A criminal hacking group recently attempted to launch a widespread cyberattack using a previously unknown bug in a popular open-source web-based system administration tool. There is strong evidence that the actor likely leveraged an AI model to support the discovery and weaponization of the vulnerability. The software maker was notified quickly enough to allow for a patch before the attack could do damage. This is the first known example of a zero-day bug being put to malicious use by hackers enabled chiefly by AI.
2026.05.12·links.tldrnewsletter.com·6 min read·TLDR Sponsored
Social ads get ignored. TLDR gets read.
2026.05.12·advertise.tldr.tech·Sponsor·TLDR Claude Platform is now generally available on AWS. The new service gives customers direct access to Anthropic's native Claude Platform experience through an AWS account. It allows users to work on the same APIs, features, and console experience available through Anthropic directly, but on AWS. Claude Platform on AWS is operated by Anthropic, and the underlying requests and data are processed outside the AWS security boundary.
2026.05.12·aws.amazon.com·9 min read·TLDR 84 TanStack npm packages have been compromised in an ongoing supply-chain attack. Several of these packages have over 12 million weekly downloads, making the compromise especially significant from a software supply-chain perspective. TanStack has deprecated the affected versions, engaged npm security to pull the malicious tarballs, purged GitHub Actions cache entries, and merged hardening changes to restructure the affected workflow, add repository-owner guards, and pin third-party action references. A list of recommended actions for affected systems is available in the article.
2026.05.12·socket.dev·12 min read·TLDR The most important aspect for agentic inference is memory. Agents need context, state, and history, which requires a memory hierarchy wrapped around a model. This implies a necessary trade-off of speed for capacity, but agentic tasks don't really need to be that fast if a human isn't involved.
2026.05.12·stratechery.com·14 min read·TLDR Scott Wu is the founder and CEO of Cognition, an AI agent coding lab and one of the fastest-growing companies of any kind in history. He is also known for his math prowess: Wu is the greatest American gold-medalist of all time at the International Olympiad in Informatics. His career began when he was just in second grade, when he competed in a middle-school math competition at just seven years old. This article contains an interview with Wu where he discusses his early childhood and life, AI, Cognition, humanity, his fears, and more.
2026.05.12·colossus.com·65 min read·TLDR Sponsored
Ditch the spaghetti workflows. Trigger account research, deal scoring, pipeline forecasting and more with a single sentence. Get 3 months free [17] with code TLDRTQL33
2026.05.12·lightfield.app·Sponsor·TLDR GitLab plans to reinvest most of the money it is saving on wages back into its business.
2026.05.12·theregister.com·5 min read·TLDR Future businesses will have to compete with AI lab-owned firms, where every knowledge-intensive function has been replaced by AI.
2026.05.12·catboosted.bearblog.dev·5 min read·TLDR Every technology shift changes the dominant architecture, and often the languages and platforms, that are employed.
2026.05.12·michaelnygard.com·12 min read·TLDR Sponsored
Airbyte Context Store pre-indexes business data so agents query one unified layer instead of chaining API calls. 40% fewer tool calls.
While Mythos can discover vulnerabilities, it does not seem to perform any better than other already existing and readily available tools.
2026.05.12·daniel.haxx.se·12 min read·TLDR This post talks about how to configure a laptop's secure element to be used as a security token.
2026.05.12·ahelwer.ca·10 min read·TLDR Other additions in the 26.5 releases are new Pride-themed wallpapers and some of the initial work needed to support ads in the Apple Maps app.
2026.05.12·arstechnica.com·3 min read·TLDR Sponsored
AI at work still mostly means copy-pasting between tabs. ChatGPT in one window, Linear in another.
2026.05.12·ref.getviktor.com·Sponsor·TLDR AI 2026.05.12·ref.getviktor.com·TLDR AI Thinking Machines Lab introduced a new research preview of interaction models for real-time human-AI collaboration across audio, video, and text. The models train from scratch with a multi-stream design for real-time responsiveness, allowing constant exchange and eliminating the traditional turn-based limits. This scalable approach promises enhanced interactivity and intelligence with practical applications in various domains.
2026.05.12·thinkingmachines.ai·9 min read·TLDR AI Elon Musk announced that xAI will dissolve and integrate into SpaceX as a new division called SpaceXAI. SpaceXAI will handle AI projects like the social media platform X and Grok, branding them under SpaceX. This change streamlines operations, enhances vertical integration, and aligns AI efforts with SpaceX's strategic goals.
2026.05.12·notateslaapp.com·2 min read·TLDR AI Google's Gemini Omni video model surfaces ahead of I/O, integrating video remixing and editing directly in chat. Early feedback highlights its strong editing capabilities, such as watermark removal and object swapping, though it lags in raw cinematic quality compared to competitors like ByteDance's Seedance 2. The model may launch in tiered versions, possibly Flash and Pro, as part of a broader strategy to unify modalities under Gemini.
2026.05.12·testingcatalog.com·2 min read·TLDR AI AWS detailed how foundation model scaling has shifted beyond pre-training into post-training and test-time compute, alongside the distributed infrastructure required to support each stage efficiently.
2026.05.12·huggingface.co·34 min read·TLDR AI Cerebras' surging IPO signals a coming split between "answer inference" optimized for token speed and "agentic inference" optimized for memory hierarchy. Cerebras' WSE-3 has 44GB of on-chip SRAM at 21 PB/s, roughly 6,000 times the memory bandwidth of an H100, making it perfect for human-facing low-latency answers including voice and AI wearables but unsuitable when KV caches and model weights exceed on-chip capacity.
2026.05.12·stratechery.com·8 min read·TLDR AI TLDR's Applied AI team is tasked with making every process at TLDR legible to code, runnable by anyone, and composable into larger workflows. Join a small, fast moving team using the latest AI tools with an unlimited token budget. Learn more [11].
AutoTTS explores automated strategy discovery for test-time scaling by using coding agents to iteratively refine controller logic inside a replay environment, avoiding gradient updates and online LLM calls.
2026.05.12·github.com·GitHub repository·TLDR AI A²RD introduced an agentic autoregressive diffusion framework for generating long coherent videos through iterative retrieval, synthesis, refinement, and memory updates.
2026.05.12·dxlong2000.github.io·4 min read·TLDR AI Normalizing Trajectory Models replace standard diffusion denoising steps with conditional normalizing flows, enabling four-step image generation while retaining exact likelihood training and supporting self-distillation.
2026.05.12·arxiv.org·22 min read·TLDR AI Bedi runs an entire agent development lifecycle through five Claude Code prompts that scaffold, harden against spec, add capabilities, fix eval failures, and reconcile drift between docs, code, and config across his Agno-based platform. The Improve loop derives 8-12 probes from an agent's instructions, runs each against the live container via cURL, judges PASS or FAIL from container logs, then iterates up to five rounds picking levers like tightening rules, swapping tools, or bumping num_history_runs until probes pass, while Hill Climb runs the saved eval suite and fixes regressions in place.
2026.05.12·links.tldrnewsletter.com·5 min read·TLDR AI a16z's Olivia Moore migrated her agentic workflows from Claude Cowork and Claude in Chrome to OpenAI's Codex, recommending most non-technical knowledge workers do the same now that the February desktop app, Plugins, and Automations collapse the ChatGPT-Claude-Cowork interface switching into one product. Codex ships one-click installable Skills she expects to anchor an internal and cross-user marketplace given that non-programmer Skill setup attempt rates likely sit below 10% on Claude, while Codex Pets give low-friction task status updates for users who do not live in an IDE.
2026.05.12·links.tldrnewsletter.com·4 min read·TLDR AI AI lacks creativity akin to humans due to the absence of intrinsic drives and subjective experiences. Emulating feelings could enhance AI's creative capabilities, but raises ethical concerns. Designing AI to genuinely feel and desire might lead to unintended consequences, akin to responsibility seen in parenting.
2026.05.12·danielmiessler.com·4 min read·TLDR AI OpenAI's Daybreak leverages AI to enhance cyber defense by integrating security into the software from the start.
2026.05.12·links.tldrnewsletter.com·3 min read·TLDR AI OpenAI co-founder and former chief scientist Ilya Sutskever is one of the largest individual shareholders in the AI startup.
2026.05.12·links.tldrnewsletter.com·2 min read·TLDR AI Local models can do many tasks that leading cloud models can do at much less cost.
2026.05.12·tomtunguz.com·3 min read·TLDR AI Spotify will give "Verified by Spotify" badges to artists who comply with policies, have consistent listeners, and maintain an identifiable presence on and off the platform. This initiative aims to combat AI-generated music, which has become problematic after incidents like the completely AI-generated rock band The Velvet Sundown that gained a million streams. The verification badges will roll out over the coming weeks, with Spotify aiming to verify over 99% of actively searched artists at launch.
Apple is reportedly planning a modest redesign for macOS 27 that refines the Liquid Glass interface introduced in Tahoe, improving transparency, shadows, readability, and overall polish after what Apple internally viewed as an unfinished first implementation. The update will also focus on performance and efficiency improvements, while bringing major AI upgrades such as a Gemini-powered Siri with chatbot features, unified Siri and Spotlight search, and other Apple Intelligence enhancements ahead of its unveiling at WWDC 2026 on June 8.
Autodesk has released Project Falcon, a free browser-based 3D modeling tool designed for beginners with no technical experience required. The platform uses a guided kitbashing workflow where users can assemble premade parts from a library of thousands of assets to create 3D models like vehicles and spaceships. Models can be exported to professional software like Maya, 3ds Max, or Blender for refinement, or used for 3D printing.
AI is transforming work from individual task execution to conducting multiple AI agents simultaneously, requiring a fundamental mindset shift from doer to director. People struggling with AI aren't lacking tools or knowledge, but rather the organized workflows and structured processes that AI needs to function effectively. This transition mirrors the challenge design leaders face when moving from hands-on work to managing teams, requiring the ability to oversee multiple parallel projects without diving into tactical execution.
Designing small in agile contexts is harder than it looks — not because of speed, but because it demands resisting the designer's natural instinct to solve the whole system at once. The key challenge is identifying the smallest slice of an experience that still delivers real user value, as opposed to dividing work by technical layers, which produces components that are useless in isolation. That constraint, though uncomfortable, is what enables fast learning loops and meaningful discovery about what users actually need.
Most companies are failing to see meaningful returns from AI because they are using it mainly to speed up existing workflows rather than rethink what products, services, or business models are worth building in the first place. While AI delivers clear productivity gains — especially for less experienced workers — the real long-term value comes from using it to ask better strategic questions, challenge assumptions, and reshape offerings, markets, and customer relationships instead of simply accelerating old processes.
2026.05.12·links.tldrnewsletter.com·8 min read·TLDR Design Hestus offers autocomplete technology for CAD software that makes designing 2.5x faster with 4x fewer clicks.
MarkUp is a Chrome extension that lets you annotate live websites by drawing directly on web pages and automatically generates structured AI briefs.
A free set of 200+ pixel-style icons drawn on an 8 by 8 grid, exploring how minimal an icon can get and still be read at a glance. Available in Figma and SVG.
AI has caused a collapse in the mid-level freelance design market, with commodity work now dominated by $20/month AI subscriptions and mid-range freelancers losing clients to automated tools. Data shows freelance graphic design work shrank 17% within eight months of ChatGPT's launch, with entry-level projects dropping from 15% to below 9% on platforms like Upwork. Only high-level strategic design work requiring human judgment remains viable, while basic design tasks have been entirely replaced by AI tools like Canva and Midjourney.
Eat Marketing reimagined the 124-year-old Stokes Coffee brand by modernizing its identity without losing its heritage, creating a warm and confident visual system centered around illustrated “Stokes People” characters inspired by real staff and family members. Rather than focusing only on aesthetics, the rebrand rebuilt the company's strategy, tone of voice, typography, and packaging to help Stokes compete in today's coffee market while preserving the trust and history that define the business.
This 11 icon pack list includes open-source options like Lucide and Iconoir, commercial libraries like Iconsax and Hugeicons, and specialized collections like Pixelarticons for retro designs.
AI is making many familiar UI patterns feel obsolete.
2026.05.12·links.tldrnewsletter.com·16 min read·TLDR Design 2026.05.12·links.tldrnewsletter.com·TLDR Dev Sponsored
You've been there: code's ready to ship, everyone's excited—then someone spots a vulnerability. Suddenly it's an all-hands emergency and time to cancel your evening plans.
2026.05.12·links.tldrnewsletter.com·Sponsor·TLDR Dev A SvelteKit site incurred a $134 Cloudflare D1 bill due to the database charging per row scanned, which, combined with a lack of indexes, resulted in 127.6 billion row reads from two full scans on every page load. The cost was cut by applying composite indexes, running ANALYZE for the query planner, and implementing KV cache-aside for layout-level data reads.
2026.05.12·fullstacksveltekit.com·5 min read·TLDR Dev