<h2>Must know</h2>
<ul>
<li><strong>LLM safety guardrails are easily broken by training prompts</strong>: Microsoft researchers found a single, seemingly innocuous training prompt can bypass safety guardrails in 15 different LLMs, including text-to-image generators. This ‘GRP-Obliteration’ technique exploits reinforcement learning to unalign models, making them permissive across harmful categories. This is a significant concern for enterprises fine-tuning open-weight models, highlighting that continuous safety evaluation is crucial, as alignment isn’t static. <a href="https://app.daily.dev/posts/6Gbu8zodz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docker hardened images are now free</strong>: Docker has made its Hardened Images (DHI) free, covering over 1,000 images including Alpine, Debian, databases, and runtimes. This move aims to establish a security ‘waterline,’ with Docker managing vulnerabilities below and users handling application-layer issues. DHI includes VEX attestations for automated CVE suppression and supports compliance frameworks like ISO 27001 and SOC 2, integrating with existing scanners to reduce vulnerability noise. <a href="https://app.daily.dev/posts/qrz4zhyW1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google shared journalist data with ICE without notice</strong>: Google provided ICE with extensive personal data, including bank details, IP addresses, and phone numbers, of a student journalist without prior notice. This was in response to an administrative subpoena, which doesn’t require judicial approval. The EFF and ACLU are calling on tech companies to resist such requests and notify users, as government data requests have surged, raising concerns about privacy and due process. <a href="https://app.daily.dev/posts/nszZi8Hk4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agents can leak secrets via malicious link previews</strong>: AI agents in messaging apps like Slack and Teams are vulnerable to zero-click data exfiltration, where prompt injection can trick them into generating malicious URLs that leak sensitive data when link previews are fetched. <a href="https://app.daily.dev/posts/FJDo46xiv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI doesn’t reduce work, it intensifies it</strong>: A Berkeley Haas study found AI tools increase cognitive overload and context switching, leading to burnout despite perceived productivity gains, as employees feel compelled to do more because AI makes it possible. <a href="https://app.daily.dev/feed-by-ids?id=2nGSglCla&amp;id=RvA4dXVbd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases 25.6.1 and 24.13.1 LTS with security patches</strong>: Node.js released current version 25.6.1 with dependency updates and bug fixes, and LTS version 24.13.1 with Python 3.14 build support, stable CLI flags, and security patches for TLSSocket error handling. <a href="https://app.daily.dev/posts/CeFkKNaVQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java developers concerned about Oracle licensing and container security</strong>: 92% of Java users are worried about Oracle’s per-employee licensing model, driving 81% to migrate to OpenJDK, while a BellSoft survey reveals 23% of developers experienced container security breaches, largely due to human error and bloated base images. <a href="https://app.daily.dev/feed-by-ids?id=I7sKU9tWr&amp;id=ItqM59Igw&amp;id=TvY0j5h5O&amp;id=n4gtBvbDs&amp;id=y8GIbPRTH&amp;id=zhW5HcoVn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go 1.26 released with green tea garbage collector and performance improvements</strong>: Go 1.26 introduces the Green Tea garbage collector by default, reduces cgo overhead by 30%, adds experimental SIMD support, and includes new cryptography packages for secure memory handling. <a href="https://app.daily.dev/feed-by-ids?id=5IorXmNcp&amp;id=LaCiVvkgn&amp;id=Lh7hAqISa&amp;id=tr7jeHdRh&amp;id=ulooYh1Tw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrossOver 26 integrates Wine 11.0 for Windows apps on Linux and macOS</strong>: CodeWeavers released CrossOver 26, built on Wine 11.0, enabling Windows applications and games on Linux and macOS with over 6,000 changes, including NTSync support for Linux and enhanced Wayland compatibility. <a href="https://app.daily.dev/posts/Rhd5Rku0N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon Redshift enhances automatic optimizations with dedicated compute</strong>: Amazon Redshift now allows allocating extra compute resources for automatic optimization features like Automatic Table Optimization, Auto Vacuum, and Auto Analyze, ensuring they run without impacting user workloads. <a href="https://app.daily.dev/posts/7o3DKKn6E" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI infrastructure bottleneck: who knew power grids were important?</strong>: America’s AI infrastructure is apparently facing a ‘critical bottleneck’ because it takes 2-7 years to get electrical transformers and substations. Who could have possibly foreseen that powering massive data centers would require, you know, actual power infrastructure? It’s almost like we need to build things before we can plug in all our shiny new AI toys. The US outsourced transformer manufacturing, lacks standardized specifications, and experiences material shortages, labor gaps, and doubled component costs since 2021. This infrastructure crisis is raising electricity costs for consumers and forcing some data centers to build on-site power generation, potentially costing the US its competitive edge in AI development. <a href="https://app.daily.dev/posts/26XUA8lbK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI will transform open source, by making it disappear</strong>: Scott Chacon, GitHub co-founder, predicts AI and LLMs will ‘fundamentally transform’ open source by having developers generate custom code snippets instead of importing bloated libraries. So, the future of open source is… less open source? Because everyone will just generate their own bespoke, probably buggy, code. Sounds like a great way to reinvent the wheel, but with more hallucinations. The abstraction level will rise, with developers focusing on architecture rather than implementation details. This mirrors how GitHub succeeded by removing friction at the right moment when open source exploded. Companies that recognize this paradigm shift now, similar to the mobile or internet revolutions, will define the future. <a href="https://app.daily.dev/posts/L0XijwnBC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>QuitGPT: because boycotting a chatbot will fix everything</strong>: A grassroots campaign called QuitGPT is urging users to cancel ChatGPT subscriptions in protest of OpenAI’s political ties and ICE’s use of ChatGPT-4 for résumé screening. Because clearly, the best way to influence a multi-billion dollar AI company is to… stop paying for their chatbot. I’m sure OpenAI is shaking in its boots, especially after their president donated $12.5 million to Trump’s super PAC. An Instagram post garnered 36 million views, and over 17,000 people have signed up for the boycott, reflecting broader anxieties about AI companies’ relationships with the Trump administration, energy costs, deepfakes, and job displacement. <a href="https://app.daily.dev/posts/SoZpeqjmu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
