June 2, 2026
Report summary
8 stories cleared the bar, led by ChatGPT for Google Sheets exfiltrates workbooks, Cloudflare Turnstile requiring fingerprintable WebGL, and Streambed – Stream Postgres to Iceberg on S3.
Worth attention
PromptArmor documented that the ChatGPT for Google Sheets add-on exfiltrates workbook data. Active security risk in a widely-used tool. Remove immediately if installed.
Analysis reveals Cloudflare Turnstile now requires WebGL for browser fingerprinting, blocking privacy-hardened browsers. Relevant if you use Turnstile.
Open source tool that streams Postgres CDC to Apache Iceberg tables on S3, with Postgres wire protocol support.
MiniMax M3, with a 1M-token context window and native multimodality using Sparse Attention, is now available on Vercel AI Gateway.
n8n's experimental release adds an MCP access toggle directly on workflow cards, signaling first-class MCP support.
Meta officially launched paid subscriptions across Instagram, Facebook, and WhatsApp. Major platform distribution change.
NVIDIA released Cosmos 3, an open model for physical AI reasoning. Focused on robotics/embodied AI.
A 4B-parameter image generation model optimized for local devices using 1-bit quantization.
Original markdown
# Nightly Librarian — Newsletter draft Run: 6963b9c6-3a6d-4b7b-b132-0de453e9eef8 Started: 2026-06-02T06:09:49.957Z Completed: 2026-06-02T06:19:22.351Z ## Worth attention - **ChatGPT for Google Sheets exfiltrates workbooks** https://www.promptarmor.com/resources/gpt-for-google-sheets-data-exfiltration PromptArmor documented that the ChatGPT for Google Sheets add-on exfiltrates workbook data. Active security risk in a widely-used tool. Remove immediately if installed. - **Cloudflare Turnstile requiring fingerprintable WebGL** https://hacktivis.me/articles/cloudflare-turnstile-webgl-fingerprinting Analysis reveals Cloudflare Turnstile now requires WebGL for browser fingerprinting, blocking privacy-hardened browsers. Relevant if you use Turnstile. - **Streambed – Stream Postgres to Iceberg on S3** https://github.com/viggy28/streambed Open source tool that streams Postgres CDC to Apache Iceberg tables on S3, with Postgres wire protocol support. - **MiniMax M3 on Vercel AI Gateway** https://vercel.com/changelog/minimax-m3-on-ai-gateway MiniMax M3, with a 1M-token context window and native multimodality using Sparse Attention, is now available on Vercel AI Gateway. - **n8n 2.22.5-exp.0: MCP access toggle on workflow cards** https://github.com/n8n-io/n8n/releases/tag/n8n%402.22.5-exp.0 n8n's experimental release adds an MCP access toggle directly on workflow cards, signaling first-class MCP support. - **Meta launches Instagram, Facebook, and WhatsApp subscriptions** https://techcrunch.com/2026/05/27/meta-officially-launches-instagram-facebook-and-whatsapp-subscriptions-with-more-to-come-including-ai-plans/ Meta officially launched paid subscriptions across Instagram, Facebook, and WhatsApp. Major platform distribution change. - **NVIDIA Cosmos 3: Open Omni-model for Physical AI Reasoning** https://huggingface.co/blog/nvidia/cosmos-3-for-physical-ai NVIDIA released Cosmos 3, an open model for physical AI reasoning. Focused on robotics/embodied AI. - **1-Bit Bonsai Image 4B: Image Generation for Local Devices** https://prismml.com/news/bonsai-image-4b A 4B-parameter image generation model optimized for local devices using 1-bit quantization.