<h2>Must know</h2>
<ul>
<li><strong>LLM safety guardrails vulnerable to training prompt exploitation</strong>: Microsoft researchers found a technique, GRP-Obliteration, that bypasses safety guardrails in 15 different LLMs using a single, seemingly mild training prompt. This vulnerability, which also affects text-to-image generators, causes models to become permissive across harmful categories, raising concerns for enterprises fine-tuning open-weight models. It requires training access, not just inference-time manipulation, highlighting the need for continuous safety evaluation. <a href="https://app.daily.dev/posts/6Gbu8zodz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docker hardened images now free</strong>: Docker announced its Hardened Images (DHI) are now free, covering over 1,000 images including Alpine, Debian, databases, and runtimes. DHI aims to establish a security “waterline” by managing vulnerabilities below the application layer and providing supply chain isolation through controlled rebuilds. These images include VEX attestations for automated CVE suppression and support compliance frameworks like ISO 27001 and SOC 2. <a href="https://app.daily.dev/posts/qrz4zhyW1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Volvo employee data exposed in Conduent breach</strong>: Nearly 17,000 Volvo employees had personal data exposed due to a cyberattack on Conduent, an HR outsourcing provider. The SafePay ransomware group claimed responsibility for accessing Conduent’s systems for nearly three months, compromising health plan records, names, and other personal information. This marks Volvo’s second third-party breach in recent years and is part of a larger incident affecting millions of Americans. <a href="https://app.daily.dev/posts/WVPYx5Tqb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>LiftKit: a UI framework for perfectionists</strong>: LiftKit is an open-source UI framework built around golden-ratio proportions with subpixel accuracy, offering modular controls for global colors, typography, and component styling, available for React/Next.js, Webflow, and Figma. <a href="https://app.daily.dev/posts/OJ61Gkb7k" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>UI Builder: a no-code visual editor for shadcn/ui</strong>: UI Builder is a shadcn/ui package that adds a visual, no-code editor to React applications, enabling non-developers to compose pages and dashboards using existing React components, with support for dynamic data binding and integration with shadcn/ui. <a href="https://app.daily.dev/posts/JGPYOfJIn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FormSCN: shadcn/ui form builder with better auth</strong>: FormSCN is a visual form builder for shadcn/ui that allows drag-and-drop design, live preview, and export of production-ready TypeScript code, supporting React Hook Form and TanStack Form with Zod schema validation. <a href="https://app.daily.dev/posts/zLqmBgJDZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Waku 1.0 alpha stabilizes APIs</strong>: Waku 1.0 alpha, a minimal React framework built on Vite and Hono, stabilized its public APIs, focusing on bug fixes and compatibility while supporting React 19 features like server components. <a href="https://app.daily.dev/posts/sMv4JRpLZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrossOver 26 released with Wine 11.0 integration</strong>: CrossOver 26, built on Wine 11.0, enables Windows applications and games to run on Linux and macOS, featuring NTSync support for improved game performance on Linux and enhanced Wayland compatibility. <a href="https://app.daily.dev/posts/Rhd5Rku0N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases 25.6.1 and 24.13.1 LTS</strong>: Node.js released versions 25.6.1 (Current) and 24.13.1 (LTS), bringing dependency updates, bug fixes, and security patches, with the LTS version adding Python 3.14 build support and promoting heap snapshot CLI flags to stable. <a href="https://app.daily.dev/posts/CeFkKNaVQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go 1.26 released with performance and language improvements</strong>: Go 1.26 was released, introducing the Green Tea garbage collector by default, reducing cgo overhead by 30%, and adding experimental SIMD support for performance improvements, along with new language features and cryptography packages. <a href="https://app.daily.dev/posts/5IorXmNcp" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Google shares journalist data with ICE</strong>: Google, in its infinite wisdom, decided to hand over a student journalist’s extensive personal data to ICE without prior notice or a court order. Because, you know, administrative subpoenas are totally fine for federal agencies to issue without judicial approval, and tech companies are just here to help. The EFF and ACLU are, predictably, not amused, calling for tech companies to resist these requests. But hey, Google’s transparency reports show they comply with millions of government requests, so what’s one more journalist’s privacy, right? <a href="https://app.daily.dev/posts/nszZi8Hk4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI tools lead to burnout, not productivity</strong>: A Harvard Business Review study found that AI tools lead to burnout and expanded to-do lists, with work bleeding into personal hours, despite no management pressure. Apparently, employees feel compelled to do more because AI makes it possible, tripling expectations while productivity gains remain modest. So, AI isn’t making us more efficient; it’s just making us work harder for the same output, all while feeling guilty for not leveraging the “power of AI” enough. What a dream. <a href="https://app.daily.dev/posts/RvA4dXVbd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Riot Games lays off 80 2XKO developers</strong>: Riot Games laid off approximately 80 developers from its 2XKO fighting game team, nearly half the global staff, just weeks after the game’s console launch. Executive producer Tom Cannon cited “insufficient momentum to sustain the current team size long-term.” So, after years of development and a recent launch, the game suddenly lacks momentum? Or perhaps, the momentum was never there, and the layoffs are just a convenient way to cut costs after the initial hype cycle. Either way, another round of developers gets to experience the joy of corporate restructuring. <a href="https://app.daily.dev/posts/qsHmfsc9N" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
