Visa is acquiring behavioral biometrics firm BioCatch, which monitors 19 billion banking sessions monthly across 100+ major banks to detect account takeover, mule accounts, and scam coaching, for $2.4 billion in cash. The deal extends Visa's value-added services business (which did $10.9 billion last year, up 24%) following earlier acquisitions of Tink and Featurespace. Behavioral biometrics will become critical for proving human-initiated transactions as AI agents increasingly transact.
Tether's excess reserves fell from $8.2 billion to $4.1 billion in Q2 2026, as Bitcoin and gold each depreciated over 10%, compressing mark-to-market values on its $5.8 billion Bitcoin position and $18.8 billion precious metals book. Net operating profit of $1.5 billion for Q2 2026 compares to $4.9 billion in net profit for Q2 2025, with H1 2026 producing a negative $3.2 billion financial result that implies Q2 losses exceeding $4 billion. Tether reported net operating profit as its headline metric, a figure that strips out unrealized asset value changes, a framing choice that softens the impact of mark-to-market drawdowns on its reserves. USDT's user base reached a record 650 million, with CEO Paolo Ardoino characterizing Q2 2026 as a "great quarter despite highly volatile global markets."
2026.08.04·links.tldrnewsletter.com·3 min read·TLDR Crypto Strategy sold 1,638 BTC between July 27 and August 2, trimming holdings to 843,138 BTC, while selling $290.6 million of MSTR shares to boost its USD reserve to $4 billion and repurchase $28.9 million of STRC stock.
2026.08.04·links.tldrnewsletter.com·4 min read·TLDR Crypto Bitmine added 10,399 ETH, bringing its treasury to 5,797,813 ETH and making it the largest corporate ether holder and second-largest crypto treasury overall behind Strategy.
2026.08.04·links.tldrnewsletter.com·2 min read·TLDR Crypto Per $1,000 traded, Robinhood generates roughly $23 from prediction markets versus $2.50 from crypto, $1.47 from options, and $0.13 from stocks, making prediction markets now its largest transaction revenue source.
Google Earth on web has launched a feature that lets users generate custom AI images of any location using Nano Banana 2, grounded in real satellite, aerial, and 3D imagery. Suggested uses included visualizing historical sites, creating educational infographics, drafting real estate concepts, previewing building projects, and imagining futuristic redesigns of familiar places. Google rolled back the feature the next day after some generated images appeared to violate its policies, despite images being watermarked and not visible in the main Earth experience.
Leaked images of the Lenovo Googlebook 15 reveal Google's upcoming Android-powered laptop, which features a premium design, a dedicated Gemini key, a desktop-style Android interface, and a wide selection of ports aimed at competing directly with Windows laptops. The new interface combines a phone-like status bar with a traditional taskbar, while preloaded apps such as Chrome, Gmail, Canva, and Adobe Premiere Pro highlight Google's ambition to make Android a serious desktop platform. Although specifications, pricing, and performance remain unknown, the laptop is expected to launch this fall, potentially at IFA in September.
Apple is expected to refresh the Mac Studio this October with M5 Max and M5 Ultra chips, bringing significant performance improvements, up to 36 CPU cores, 80 GPU cores, and potentially 768GB of unified memory, though memory availability may be limited by supply constraints. The update also marks the arrival of the first M5 Ultra, as Apple never released an M4 Ultra chip, but higher prices are likely following recent Mac price increases. Looking further ahead, a 2028 Mac Studio with M7 Max and M7 Ultra chips is expected to deliver major AI performance gains, a redesigned cooling system, and support for up to 1.5TB of unified memory, making it Apple's most powerful Mac yet.
AI-generated prototypes often fall short not due to model limitations, but because of undocumented decisions, hard-coded values, and inconsistencies scattered throughout design systems. A practical framework addresses this through treating design decisions as infrastructure, auditing tools like FigmaLint, and a three-layer system of spec files, token layers, and automated audits. Design debt can't be resolved by AI alone—it requires deliberate human guidance and ongoing maintenance of design systems over time.
2026.08.04·smart-interface-design-patterns.com·5 min read·TLDR Design A Creative Technologist uses technology as a creative medium, combining design, engineering, and storytelling to explore what new technologies can mean before their use cases are established. Although the role has existed for decades under various names, AI has made it increasingly valuable because companies need people who can quickly prototype ideas, connect disciplines, and shape new experiences rather than simply execute predefined ones. The broader shift is that many designers and creative professionals will increasingly adopt this way of working, treating technology as a medium for experimentation and expression rather than just a tool.
2026.08.04·links.tldrnewsletter.com·12 min read·TLDR Design Good typography is largely invisible. Type designers spend months making subtle adjustments—such as optical sizing, spacing, overshoots, ink traps, and character differentiation—so that text feels effortless to read without readers ever noticing the craft behind it. Many of these techniques have been refined over centuries and are based on how human vision works, ensuring letters remain legible at different sizes, in different contexts, and even under challenging conditions like poor printing or road signage. The result is that typography doesn't just convey words - it quietly influences readability, tone, and even credibility, demonstrating that the best type design succeeds precisely because it disappears behind the meaning.
2026.08.04·links.tldrnewsletter.com·15 min read·TLDR Design Turn performance data, competitor insights, and consumer signals into winning ad creatives, using custom AI workflows you build and own.
Create stunning product photos, videos, and social content with AI. Convert Flat Lay images to on-model shoots in bulk.
Premation is a professional motion studio. Dynamic WebGPU timeline rendering ensures your preview and final export are identical.
Nielsen identifies 10 fundamental GUI elements—buttons, forms, menus, links, dialogs, alerts, icons, checkboxes/radio buttons, tabs, and search—that form the basic vocabulary underlying nearly every interface built over 40+ years. The article traces each element's history, explains its usability role, and offers 86 evidence-based design guidelines plus bonus coverage of windows and pointers. It argues designers should master this established alphabet rather than invent new conventions, since familiarity, tested through Jakob's Law and decades of use, consistently outperforms novelty.
2026.08.04·jakobnielsenphd.substack.com·32 min read·TLDR Design Designer Allan Peters proposed a simplified Disney+ logo that uses the iconic Disney "D" as the main mark, highlighting a hidden "+" already present within the letter. While many appreciated the clever concept, the redesign sparked backlash from fans who argued that Disney's signature "D"—closely associated with Walt Disney's handwriting—is too iconic and culturally significant to alter, illustrating the challenge of updating one of the world's most recognizable brand identities.
Koto believes a strong in-person studio culture is essential for creative work, arguing that being together enables spontaneous collaboration, mentorship, relationship-building, and higher creative standards in ways remote work cannot. The agency intentionally designs its offices around collaboration rather than capacity, while allowing each studio to develop its own personality through local culture, team-led rituals, and thoughtfully designed spaces. As Koto grows, it prioritizes hiring ambitious, low-ego people with potential, investing in shared experiences, and preserving a culture of optimism, craftsmanship, and co-creation to build a lasting creative legacy.
2026.08.04·the-brandidentity.com·6 min read·TLDR Design Generative AI chatbots' UX can be measured through a mix of behavioral and attitudinal metrics.
AI is homogenizing design output, but peer-reviewed research shows the effect is measurable yet small, strongest in tightly constrained tasks like onboarding flows.
2026.08.04·marieclairedean.substack.com·5 min read·TLDR Design Sponsored
AI is in your engineering workflow. While the token spend shows it, the throughput doesn't. The human is very much still in the loop, and that's a context problem.
Join live on Aug 19 (FREE) [5]to learn:
* The 4 metrics to measure where AI gains leak out before production. * The 8 stages of context maturity, the specific walls capping your metrics, and a free tool to pinpoint where your team is * Why more MCPs and bigger context windows aren't enough, and what it takes to get real value from your agents.
2026.08.04·watch.getcontrast.io·Sponsor·TLDR Dev 2026.08.04·watch.getcontrast.io·TLDR Dev MirrorCode is a benchmark designed to evaluate AI's ability to autonomously reimplement entire software programs from scratch without access to the original code, focusing on long-horizon coding tasks. AI models have shown they can successfully tackle some of these complex tasks.
Massively parallel backups for sharded Postgres databases are designed to create consistent, encrypted snapshots every 12 hours with minimal impact on production queries. By using cloud infrastructure and advanced techniques like Write-Ahead Log (WAL) replay, these backups can efficiently handle petabyte-scale databases, reducing the time needed for backup processes through parallelism across multiple shards.
2026.08.04·planetscale.com·12 min read·TLDR Dev Wealthfront went on a multi-year experiment to improve AI-augmented code review processes, transitioning from initial skepticism to a structured approach that uses models like Opus 4 and Gemini for effective bug detection and code analysis. Their iterative refinements have led to improved review outcomes, reduced false positives, and an efficient review timeline.
2026.08.04·eng.wealthfront.com·14 min read·TLDR Dev LLMs have transformed the way individuals approach technical tasks by allowing those with limited skills to produce decent results, turning them into generalists. However, true expertise in a given domain is necessary for maximizing LLMs' potential, as shown by the ability of knowledgeable users to engage more effectively with the models.
2026.08.04·seangoedecke.com·5 min read·TLDR Dev Task runners can streamline the workflow of software developers by automating common coding tasks across various repositories. By creating simple scripts or using tools like Make, Just, or Mise, developers can run commands for tasks such as installing dependencies, building, testing, and formatting code without having to remember complex commands specific to each tech stack.
2026.08.04·hamvocke.com·9 min read·TLDR Dev Native apps often collect much more personal data than their web counterparts, granting third-party software access to users' sensitive information without explicit consent.
2026.08.04·nooneshappy.com·6 min read·TLDR Dev Sponsored
Every LLM call in a chain compounds latency. Celeris-1 cuts each one to almost nothing: it decodes in parallel at 2,086 tokens per second, the first model ever to cross 2,000. OpenAI-compatible. Up to $1,000
Next.js 16.3 has reduced memory usage in development, faster builds, better server-side rendering, and custom error boundaries, all aimed at optimizing existing applications without requiring changes to the application code. The release also has Instant Navigations and new tools like Instant Insights and Partial Prefetching.
2026.08.04·nextjs.org·14 min read·TLDR Dev Bonsai is a UI library designed for building efficient and reactive web applications in OCaml, allowing developers to create components as purely functional state machines while managing state and incrementality modularly. Its architecture helps with the development of both browser-based and terminal-based UIs.
2026.08.04·github.com·GitHub repository·TLDR Dev To effectively train vision-based LLMs on video content, careful frame selection is necessary, as using a fixed sampling method often misses important moments while overwhelming the model with redundant visuals. The approach involves dynamic scene detection and multiple channels for deduplication, along with synchronized transcripts, allowing the model to analyze the video more comprehensively than summaries provided by human interpreters.
2026.08.04·leoaido.com·7 min read·TLDR Dev Model Labs and Agent Labs are increasingly converging as AI companies, like Anthropic, focus on co-designing harnesses that optimize model performance. By integrating model and harness development, businesses can better handle a variety of workloads and improve their competitive edge in the enterprise AI market.
2026.08.04·akashbajwa.co·8 min read·TLDR Dev The emergence of AI tools has led to a market upheaval, impacting traditional software models by making the initial development of applications cheaper and more accessible. Despite the accessibility of AI tools, established software solutions remain valuable due to the complexities of long-term maintenance and integration, alongside the unique advantages of proprietary data and deep industry expertise held by specialized companies.
2026.08.04·fieldventures.substack.com·19 min read·TLDR Dev Sponsored
Join this workshop to learn how Etsy's engineers prepare for peak traffic, debug in real time, and measure the business impact of
Relying solely on AI-generated responses without understanding or contextualizing the information can make effective communication and collaborative work worse, as it reduces the added value of personal insight and comprehension.
The maintainers of curl took a month-long break from handling vulnerability reports, which resulted in a refreshing sense of relief and allowed them to focus on other neglected project aspects.
2026.08.04·daniel.haxx.se·7 min read·TLDR Dev While AI has improved productivity for engineering teams, the overall gains in efficiency are still modest.
2026.08.04·bjorg.bjornroche.com·5 min read·TLDR Dev Inference costs in AI are expected to drop dramatically, becoming nearly free within two years at any fixed level of capability, which undermines the long-term viability of products that rely solely on model access for differentiation.
2026.08.04·future.lulzx.space·13 min read·TLDR Dev Sponsored
Finding more vulnerabilities doesn't automatically reduce risk.
Instead of chasing vulnerability noise, security teams need to identify attack paths, validate what attackers can exploit, and continuously verify remediation efforts work. This Horizon3.ai webinar [5] lays out how to do that by operationalizing CTEM.
📊 Join for the people, process, and metrics changes that you need to put CTEM principles into practice.
🥷 Take the attacker's perspective [6] to pivot from static CVE lists to demonstrating meaningful risk reduction.
👉 If you feel like you're getting too much visibility without reducing risk, this is for you.
A misconfigured internet-connected evaluation environment caused issues with Claude Opus 4.7, Claude Mythos 5, and an internal research model across three incidents identified in a review of 141,006 evaluation runs. Opus 4.7 retrieved production database rows after a fictional company's name coincided with a real one. Mythos 5 published a malicious PyPI package that was executed on 15 real systems, including a security vendor's scanner. Anthropic stated that these incidents did not require new exploits, but were due to weak passwords and exposed endpoints. They have halted evaluations, notified affected organizations, and are improving network isolation and vendor monitoring before resuming. Noma Security's CISO, Diana Kelley, emphasized that this should be viewed as a controls failure rather than an intent failure and recommends implementing isolation, least privilege, and kill switches for autonomous agent testing.
Health tech company CareCloud disclosed that data belonging to 345k people was stolen in a March data breach. The attackers breached CareCloud's AWS environment and exfiltrated data from databases over 6 days. The stolen data may include names, home addresses, SSNs, government ID numbers, bank account details, payment card numbers, and other PHI.
N-able issued a notice warning customers of its N-central remote monitoring and management (RMM) platform about a new authentication bypass vulnerability that is actively being exploited. N-able has not yet released technical details but noted that the vulnerability stems from an incomplete fix for a previous authentication bypass vulnerability.
The latest iteration of the macOS malware XCSSET, version 40, uses supply chain tactics to propagate by hiding malicious run-script phases in legitimate Xcode projects. To maximize stealth, the malware employs a multi-layered polymorphic evasion stack that uses dual-key encryption and in-memory execution, while actively impairing macOS defenses by disabling security updates and locking XProtect signature databases. XCSSET v40 also introduces a novel fileless persistence mechanism that abuses the macOS defaults configuration system, along with new operational modules designed to hijack Google Chrome via the Chrome DevTools Protocol and deploy trojanized Telegram binaries.
2026.08.04·unit42.paloaltonetworks.com·16 min read·TLDR InfoSec 1Password classifies agent architectures as either local or remote and operating in a delegated, bounded, or autonomous mode. Delegated agents, such as coding agents or browser copilots, operate as an extension of a human identity and can use a workload identity broker when running locally or leverage platform attestation combined with protocols like WIMSE and CAEP when running remotely. Bounded authority agents, such as CI/CD pipelines, run without human intervention on behalf of a system or workflow and can use a workload identity broker when running locally or, when running remotely, leverage OIDC where available and SPIFFE where it isn't to issue short-lived credentials. Autonomous agents run for long periods with limited restrictions and are complex to secure whether running locally or remotely. This article provides some preliminary suggestions for controls.
The Fuyao botnet shipped pre-installed on Android TV boxes at the firmware level, spoofed device identities as premium smartphones (Vivo, OPPO, Huawei, and Meizu) via C2-pushed profile configurations, then used a fused Android Accessibility/YOLOv8s/OCR vision stack alongside Blockly-authored fraud modules to click ads and run residential SOCKS5 proxy sessions across a claimed 120K+ device fleet, generating an estimated $150K in daily revenue. Bitsight TRACE attributed the operation to shared SSL certificates, a leaked internal wiki, reused shell-company emails, and 6-8 of 20 CNIPA patent filings mapping to Fuyao subsystems, tracing the scheme through 144 AI-generated ad-landing domains and Hong Kong/Singapore shell publishers back to Zhejiang Fengwo IoT Technology, a subsidiary of the Fengwo Group. Defenders managing Android device fleets or CI-adjacent infrastructure should flag anomalous phone-model telemetry originating from TV-box hardware profiles and treat unexplained SOCKS5 proxy traffic or unaccounted ad-network impressions as indicators of this ecosystem.
Sponsored
The exploit window is collapsing. AI turns newly disclosed vulnerabilities into working attacks in hours, not weeks. BLACK DUCK POLARIS™ PLATFORM and SIGNAL™ help organizations become Mythos Ready with intelligent prioritization, automated workflows, and faster remediation of exploitable risk.