Claude Squad is a terminal app that manages multiple local agents in separate workspaces, allowing users to work on multiple tasks simultaneously. It can compute tasks in the background, manage instances and tasks in one terminal window, review changes before applying them, checkout changes before pushing them, and more. Each task gets its own isolated git workspace, so there can be no conflicts. A video demo is available in the repository.
2025.06.12·github.com·GitHub repository·TLDR AI WSD is a novel method where a small aligned model drafts the start of a response, then a large base model continues it. This boosts alignment without harming performance.
2025.06.12·github.com·GitHub repository·TLDR AI Sam Altman recently published an essay called 'The Gentle Singularity' where he talks about how humanity is close to building digital superintelligence. This post breaks down Altman's essay, looking at each passage to reveal the hidden meaning behind the words. It is clear that Altman's post was made to convince people that everything is going to be fine, when very clearly, the default is for everything to not be fine.
2025.06.12·thezvi.substack.com·22 min read·TLDR AI Canva now requires developer candidates to use AI coding assistants during interviews to better gauge real-world skills. The new process evaluates proficiency in leveraging AI effectively and making sound technical decisions, while still testing basic computer science skills.
2025.06.12·theregister.com·4 min read·TLDR AI Sponsored
You'll probably like our flagship newsletter. It's all about tech, science, and programming.
2025.06.12·tldr.tech·Sponsor·TLDR AI Hugging Face and NVIDIA have launched "Training Cluster as a Service" to offer scalable GPU clusters to research teams worldwide.
2025.06.12·huggingface.co·3 min read·TLDR AI Design Mode on v0 allows users to quickly tweak generations, preview changes, and more without needing to spend credits or wait for a large language model.
2025.06.12·threadreaderapp.com·1 min read·TLDR AI The studios claim Midjourney, which reportedly made $300 million last year, built a "bootlegging business model" by generating thousands of images featuring characters from Marvel, Star Wars, Pixar, and DreamWorks properties.
2025.06.12·variety.com·8 min read·TLDR AI The Senate cleared a 68-30 cloture vote on the GENIUS Act, virtually guaranteeing final passage of the first US stablecoin bill and ending years of Senate gridlock on crypto policy. The legislation, which aims to strengthen dollar dominance, will let state- or federally-supervised entities issue dollar-backed tokens under a unified framework. Parallel momentum in the House saw the Digital Asset Market Clarity Act pass through both Financial Services and Agriculture Committees, setting up potential coordination or reconciliation between the bills. Together, the advances mark the strongest bipartisan push yet toward comprehensive U.S. crypto regulation.
Senators Elizabeth Warren and Richard Blumenthal pressed Meta to disclose its stablecoin strategy, asking whether the company has lobbied for the Senate's GENIUS Act and if it plans to launch or own a stablecoin issuer despite proposals to bar Big Tech from doing so. Their letter cites privacy, anticompetitive, and consumer-protection concerns, warning that a Meta-run token could extend the firm's data-harvesting reach and enable “surveillance pricing.” The senators also demanded an explanation of how any new effort differs from Meta's abandoned Libra/Diem project. The inquiry landed hours before the Senate's passage of the GENIUS Act.
Privy, a wallet-as-a-service provider powering over 75 million accounts and more than 1,000 developer teams, has agreed to be acquired by Stripe, though it will continue to run as an independent product. The deal lets Privy tap Stripe's scale while broadening Stripe's push to blur the line between fiat and crypto payments, offering developers built-in wallet creation, transaction signing, and onchain integrations alongside Stripe's existing fintech stack. Privy's traction, with billions of dollars in transactions and adoption by companies like Hyperliquid, Blackbird, Toku, and Farcaster, highlights growing demand for embedded crypto rails that feel as seamless as conventional web tooling.
Polygon co-founder Sandeep Nailwal has assumed the role of CEO at the Polygon Foundation, announcing major strategic shifts to focus solely on Polygon PoS and Agglayer. The zkEVM will be deprecated in 2025, while PoS aims to scale to 5,000+ TPS this year and 100K+ in the long term. Agglayer v0.3 rolls out June 30, with spinoffs like Polygon ZisK and airdrops planned for POL stakers. With SEC scrutiny of MATIC dropped and market makers returning, Nailwal signals a return to “zero-to-one” execution driving speed, clarity, and brand alignment across the Polygon ecosystem.
Airdrops remain one of the easiest ways to earn free crypto in 2025. These eight under-the-radar opportunities span DeFi DEXs, abstraction layers, and social-fi platforms: Hyperliquid, Meteora, Abstract, Pump.fun, Axiom, Monad, Farcaster, and Kaito. Despite claims of saturation, disciplined engagement—using protocol swaps, providing liquidity, staking in designated pools, or “yapping” on social-fi leaderboards—can unlock substantial token rewards. These airdrops underscore a broader trend toward gamified, incentive-driven growth mechanisms across the ecosystem. Ignoring them risks leaving free money on the table.
2025.06.12·links.tldrnewsletter.com·12 min read·TLDR Crypto A wave of emerging crypto apps is gaining traction across DeFi, stablecoins, AI agents, and SocialFi, from Falcon's synthetic stablecoin and Avantis' multi-asset perps to Noice's tipping app and Giza's agent platform. Several, like Resolv and Defidot, have launched tokens or airdrops, while others like Coinshift and Turtle Clubhouse are experimenting with yield and bootstrapping campaigns.
There are a flood of stablecoin infra pitches lacking clarity on what infrastructure is actually owned versus white-labeled. The ability to directly execute and settle money movement, not just wrap third-party primitives, is what defines reliability, cost, and risk. In a crowded market, transparency about infrastructure ownership could be a key differentiator and trust signal.
Arbitrum's new Vibekit is an open-source MCP-based toolkit that lets developers build AI-driven DeFi experiences across frameworks like Eliza, RIG, and LangGraph. It offers modular servers for inference, perpetual trading, yield strategies, and verifiable on-chain predictions. It also enables personalized strategies, instant position adjustments, and AI-powered market-making with low slippage and strong capital efficiency.
2025.06.12·links.tldrnewsletter.com·9 min read·TLDR Crypto With the CLARITY Act passing, Ethereum is now formally classified as infrastructure, not a security, putting it in the same category as the internet, not a stock-issuing entity.
The crypto card landscape has exploded with offerings like RedotPay, Metamask, Gnosis Pay, and over a dozen others, plus CEX cards from Coinbase and Binance.
Polymarket has launched prediction markets for betting if the price of Bitcoin or Ethereum will go up or down in the following hour.
After a $500 million BTC purchase in May, GameStop announced a convertible note offering for making investments consistent with its Investment Policy.
Getty Images is pursuing a landmark copyright lawsuit against Stability AI in London's High Court, alleging the AI company used millions of Getty's copyrighted photos without permission to train its models. Stability AI contends that the training occurred outside the UK and argues that only a tiny portion of its AI-generated outputs resemble Getty images, framing the dispute as about technological innovation and fair use. Getty maintains this isn't anti-AI but about requiring proper licensing and payment for copyrighted works, noting it has licensed content to other tech companies for AI training purposes.
Meta has launched a new AI-powered video editing tool that allows users to apply over 50 preset prompts to the first 10 seconds of their clips, transforming backgrounds, clothing, and themes through the Meta AI and Edits apps. While users can restyle videos into various formats like anime or desert scenes, the results can be inconsistent and often less polished than Meta's own examples. The feature is currently free for a limited time and available in the US and over a dozen other countries. Support for custom prompts is expected later this year.
The Browser Company has launched Dia, an AI-first browser, in beta. Dia is designed to integrate AI directly into users' web workflows. Following the limited adoption of its previous browser Arc, the company has shifted focus to Dia, which features an AI chatbot built into the URL bar that can search the web, summarize files, write drafts based on open tabs, and adapt to user preferences. Although AI integration in browsers is not new, Dia distinguishes itself with features like Skills, History-based context, and a more seamless, customizable AI interface aimed at replacing standalone tools like ChatGPT and Perplexity.
Legendary Apple engineer who created QuickDraw and HyperCard, Bill Atkinson, established ten principles for human-centered interface design that continue to influence modern tools like Figma. These include designing within constraints rather than around them, democratizing creativity through accessible tools, and making interfaces feel inevitable while hiding complexity behind simplicity. Atkinson's legacy lies in creating foundational platforms that enable new categories of creation, optimizing for human perception and delight, and building tools that teach users through direct experimentation rather than abstract instruction.
Designers can grow professionally by incorporating small-scale experiments into their work projects rather than waiting for free time to learn new skills. The key is identifying specific weak points in your design process and testing targeted solutions, such as using AI tools to explore different grid layouts or improve the documentation workflow. Success comes from gradual 1% improvements through focused experimentation that doesn't jeopardize project deadlines, which allows designers to evolve their skills while meeting work demands.
2025.06.12·dataanddesign.substack.com·5 min read·TLDR Design Apple's new Liquid Glass design in iOS 26 marks a strategic shift toward unifying visual language across platforms like iOS and VisionOS, but it introduces a conceptual dissonance by prioritizing visual spectacle over interaction clarity. While technically impressive, the refractive glass metaphor contradicts users' physical understanding of touch interfaces, raising concerns that Apple has moved away from its first-principles design philosophy in favor of aesthetic consistency.
Covolute is an AI-powered editor for web creation on an infinite, real-time collaborative canvas. Visually design, direct AI to build features, and see your website develop live.
Turn static shots into fast-moving showreels – like magic. Add music, go greyscale, and layer in grain, all in seconds.
PixVerse is a powerful generative AI model that lets users effortlessly transform multimodal inputs into stunning videos within minutes.
This post presents nine observation exercises that help artists learn to truly see their subjects rather than rely on preconceived notions of how things should look. Key techniques include drawing inverted images to force closer observation, focusing on negative space instead of objects, and practicing blind contour drawing to develop intense concentration on subjects. Additional methods involve drawing from memory to identify missed details, using imaginary lines to understand spatial relationships, and describing scenes in words before drawing to encourage slow, careful observation of complexity.
Nike's "North American Voices" docu-series used a dynamic motion design system to unify and amplify the unique stories of six diverse teams across the continent, celebrating purpose and momentum. Developed by Athletics and collaborators, the system blended tailored visual elements with cohesive branding to create an engaging, emotionally resonant internal storytelling experience.
WWDC 2025 marked a humbling shift for Apple, as it acknowledged unfulfilled AI promises from the previous year and instead refocused on core strengths like hardware-software integration, continuity features, and a new unified design language called Liquid Glass. Rather than chasing generative AI hype, Apple's keynote emphasized a strategic retreat to what it does best — delivering polished, tightly integrated user experiences and enabling developers, signaling a more grounded and sustainable path forward.
Companies facing European Accessibility Act deadlines without compliance should avoid panic while understanding the profound legal implications.
This historical tech tree visualizes the entire history of technologies, inventions, and (some) discoveries, from prehistory to today.
(You'll also get an instant tour [4] of the full Permiso Platform.)
Sponsored
Identity security is messy, and AI is making it messier. Restore sanity with Permiso Discover — an identity inventory and visibility tool for human, non-human, and AI.
Salesforce assigned 5 CVEs after a security report revealed 20+ configuration weaknesses in Flexcards, Data Mappers, and core components. These vulnerabilities could expose customers to unauthorized access and session hijacking. 16 other flaws were classified as customer misconfigurations. Admins have been urged to review and secure configurations to prevent exploitation.
Researchers from Akamai are warning of two Mirai botnet campaigns exploiting a remote code execution vulnerability in the open-source security platform Wazuh. The first campaign has been active since March and uses a malicious shell script to download the Mirai payload. The second campaign seems to be targeting Italian-speaking users.
Researchers from AIM Labs discovered an attack against Microsoft 365 Copilot, an AI assistant built into Office apps, that allowed for the leaking of sensitive data. The attack involved embedding a hidden prompt in an email which bypasses Microsoft's cross-prompt injection attack classifier because it is phrased as text to a human. Later when the user requests Copilot's RAG engine to retrieve data from the email, the prompt is interpreted and injected into the LLM.
AI has revolutionized cybersecurity innovation, enabling startups to develop products and rapidly disrupt legacy providers. However, a paradox exists between fostering innovation and managing security vulnerabilities and compliance costs. Successful startups embed governance strategically, automate security with AI, contribute purpose-built tools, and prioritize community building for long-term advantage.
X's XChat messaging protocol uses flawed end-to-end encryption. It lacks forward secrecy, and stores user private keys on X's servers using Juicebox protocol across three software-based servers (not HSMs). This allows X to potentially decrypt messages for internal purposes or legal compulsion, making XChat's encryption largely ineffective against surveillance.
2025.06.12·blog.cryptographyengineering.com·14 min read·TLDR InfoSec Researchers from Veracode detected a malicious NPM package called “solders” which uses a post-install hook to run the malicious lib.js file without user interaction. The lib.js file obfuscates the first layer using JavaScript type coercion to build up the strings from Japanese Unicode. The decoded string then uses hex encoding, array shuffling, and binary array encoding to build a base64 encoded PowerShell script that downloads a batch script that utilizes string reordering, 3DES encryption, and steganography.
Maze is building technology that models the workflow of an experienced analyst, where each agent ingests telemetry from a customer's public cloud accounts, reproduces the steps an attacker would take to move laterally, and then either closes the gap automatically or flags a concise set of exploitable weaknesses.
MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan, and more. Integrate security testing and penetration testing into AI workflows.
Claws is a static analysis tool for GitHub Actions modeled after Rubocop.
A roadmap from Hashicorp on how an organization can mature in its secrets management process. The guide is broken up into the adopting stage, where secrets management is first integrated; the standardizing stage, where automatic secrets rotation and compliance are introduced; and the scaling stage, where operations are scaled up and more services like PKI are managed. Each stage is broken up into three categories with actionable checklist items.
SmartAttack is a new method that uses smartwatches to steal data from air-gapped computers secretly using ultrasonic sound. The attack needs malware on the computer and a nearby smartwatch to receive hidden audio signals. Experts suggest banning smartwatches and removing computer speakers from secure areas to stop this.
Unit 42 researchers identified five actively evolving Linux ELF malware families (NoodleRAT, Winnti, SSHdInjector, Pygmy Goat, and AcidPour) that threat actors are adapting to target cloud infrastructure, with cloud-based security alerts increasing 388% in 2024. These malware strains use techniques like dynamic linker hijacking and SSH daemon injection to achieve persistence, command and control, and data exfiltration in Linux-based cloud environments that comprise 70-90% of cloud computing instances. Palo Alto Networks' new machine learning detection module successfully identified 92% of tested ELF malware samples, demonstrating the effectiveness of ML-based approaches for detecting these evolving cloud threats.
2025.06.12·unit42.paloaltonetworks.com·7 min read·TLDR InfoSec INTERPOL conducted a global operation across 26 countries to shut down over 20,000 malicious IPs associated with 69 types of data-stealing malware, resulting in the arrest of 32 suspects and the seizure of servers and data.