<h2>Must know</h2>
<ul>
<li><strong>Axios supply chain attack deploys cross platform RAT</strong>: A sophisticated supply chain attack compromised the Axios npm package, affecting versions 1.14.1 and 0.30.4 after a maintainer’s account was hijacked. The malicious versions inject a hidden dependency that deploys a Remote Access Trojan targeting Windows and Linux, which self-destructs after execution to hinder analysis. Security researchers at Socket and StepSecurity recommend pinning to safe versions 1.14.0 or 0.30.3 and rotating all credentials immediately. <a href="https://app.daily.dev/feed-by-ids?id=6mR1VFvvx&amp;id=inEAYcCio&amp;id=zQFdPLgVT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Weaviate Managed C# Client brings EF Core patterns to vector data</strong>: Weaviate has released a technical preview of its Managed .NET Client, allowing developers to define vector schemas using C# attributes directly on model classes. This approach eliminates separate configuration files and enables type-safe LINQ-style queries that compile into vector search filters. The client integrates with <a href="http://ASP.NET" target="_blank" rel="noopener nofollow">ASP.NET</a> Core dependency injection and supports automatic schema migrations with safety checks per Weaviate. <a href="https://app.daily.dev/posts/f35Asc1d9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical Citrix NetScaler vulnerability enables memory leaks</strong>: A critical out-of-bounds memory read vulnerability, CVE-2026-3055, is seeing active exploitation in Citrix NetScaler ADC and Gateway devices. The flaw allows unauthenticated attackers to leak sensitive memory contents, including administrative session tokens and credentials, via malformed requests. WatchTowr researchers warn that Citrix’s bundling of multiple related flaws under one CVE may be misleading for defenders. <a href="https://app.daily.dev/feed-by-ids?id=Kggs3GauU&amp;id=iikwjWKHL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong><a href="http://ABP.IO" target="_blank" rel="noopener nofollow">ABP.IO</a> Platform 10.2 stable released with Studio and CLI upgrade paths</strong>: The latest release of the .NET application framework includes migration guides for breaking changes and enhanced Studio integration. <a href="https://app.daily.dev/posts/MWlS6LrR7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WinApp CLI unifies Windows development across .NET and Rust</strong>: Microsoft’s new tool automates environment setup, manifest generation, and debug identity attachment for multiple frameworks. <a href="https://app.daily.dev/posts/Y5SIfePPI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Lambda boosts limits to 32 GB RAM and 16 vCPUs</strong>: The significant increase from previous limits enables compute-intensive workloads like media transcoding and large-scale data processing. <a href="https://app.daily.dev/posts/jP3XPTAuv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tekton reaches CNCF incubation as Kubernetes native CI/CD</strong>: The framework treats pipelines as standard Kubernetes resources, integrating with Argo CD and Sigstore for supply chain security. <a href="https://app.daily.dev/posts/MPEdmrhRi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>C# 14 introduces extension blocks for static members and operators</strong>: The new syntax allows defining static factory methods and properties on types you don’t own within a static class. <a href="https://app.daily.dev/posts/REHm0dCIj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon Aurora PostgreSQL serverless now supports two click creation</strong>: A new express configuration enables database setup in seconds with preconfigured defaults and IAM-based authentication. <a href="https://app.daily.dev/posts/MjUWMvC5e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Isogeny based cryptography emerges as Bitcoin post quantum candidate</strong>: Isogenies preserve algebraic structures needed for HD wallets and silent payments that other quantum-safe schemes forfeit. <a href="https://app.daily.dev/posts/qzyiFs3xU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The subprime technical debt crisis is coming</strong>: AI agents are currently ‘tokenmaxxing’ to ship features at record speeds, but we’re just deferring the cleanup to a future AI model that might never arrive. Industry warnings suggest we’re building codebases too complex for humans to manage, betting everything on a capability plateau that hasn’t happened yet. It’s a rational short-term play that looks suspiciously like the 2008 mortgage collapse, but for repositories. <a href="https://app.daily.dev/feed-by-ids?id=uLGIp8OgK&amp;id=dl9dAiLtW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sora gets quietly taken behind the shed</strong>: OpenAI abruptly killed Sora just one day after a safety-washing blog post, leaving partners like Disney holding the bag. Ed Zitron points out this is part of a pattern where ‘existential threats to Hollywood’ turn out to be vaporware designed to pump valuation rather than ship product. The AI industry is currently running on letters of intent and media-amplified hype while actual data center load lags far behind the announcements. <a href="https://app.daily.dev/feed-by-ids?id=460WsqsI4&amp;id=xuU3Q5U61" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Algorithm interviews are still a performance art</strong>: Despite AI making LeetCode puzzles trivial to bypass, companies are still using them to measure engineering talent. A CTO confession notes that these tests only evaluate the 5% of the job that involves writing new code, while ignoring the 80% spent debugging and reading documentation. We’re essentially hiring marathon runners by asking them to perform a 100-meter dash while someone watches them through a window. <a href="https://app.daily.dev/feed-by-ids?id=jmJ4lUOji&amp;id=jmJ4lUOji" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
