<h2>Must know</h2>
<ul>
<li><strong>Google shares journalist’s data with ICE without notice</strong>: Google provided extensive personal data, including bank details and IP addresses, of a student journalist to ICE in response to an administrative subpoena. This occurred without prior notice to the journalist, Amandla Thomas-Johnson, or an opportunity to challenge the request. Critics like the EFF and ACLU argue that tech companies are not legally obligated to comply with such subpoenas without judicial approval and should notify users. <a href="https://app.daily.dev/posts/nszZi8Hk4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical RCE flaw patched in BeyondTrust remote access products</strong>: BeyondTrust has released patches for a critical 9.9-severity Remote Code Execution (RCE) flaw, CVE-2026-1731, affecting its self-hosted Remote Support and Privileged Remote Access products. The vulnerability requires no authentication for exploitation and was discovered by Hacktron AI using AI-enabled variant analysis. Given BeyondTrust’s widespread enterprise adoption, this is a high-priority patch. <a href="https://app.daily.dev/posts/5QKIgzQLm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft researchers find new way to disable LLM safety guardrails</strong>: Microsoft researchers discovered ‘GRP-Obliteration,’ a technique that uses a single benign training prompt to systematically disable safety guardrails in 15 major language models across 44 harmful categories. This vulnerability requires training access to fine-tune open-weight models, making it particularly concerning for enterprises customizing models. They recommend continuous safety evaluation and treating model customization as a controlled risk. <a href="https://app.daily.dev/posts/6Gbu8zodz" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Docker hardened images now free for over 1,000 images</strong>: Docker has made its Hardened Images (DHI) free, covering over 1,000 images including Alpine, Debian, databases, and runtimes, establishing a security ‘waterline’ and providing VEX attestations for automated CVE suppression. <a href="https://app.daily.dev/posts/qrz4zhyW1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FastAPI cloud launches for simplified python deployment</strong>: FastAPI Cloud, a new platform backed by Sequoia Capital, simplifies FastAPI application deployment with a single command, handling HTTPS, auto-scaling, and infrastructure complexity on Kubernetes. <a href="https://app.daily.dev/posts/37dupllnW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 kernel introduces BPF filtering for io_uring</strong>: Linux 7.0 now supports BPF filtering for io_uring, addressing a long-standing incompatibility with seccomp and enabling fine-grained control over operations in containerized environments without sacrificing performance. <a href="https://app.daily.dev/feed-by-ids?id=7pxKDEDEZxZ&amp;id=RL4bMHXJh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrossOver 26 released with wine 11.0 for windows apps on linux and macos</strong>: CodeWeavers released CrossOver 26, a commercial compatibility layer built on Wine 11.0, enabling Windows applications and games to run on Linux and macOS with over 6,000 changes, including NTSync support and enhanced Wayland compatibility. <a href="https://app.daily.dev/posts/Rhd5Rku0N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pure C implementation of mistral’s voxtral 4B speech-to-text model released</strong>: Antirez released a pure C implementation of Mistral’s Voxtral Realtime 4B speech-to-text model with zero external dependencies, Metal GPU acceleration for Apple Silicon, and streaming output with a rolling KV cache. <a href="https://app.daily.dev/posts/oP3oVz2Y3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Singapore evicts china-linked apt from telecom networks</strong>: Singapore completed an 11-month operation to remove the China-linked APT group UNC3886 from all four major telecom networks, highlighting ongoing threats to critical telecommunications infrastructure. <a href="https://app.daily.dev/posts/1bYeU0flC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Android gradle plugin 9.0 introduces fused library plugin</strong>: Android Gradle Plugin 9.0 introduces the Fused Library plugin, allowing developers to merge multiple internal library modules into a single Android library for easier publishing while maintaining modular architecture. <a href="https://app.daily.dev/posts/yq22r0CNv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Riot games lays off 80 2XKO developers weeks after console launch</strong>: Riot Games laid off nearly half of its 2XKO fighting game team, about 80 developers, just weeks after the game’s console launch. Executive producer Tom Cannon cited ‘insufficient momentum to sustain the current team size long-term.’ Apparently, after seven years in development, they just realized the game wasn’t going to be a smash hit overnight. Who needs foresight when you have layoffs? <a href="https://app.daily.dev/posts/qsHmfsc9N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Volvo employee data exposed in conduent breach</strong>: Nearly 17,000 Volvo employees had their personal data, including health plan records, exposed due to a cyberattack on Conduent, an HR outsourcing provider. The SafePay ransomware group had access to Conduent’s systems for nearly three months. This is Volvo’s second third-party breach in recent years, proving that outsourcing your HR data security is a fantastic idea, especially when the ‘experts’ can’t keep the bad guys out for a quarter of a year. <a href="https://app.daily.dev/posts/WVPYx5Tqb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI vastly reduced stress of IPv6 migrations in experiment</strong>: A university experiment claims generative AI reduced cognitive load on network engineers during IPv4 to IPv6 migrations by 65-72%, cutting completion times from hours to seconds. They built ‘Net AI Copilot’ to automate configurations and generate Ansible playbooks. Because, you know, the real problem with IPv6 adoption was always the ‘cognitive load’ of network engineers, not the decades of inertia, cost, and lack of compelling business drivers. Sure, AI will fix that. <a href="https://app.daily.dev/posts/e9OZK0ZNf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
