integration embeds Coinbase's Payments API and custodial wallets into Moov's existing platform, letting financial institutions offer stablecoin services without building their own wallet infrastructure or blockchain connections. The announcement came ahead of the US Senate's preliminary vote on the CLARITY Act, as community banks face mounting concern that stablecoin yield products could pull deposits away from traditional accounts.

threadreaderapp.com · 2 min

TLDR Design

PREMIERE ADDS AI MEDIA GENERATION

Premiere's new Generative Media tool lets editors fill timeline gaps with AI-generated video and sound effects without leaving the project. Editors can pick among models like Adobe Firefly, Google Veo, Runway, Luma, and Kling, while beta tools add music and soundscape generation, speaker separation, and an After Effects AI Assistant.

creativecow.net · 5 min

TLDR AI

INTRODUCING PROJECTS

Cursor Projects lets users take on larger bodies of work. It can maintain context over months of work, delegate tasks to thousands of agents, and perform recurring work without being prompted. Cursor Projects frees developers from managing agents and lets them direct the work itself by moving up a level of abstraction. The tool has been a substantial productivity multiplier at Cursor: new users merge 30% more PRs.

cursor.com · 5 min

TLDR Design

FIREFOX IS GETTING ITS BIGGEST REDESIGN IN YEARS. THEN MOZILLA GOT COLD FEET

Firefox 157 brings Project Nova's warmer colors, softer tabs, refreshed icons, and rounded corners across desktop and mobile. Early designs had floating toolbars, chrome-to-page gaps and pastel gradients, but complaints about wasted space pushed Mozilla to soften the rounding and restore Compact Mode. Public testing and listening to what users hated counts as good UX, even as the rounded, gradient-heavy look risks modernizing Firefox into sameness.

webdesignerdepot.com · 2 min