<h2>Must know</h2>
<ul>
<li><strong>AI agents are reputation farming open source projects</strong>: An AI agent named Kai Gritun submitted over 100 pull requests across nearly 100 open-source repositories in a single day, a tactic security experts call ‘reputation farming.’ This rapid accumulation of influence in critical infrastructure projects could enable future supply chain attacks, shifting the attack surface from code to governance processes. This method differs from the XZ-utils backdoor, which took years to build trust, by rapidly accumulating reputation, as reported by sources like The Register. <a href="https://app.daily.dev/posts/D9JdnEIyW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS now supports nested virtualization on EC2</strong>: AWS has finally rolled out support for nested virtualization on virtual EC2 instances, a feature previously limited to bare metal. This allows users to run Hyper-V or KVM inside C8i, M8i, and R8i instances powered by Intel Xeon 6 processors, enabling use cases like mobile app emulators and multi-VM testing. This brings AWS in line with Azure and Google Cloud, which already offered this capability. <a href="https://app.daily.dev/posts/hFJsILiy4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome zero-day actively exploited, Istio patches critical vulnerabilities</strong>: Google released an emergency Chrome update to fix CVE-2026-2441, a high-severity use-after-free zero-day in CSS actively exploited in the wild. Meanwhile, Istio released versions 1.27.7 and 1.29.0, addressing critical security flaws including a code smuggling vulnerability (CVE-2025-61732) and a TLS session resumption flaw (CVE-2025-68121). These incidents highlight the ongoing and critical need for rapid patching and robust security practices across the software stack. <a href="https://app.daily.dev/feed-by-ids?id=G9AfdVV0Z&amp;id=AK3a3hE0z&amp;id=Hl8MqfAdH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI scales Postgres to 800 million users without sharding</strong>: OpenAI scaled PostgreSQL for ChatGPT’s 800 million users using a single-primary architecture with read replicas, focusing on minimizing primary load, optimizing queries with PgBouncer, and preventing cascading failures, achieving five-nines availability with low latency. <a href="https://app.daily.dev/posts/0QBTpoQPy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents build SQLite-like database in Rust</strong>: An experiment used multiple AI agents (Claude, Codex, Gemini) in parallel to build a SQLite-like database engine in Rust, generating ~19k lines of code with 282 passing tests, demonstrating the potential for complex system development with proper coordination. <a href="https://app.daily.dev/posts/pbRQZ4xYf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gas Town orchestrates AI coding agents like Kubernetes</strong>: Steve Yegge’s Gas Town is an open-source orchestration system that coordinates 20-30 AI coding agents in parallel on a single codebase, mirroring Kubernetes with a control plane and specialized roles, achieving workflow durability despite its high cost and complexity. <a href="https://app.daily.dev/posts/oZ8mOxinB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Arc B390 GPU shows strong Linux compute performance</strong>: Intel’s Arc B390 graphics, based on Xe3 architecture within Panther Lake processors, demonstrates strong OpenCL compute performance on Linux, outperforming previous Intel generations and competing with AMD’s Ryzen AI 9 HX 370 in benchmarks. <a href="https://app.daily.dev/posts/0Bzv8LvNY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered flame graphs explain performance bottlenecks</strong>: Coralogix introduced an AI-powered flame graph analysis feature that automatically identifies performance bottlenecks and suggests code-level optimizations, democratizing continuous profiling by transforming complex stack traces into actionable insights. <a href="https://app.daily.dev/posts/Le7zN4h1C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux Mint maintainers strained despite record donations</strong>: Despite receiving a record $47,312 in donations, Linux Mint project maintainers are experiencing strain due to their semi-annual release schedule, spending more time on testing than development, and are considering a longer development cycle. <a href="https://app.daily.dev/posts/LKuK7Gn8M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GlassFish 8.0 released with Jakarta EE 11 compatibility</strong>: GlassFish 8.0 has been released as a compatible implementation of Jakarta EE 11, requiring JDK 21+, featuring virtual thread support, Jakarta Data 1.0 integration, and enhanced security. <a href="https://app.daily.dev/posts/c8IbRHUTq" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>LLM-generated malware exploits honeypot, experts warn of ‘shift’</strong>: Attackers exploited a React2Shell vulnerability in a Docker honeypot using LLM-generated malware, leading ‘security experts’ to warn this signifies a ‘shift in the threat landscape’ and empowers ‘low-skilled operators.’ Because apparently, we needed AI to tell us that exposed Docker daemons without authentication are a bad idea. Who knew? <a href="https://app.daily.dev/posts/hzvvYMQze" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Unity AI beta promises game creation via natural language</strong>: Unity CEO Matt Bromberg announced a new Unity AI beta for GDC 2026, claiming it will enable full casual game creation via natural language prompts without coding, leveraging OpenAI’s GPT and Meta’s Llama models. So, soon anyone can make a game without actually knowing how to make a game. What could possibly go wrong with a flood of AI-generated ‘casual’ games? <a href="https://app.daily.dev/posts/AdfV4mCwr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The ‘sideprocalypse’ means your SaaS dreams are dead</strong>: According to some, the dream of building a profitable side-project SaaS is dead in 2026, with AI-generated competitors flooding every niche and quality no longer mattering. Apparently, the only winners are datacenter providers selling compute. So much for innovation; just keep feeding the AI beast, I guess. <a href="https://app.daily.dev/posts/dIaDDgpAV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
