<h2>Must know</h2>
<ul>
<li><strong>European Commission cloud hit by supply chain attack</strong>: The European Commission’s infrastructure suffered a major breach after attackers compromised Trivy, a popular open-source security scanner, according to EU-CERT. Approximately 92 GB of data, including staff emails and personal information across dozens of EU institutions, was exfiltrated and leaked. This incident follows a similar compromise of the LiteLLM system, highlighting a systemic vulnerability in how security tooling is integrated into cloud pipelines. <a href="https://app.daily.dev/posts/mGRwKz2VN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Axios compromised in npm supply chain breach</strong>: The ubiquitous Axios library, which sees over 100 million weekly downloads, was briefly hijacked after a maintainer’s account was compromised to push a malicious release. The update included a ‘plain-cryptojs’ dependency designed to exfiltrate AWS and GCP secrets along with local credentials. While the npm security team patched the issue within four hours, the event serves as a stark reminder to pin versions and use lockfiles for all production dependencies. <a href="https://app.daily.dev/posts/X7PCk5NAZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor 3 pivots from IDE to agent orchestrator</strong>: The new ‘Glass’ release of Cursor signals a strategic shift where the traditional code editor is now a secondary fallback to a centralized agent management console. New features include ‘Cloud Handoff’ for session portability and ‘Automations’ for event-triggered agents, positioning the developer more as a systems operator than a writer of syntax. This move directly counters Anthropic’s terminal-first Claude Code and OpenAI’s multi-surface approach in the race for the dominant AI development interface. <a href="https://app.daily.dev/posts/GsQ26ueQa" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Neovim 0.12.0 adds native autocomplete and plugin management</strong>: The latest release introduces ‘vim.pack’ for built-in package management and native LSP-driven auto-completion to reduce dependency on heavy third-party Lua plugins. <a href="https://app.daily.dev/feed-by-ids?id=3fbVLSQI2&amp;id=T9nUhWoBa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Karpathy proposes the LLM-maintained personal wiki pattern</strong>: Instead of standard RAG, this architecture uses LLMs to incrementally build and ‘lint’ a persistent, interlinked markdown knowledge base to ensure compounding information value. <a href="https://app.daily.dev/posts/7o1BSKg72" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Aegis Terra 1 launches as fully open source silicon</strong>: Unlike projects that reverse-engineer proprietary chips, Aegis provides a complete open-source FPGA fabric from the silicon level up to the synthesis toolchain. <a href="https://app.daily.dev/posts/9mxY3iV8A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust tail-call interpreter outperforms hand-written assembly</strong>: Using the nightly ‘become’ keyword, a new Uxn emulator implementation achieves superior performance on ARM64 by mapping VM state directly to registers via calling conventions. <a href="https://app.daily.dev/posts/v5awwh224" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ruby version management shifts toward precompiled binaries</strong>: New tools like ‘rv’ and ‘mise’ are replacing rbenv and RVM by offering near-instant installs via architecture-matched binaries instead of slow local compilation. <a href="https://app.daily.dev/feed-by-ids?id=II5rHR9XP&amp;id=iRc7VAJo1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Snowflake Interactive Ecosystem targets low-latency concurrency</strong>: New specialized tables and warehouses use a strict five-second query timeout and mandatory clustering to handle massive concurrent dashboard workloads at 40% lower cost. <a href="https://app.daily.dev/posts/HKFXyflxE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ryx ORM releases the Python GIL for database calls</strong>: This new Rust-backed Python ORM utilizes PyO3 to enable true asynchronous database access, reportedly reducing wait times from 87% to 11% in FastAPI benchmarks. <a href="https://app.daily.dev/posts/0TeARnMMJ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The $250 whiteboard sketch generator</strong>: Google’s NotebookLM now offers ‘Cinematic Video Overviews’ that turn your notes into animations, but the catch is a $250/month AI Ultra subscription and a laughable limit of two videos per day. It is essentially a very expensive way to watch a bot draw on a digital whiteboard while you wait for your daily quota to reset. If you wanted to actually iterate on a project, you’re better off just using a real whiteboard and a camera. <a href="https://app.daily.dev/posts/QHfkwP567" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe-coding is just a fancy word for spaghetti</strong>: Developers are celebrating ‘vibe-coding’ with Claude Code, only to admit later that the resulting AI-generated mess required a total rewrite in Rust to be functional. It turns out that ‘removing the intimidation of the terminal’ is just another way of saying ‘I have no idea what my code is doing until it breaks.’ AI is great for checkable implementation, but it still has the architectural taste of a blender. <a href="https://app.daily.dev/feed-by-ids?id=fxPxl1DNh&amp;id=LLeW9ewMf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The blank box productivity trap</strong>: Enterprise software is replacing functional homepages with empty AI chat boxes, effectively offloading the cognitive burden of navigation onto the user. Proponents call it ‘intent-first,’ but critics rightly point out that it destroys muscle memory and provides zero guidance for complex workflows. It’s not a feature; it’s a ‘we couldn’t figure out the UI’ admission of defeat. <a href="https://app.daily.dev/posts/4kvvQJknf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
