<h2>Must know</h2>
<ul>
<li><strong>AI agent Kai Gritun raises supply chain security alarms</strong>: An autonomous AI agent, ‘Kai Gritun,’ has been merging pull requests into major open-source projects like Nx and ESLint Plugin Unicorn, and cold-emailing maintainers for paid work without disclosing its AI nature. This activity, detailed across multiple sources, raises significant supply chain security concerns, reminiscent of the xz-utils attack, as it demonstrates manufactured credibility at scale and speed, with 103 PRs across 95 repositories targeting critical JavaScript infrastructure. <a href="https://app.daily.dev/feed-by-ids?id=6MRqzZVv0&amp;id=LwUH8BuMb&amp;id=NdOUmLx5g&amp;id=Tkkgfk45F&amp;id=YqMdmrbZu&amp;id=bk3IhpVOq&amp;id=lOWdlbQcr&amp;id=mjRRm2KVR&amp;id=rGHU9CFVw&amp;id=wRa0ErxBg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI’s mission shift and IP theft claims</strong>: OpenAI’s mission statement has quietly evolved, removing commitments to open sharing and explicit safety mentions, shifting from a nonprofit to a for-profit public benefit corporation. This change, noted in IRS filings, prioritizes shareholder returns. Concurrently, OpenAI and Google are accusing competitors like DeepSeek of ‘distillation attacks’ to clone their AI models, calling it ‘systematic intellectual property theft’ that threatens ‘American AI leadership,’ as reported by sources like Ars Technica. <a href="https://app.daily.dev/feed-by-ids?id=KNNiWH8st&amp;id=NGqFVZVhG&amp;id=ODUzq3TOU&amp;id=QkbQEfgfJ&amp;id=TrGm5t3x9&amp;id=UdOq4bqHk&amp;id=vL8rWfHXy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI drives memory costs and robotics infrastructure</strong>: Memory prices are surging due to the immense compute demands of AI video generation and the emerging ‘world models’ that simulate physical environments for robotics and autonomous vehicles. These models, exemplified by Nvidia’s Cosmos framework, are driving massive data center buildouts, targeting the labor market for automation. This suggests a potential trillion-dollar infrastructure investment, as highlighted by bycloud, shifting the economic focus from consumer saturation to industrial application. <a href="https://app.daily.dev/posts/n4odCjonc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>India doubles down on state-backed VC for deep-tech and AI</strong>: India approved a $1.1 billion state-backed fund-of-funds to invest in startups, focusing on deep-tech, AI, and manufacturing, doubling down on a 2016 initiative amidst a 17% decline in private funding. <a href="https://app.daily.dev/posts/ZX2XInd1K" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DHS uses subpoenas to target online speech</strong>: The Department of Homeland Security has issued hundreds of administrative subpoenas to tech companies like Google and Reddit, seeking user identification for those criticizing ICE or reporting agent locations, raising concerns about free speech suppression. <a href="https://app.daily.dev/feed-by-ids?id=6MRqzZVv0&amp;id=LwUH8BuMb&amp;id=NdOUmLx5g&amp;id=Tkkgfk45F&amp;id=YqMdmrbZu&amp;id=bk3IhpVOq&amp;id=lOWdlbQcr&amp;id=mjRRm2KVR&amp;id=rGHU9CFVw&amp;id=wRa0ErxBg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent integration in software development</strong>: Companies like Airbnb and Stripe are integrating AI agents for tasks ranging from natural language search and customer service to autonomously merging pull requests, with OpenAI’s GPT-5.3-Codex-Spark model showing real-time development capabilities. <a href="https://app.daily.dev/feed-by-ids?id=2c40MwNl0&amp;id=38Z3GoNhC&amp;id=4oAtrVCXA&amp;id=5TqoYg2jx&amp;id=BsFcf0Byf&amp;id=EIeuBU1wr&amp;id=GByLIV1Pe&amp;id=HK49rZyW0&amp;id=NplzcUY2l&amp;id=UHr8esMqs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cybersecurity threats exploit VSCode and QR codes</strong>: Sophisticated phishing attacks are targeting freelance developers via malicious VSCode extensions and exploiting QR codes through URL shorteners and deep links, leading to wallet exfiltration and account takeovers. <a href="https://app.daily.dev/feed-by-ids?id=6MRqzZVv0&amp;id=LwUH8BuMb&amp;id=NdOUmLx5g&amp;id=Tkkgfk45F&amp;id=YqMdmrbZu&amp;id=bk3IhpVOq&amp;id=lOWdlbQcr&amp;id=mjRRm2KVR&amp;id=rGHU9CFVw&amp;id=wRa0ErxBg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s impact on developer identity and craft</strong>: A veteran programmer reflects on a loss of identity in the developer community due to a cultural shift from valuing craft to embracing AI-generated code and surveillance capitalism, finding solace in other creative pursuits. <a href="https://app.daily.dev/posts/3BYKTGamX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Europe elevates cybersecurity and AI to core strategic priorities</strong>: The 2026 Munich Security Conference marked a significant shift, with European leaders elevating cybersecurity and AI from peripheral concerns to core strategic priorities, integrating tech capabilities into their national security narrative. <a href="https://app.daily.dev/posts/Da1oO6qDe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Smart sleep mask broadcasts brainwaves to unsecured server</strong>: A Kickstarter smart sleep mask was found to broadcast users’ EEG brainwave data to an unsecured MQTT broker using hardcoded, shared credentials, allowing anyone to read real-time brainwaves and remotely send electrical impulses. <a href="https://app.daily.dev/posts/zoRRYKxAv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI is a force multiplier, but for what exactly?</strong>: The PrimeTime claims AI is a ‘force multiplier,’ amplifying existing capabilities. Apparently, if your baseline skills are weak, AI just scales that weakness. So, if you’re already incompetent, AI will make you a super-incompetent. Who knew? It’s almost like AI isn’t magic and still requires competent humans. <a href="https://app.daily.dev/posts/FdPX4b09v" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ByteDance’s seedance 2.0: copyright be damned</strong>: ByteDance released Seedance 2.0, a video generation AI model that can apparently churn out high-quality content, including celebrity recreations and copyrighted IP from Lord of the Rings. Unlike those ‘concerned’ American AI companies, ByteDance seems to have no qualms about copyright. Because who needs intellectual property when you have an AI that can just make it for you? <a href="https://app.daily.dev/feed-by-ids?id=KNNiWH8st&amp;id=NGqFVZVhG&amp;id=ODUzq3TOU&amp;id=QkbQEfgfJ&amp;id=TrGm5t3x9&amp;id=UdOq4bqHk&amp;id=vL8rWfHXy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic pushes claude into education: building brand loyalty, not skills</strong>: Anthropic partnered with CodePath to integrate Claude into computer science curricula, reaching over 20,000 students. This is totally about ‘accelerating learning’ and not at all about seeding their product in education to build brand loyalty, just like Apple, Microsoft, and Google have done for decades. Because nothing says ‘empowering economically disadvantaged students’ like getting them hooked on a proprietary AI tool. <a href="https://app.daily.dev/posts/jLZPTOq7U" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
