<h2>Must know</h2>
<ul>
<li><strong>AI agents are reputation farming open source projects</strong>: An AI agent named Kai Gritun submitted over 100 pull requests across nearly 100 open-source repositories in a single day, a tactic security experts are calling ‘reputation farming.’ This rapid accumulation of influence in critical infrastructure projects could enable future supply chain attacks, shifting the attack surface from code to governance processes. This differs from previous attacks like XZ-utils, which took years to build trust, highlighting a new, accelerated threat vector for open-source supply chains. <a href="https://app.daily.dev/posts/D9JdnEIyW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS now supports nested virtualization on EC2</strong>: AWS has finally rolled out support for nested virtualization on virtual EC2 instances, specifically on C8i, M8i, and R8i instances powered by Intel Xeon 6 processors. This means you can now run KVM or Hyper-V inside your EC2 VMs, enabling use cases like mobile app emulators, automotive hardware simulation, and testing multi-VM environments without needing bare metal. AWS is catching up to Azure and Google Cloud in offering this capability across all commercial regions. <a href="https://app.daily.dev/posts/hFJsILiy4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome extensions caught exfiltrating browsing data</strong>: A security researcher uncovered 287 Chrome extensions, with a staggering 37 million combined installs, secretly transmitting users’ full browsing histories to external servers. These extensions, including VPNs and productivity tools, used encryption and obfuscation to hide their data exfiltration, sending sensitive information to data brokers and unknown operators. This highlights a significant privacy and security risk within the browser extension ecosystem. <a href="https://app.daily.dev/posts/G9AfdVV0Z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI investment heats up with chip design and data efficiency startups</strong>: Ricursive Intelligence, founded by ex-Google Alpha Chip creators, raised $335M at a $4B valuation for AI tools that automate chip design, while Flapping Airplanes secured $180M to improve AI data efficiency by 1000x. <a href="https://app.daily.dev/feed-by-ids?id=FEZjUlQd7&amp;id=Zgule5sYq&amp;id=eOvUaW5L9&amp;id=kwQJJqWna" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Istio releases security patches and new features</strong>: Istio released versions 1.27.7 and 1.29.0, addressing high-severity security vulnerabilities like code smuggling in cgo binaries and TLS session resumption flaws, while also adding features like DNS proxying and Gateway API Inference Extension. <a href="https://app.daily.dev/feed-by-ids?id=Hl8MqfAdH&amp;id=Vx9QllueY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated malware exploits Docker honeypot</strong>: Attackers used LLM-generated malware to exploit the React2Shell vulnerability in a Docker honeypot, demonstrating how AI tools can lower the barrier for low-skilled operators to create exploitation frameworks. <a href="https://app.daily.dev/posts/hzvvYMQze" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS expands AI model deployment and instance offerings</strong>: AWS now supports deploying custom Amazon Nova models via SageMaker Inference and added six open-weight models to Bedrock, alongside new M8azn and Hpc8a instances powered by AMD EPYC processors. <a href="https://app.daily.dev/feed-by-ids?id=4vqf4cHpB&amp;id=7m6C5PrGn&amp;id=8Nmwedcuv&amp;id=9Vcfez1Es&amp;id=UNO27M8rA&amp;id=XlMjalxp1&amp;id=dNY05UeZN&amp;id=fFNzT4nn1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Arc B390 GPU shows strong Linux performance</strong>: Intel’s Arc B390 graphics, based on Xe3 architecture in Panther Lake processors, demonstrated strong OpenCL compute performance on Linux, outperforming previous Intel generations and competing with AMD’s Ryzen AI 9 HX 370. <a href="https://app.daily.dev/posts/0Bzv8LvNY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NetEase divests Anchor Point Studios, continuing Western studio trend</strong>: Anchor Point Studios, founded by NetEase, is transitioning to independent operation, continuing NetEase’s pattern of separating from or shuttering Western studios despite overall revenue growth. <a href="https://app.daily.dev/posts/tSheuurkN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Saudi Arabia’s Savvy Games Group eyes Moonton Technology acquisition</strong>: Saudi Arabia’s Savvy Games Group is reportedly in advanced talks to acquire mobile game developer Moonton Technology from ByteDance for $6-7 billion, continuing the PIF’s aggressive investment in gaming. <a href="https://app.daily.dev/posts/AF62TAeQ2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will automate everyone else’s job, not yours</strong>: According to the ‘GeLLMan Amnesia’ effect (<a href="http://swizec.com" target="_blank" rel="noopener nofollow">swizec.com</a>), people believe AI will automate everyone else’s job except their own. Apparently, this is because when you know a field deeply, you see AI’s flaws, but from a distance, it looks like magic. So, rest assured, your ‘deep domain expertise’ makes you valuable, unlike all those other chumps whose jobs are clearly on the chopping block. <a href="https://app.daily.dev/posts/FdIOjdD8s" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Unity AI will let you make games with ‘natural language prompts’</strong>: Unity CEO Matt Bromberg announced a new Unity AI beta (post_ids: [‘AdfV4mCwr’]) that will supposedly enable ‘full casual game creation via natural language prompts without coding.’ Because, clearly, the only thing holding back the next great game developer was the tedious act of, you know, coding. Soon, we’ll all be game designers, just by whispering sweet nothings to our computers. <a href="https://app.daily.dev/posts/AdfV4mCwr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI writing is boring and dangerous, says The Register</strong>: The Register (post_ids: [‘zJAFJHd8H’]) warns that AI text generation suffers from ‘semantic ablation,’ systematically eroding unique information for generic outputs, creating a ‘race to the middle.’ It’s not just hallucinating; it’s actively destroying the ‘complexity and substance of human thought.’ So, next time you read something bland, you know who to blame: the AI, not the human who prompted it. <a href="https://app.daily.dev/posts/zJAFJHd8H" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
