<h2>Must know</h2>
<ul>
<li><strong>Volvo employee data exposed in major Conduent breach</strong>: Nearly 17,000 Volvo employees had their personal data exposed due to a cyberattack on Conduent, an HR outsourcing provider. Attackers accessed Conduent’s systems for almost three months, compromising health plan records, names, and other personal information. This incident, claimed by the SafePay ransomware group, is part of a larger breach affecting millions and marks Volvo’s second third-party breach in recent years. <a href="https://app.daily.dev/posts/WVPYx5Tqb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LLM safety guardrails vulnerable to training prompt exploitation</strong>: Microsoft researchers found a technique, GRP-Obliteration, that bypasses safety guardrails in 15 different LLMs by exploiting reinforcement learning methods. A single, seemingly mild training prompt was enough to make models permissive across harmful categories, affecting both text and text-to-image generators. This highlights a significant vulnerability for enterprises fine-tuning open-weight models, emphasizing the need for continuous safety evaluation. <a href="https://app.daily.dev/posts/6Gbu8zodz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docker hardened images now free</strong>: Docker has made its Hardened Images (DHI) free, covering over 1,000 images including Alpine, Debian, databases, and runtimes. DHI aims to establish a security “waterline” by managing vulnerabilities below the application layer and providing supply chain isolation through controlled rebuilds with VEX attestations for automated CVE suppression. This move is intended to simplify compliance and reduce vulnerability noise for developers. <a href="https://app.daily.dev/posts/qrz4zhyW1" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Laravel PDF v2 introduces driver-based architecture</strong>: Spatie’s laravel-pdf v2 introduces a driver-based architecture, allowing developers to choose between multiple PDF generation backends like Browsershot, Cloudflare Browser Rendering API, DomPdf, and Gotenberg, alongside new features like queued PDF generation and metadata support. <a href="https://app.daily.dev/posts/VRcQzPuNQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases current and LTS updates</strong>: Node.js released versions 25.6.1 (Current) and 24.13.1 (LTS), bringing dependency updates, bug fixes, and security patches, with the LTS version adding Python 3.14 build support and promoting heap snapshot CLI flags to stable. <a href="https://app.daily.dev/posts/CeFkKNaVQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go 1.26 released with performance and security updates</strong>: Go 1.26 was released, featuring the Green Tea garbage collector by default, a 30% reduction in cgo overhead, experimental SIMD support, and new cryptography packages for secure memory handling. <a href="https://app.daily.dev/posts/5IorXmNcp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrossOver 26 brings Wine 11.0 to Linux and macOS</strong>: CodeWeavers released CrossOver 26, built on Wine 11.0, enabling Windows applications and games to run on Linux and macOS with NTSync support for improved game performance on Linux and enhanced Wayland compatibility. <a href="https://app.daily.dev/posts/Rhd5Rku0N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon Redshift enhances automatic optimizations</strong>: Amazon Redshift now allows allocating dedicated compute resources for automatic optimization features like Automatic Table Optimization, Auto Vacuum, and Auto Analyze, ensuring they run without impacting user workloads. <a href="https://app.daily.dev/posts/7o3DKKn6E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mistral Voxtral Realtime 4B C implementation released</strong>: A pure C implementation of Mistral’s Voxtral Realtime 4B speech-to-text model was released, featuring zero external dependencies, Metal GPU acceleration for Apple Silicon, and streaming output with incremental audio processing. <a href="https://app.daily.dev/posts/oP3oVz2Y3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Jakarta EE 12 M2 introduces unified query language</strong>: Jakarta EE 12 Milestone 2 introduces Jakarta Query, a unified query language for SQL and NoSQL databases, consolidating JPQL and JDQL, and establishes Java 21 as its baseline. <a href="https://app.daily.dev/posts/n4gtBvbDs" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Riot Games lays off 2XKO developers after launch</strong>: Riot Games laid off nearly half of its 2XKO fighting game development team, citing “insufficient momentum” just weeks after the game’s console launch. Apparently, a game that’s been in development since 2019 and just expanded to consoles can still lack “momentum.” Maybe they should have checked the momentum <em>before</em> the launch party? <a href="https://app.daily.dev/posts/qsHmfsc9N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI magically fixes IPv6 migrations, apparently</strong>: A university experiment claims generative AI reduced cognitive load for network engineers during IPv6 migrations by 65-72%, cutting completion times from hours to seconds. So, AI can magically fix decades of network complexity, but the CIO is still worried about token pricing and vendor lock-in. Priorities, people. <a href="https://app.daily.dev/posts/e9OZK0ZNf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google shares journalist data with ICE, because privacy</strong>: Google provided ICE with extensive personal data of a student journalist, including bank details and IP addresses, without prior notice. Google’s transparency reports show overwhelming compliance with millions of government requests. But don’t worry, they’re totally committed to your privacy, just not when a government agency asks nicely (without a warrant). <a href="https://app.daily.dev/posts/nszZi8Hk4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
