<h2>Must know</h2>
<ul>
<li><strong>xAI sees senior engineer and co-founder departures</strong>: Nine engineers, including two co-founders, have publicly left xAI in the past week, bringing the total to over half of the founding team. These departures coincide with regulatory scrutiny over Grok’s generation of nonconsensual explicit deepfakes and xAI’s upcoming IPO, raising questions about the company’s stability and governance. Departing engineers cite a desire for more autonomy to build frontier AI technology in smaller teams. <a href="https://app.daily.dev/posts/Am4GYAifG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>North Korean UNC1069 targets crypto with macOS backdoors</strong>: North Korean threat actor UNC1069 is executing a sophisticated social engineering campaign targeting cryptocurrency organizations. They use tactics like compromised Telegram accounts and fake Zoom meetings with AI-generated video to trick victims into executing malicious terminal commands. This deploys previously undocumented macOS backdoors (WAVESHAPER, HYPERCALL, DEEPBREATH) to bypass security and steal sensitive data, browser credentials, and keychain material. <a href="https://app.daily.dev/posts/WHtUJSDcB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI security threats and agent vulnerabilities intensify</strong>: OpenAI disbanded its mission alignment team, which focused on safe and trustworthy AI, reassigning its leader and other members. This comes as GitGuardian secured $50M to address secrets sprawl and non-human identity management driven by AI adoption, highlighting the explosion of machine identities. Meanwhile, AI-powered deepfakes and ‘AI Recommendation Poisoning’ are creating unprecedented cybersecurity threats, automating sophisticated phishing and manipulating AI model outputs with hidden instructions. <a href="https://app.daily.dev/feed-by-ids?id=IO6hLocFc&amp;id=MZmobK75f&amp;id=NhCMJ1Tfp&amp;id=QEFiurih6&amp;id=a3FxaIBGB&amp;id=bbgCShUl6&amp;id=BOPPPXswR&amp;id=l6YXyvUlc&amp;id=oUCth2teJ&amp;id=y2ffWaFo0" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>PyTorch Foundation expands scope and leadership</strong>: The PyTorch Foundation has evolved into a multi-project ecosystem, now hosting PyTorch, vLLM, DeepSpeed, and Ray, with Mark Collier (OpenStack/OpenInfra founder) joining as the new Executive Director. <a href="https://app.daily.dev/feed-by-ids?id=2JQZDZ3HD&amp;id=6KtxamPBN&amp;id=CAIsBRQIQ&amp;id=pbGBRZXIy&amp;id=s66cOa3Zf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS expands Bedrock with new open-weights models</strong>: AWS Bedrock now supports six new open-weights models including DeepSeek V3.2, MiniMax M2.1, GLM 4.7, GLM 4.7 Flash, Kimi K2.5, and Qwen3 Coder Next, powered by Project Mantle for serverless inference. <a href="https://app.daily.dev/feed-by-ids?id=Cz6yy5eBn&amp;id=ECDwDfs6e&amp;id=Icopsz5xX&amp;id=P3wZVEdCT&amp;id=aUv9H6q2u" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes drives AI expansion but culture is key</strong>: Kubernetes is now the dominant infrastructure for AI workloads with 82% production adoption, but organizational culture and lack of cross-functional collaboration are the biggest barriers to scaling AI initiatives. <a href="https://app.daily.dev/posts/MrQz3g4zd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>VS Code 1.109 enhances AI agent mode</strong>: VS Code 1.109 introduces AI-powered features like agent clarifying questions, MCP apps support, default agent skills, parallel sub-agent execution, and expanded AI model options (Claude, Codex) via GitHub Copilot. <a href="https://app.daily.dev/feed-by-ids?id=QJP16aVAU&amp;id=3R577f5zF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Erlang/OTP 29.0-rc1 released with new features</strong>: Erlang/OTP 29.0-rc1 introduces native records, multi-valued comprehensions, a new <code>is_integer/3</code> guard BIF, and defaults SSH to quantum-resistant <code>mlkem768x25519-sha256</code> key exchange. <a href="https://app.daily.dev/posts/fTCktIrzF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Garn build system evaluation speedup</strong>: Garn, an alternative Nix frontend, announced significant evaluation speed improvements using TypeScript and trace-based caching, reducing evaluation time from 800ms to 16ms in some scenarios. <a href="https://app.daily.dev/posts/edQlVXp7C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Self-hosted ngrok alternative pgrok released</strong>: pgrok is a new self-hosted alternative to ngrok for exposing local development ports to the internet, using SSH tunnels and Caddy for HTTPS, with an interactive TUI dashboard. <a href="https://app.daily.dev/posts/vLqBkWMrt" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI skill scanners for agent marketplaces are false security</strong>: An opinion piece claims community-built AI skill scanners for agent marketplaces are inadequate for detecting malicious intent, providing ‘false security’ and potentially being malware themselves. Apparently, relying on regex for AI security is about as effective as using a colander to bail out a sinking ship. Who knew that sophisticated attacks could bypass simple pattern matching? Shocking. <a href="https://app.daily.dev/posts/REdcjExfJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI makes tech workers work longer hours</strong>: A Harvard Business Review study found that generative AI led to tech workers taking on more tasks, working longer hours, and reducing breaks, ultimately increasing cognitive fatigue and burnout. So, the promise of AI making our lives easier actually means we just get to do more work, faster, until we collapse. Progress! <a href="https://app.daily.dev/posts/mEvZkBSFL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI scraper shuts down self-hosted git server</strong>: A developer shut down their self-hosted git server after 14 years due to overwhelming traffic from AI scrapers, which caused inefficient requests and a disk space outage. It seems AI is so smart it can’t even scrape politely, forcing open-source maintainers to migrate to corporate platforms. Thanks, AI, for helping centralize the internet, one scraped server at a time. <a href="https://app.daily.dev/posts/l8YCDT7qf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
