<h2>Must know</h2>
<ul>
<li><strong>Stripe considers acquiring PayPal</strong>: Stripe is reportedly eyeing PayPal for a potential acquisition, according to Bloomberg. This comes as Stripe’s valuation recently surged to $159 billion, a 74% increase from last year, while PayPal, valued at over $40 billion, faces slowing growth and competitive pressure. Both companies declined to comment on the early-stage talks. <a href="https://app.daily.dev/feed-by-ids?id=gB7UDBJXo&amp;id=2WYO6dKLA&amp;id=HqWjbO0Bb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>npm supply chain attack targets AI coding tools</strong>: Socket researchers uncovered the ‘SANDWORM_MODE’ npm supply chain attack, using typosquatted packages to impersonate developer utilities and AI coding tools like Claude Code. The malware steals credentials, injects malicious code into GitHub Actions, and deploys MCP servers for prompt-injection attacks, silently exfiltrating SSH keys and cloud credentials. npm has responded by tightening registry controls. <a href="https://app.daily.dev/feed-by-ids?id=q6c2RLQKH&amp;id=3fX3MdYNS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cybersecurity landscape worsens with AI-enabled attacks</strong>: CrowdStrike’s latest report indicates a dramatically worsening cybersecurity landscape, with average cyberattack breakout times dropping to 29 minutes. AI-enabled attacks surged by 89%, integrating Generative AI across the attack kill chain, while 82% of detections were malware-free, signaling a shift towards stealthier, persistent access methods. (Source: CrowdStrike) <a href="https://app.daily.dev/posts/WsqeDq8OW" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cursor launches autonomous cloud AI agents</strong>: Cursor released cloud agents for autonomous software development, operating in isolated VMs with full dev environments, capable of producing merge-ready Pull Requests with video artifacts. <a href="https://app.daily.dev/posts/BbESdM4Ct" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elasticsearch v9.2.1 boosts vector search performance</strong>: Trendyol’s load tests show Elasticsearch v9.2.1 delivers 2x throughput and 10x better p99 latency for vector search compared to v8.18.3, strongly recommending an upgrade for such workloads. <a href="https://app.daily.dev/posts/Iw8wLbMFe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Red Hat launches AI enterprise platform</strong>: Red Hat introduced Red Hat AI Enterprise, a platform designed to move AI workloads from pilot to production, supporting any model or hardware with integrated inference, customization, and agent deployment capabilities. <a href="https://app.daily.dev/posts/e1iAecIls" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents accelerate feature development on personal site</strong>: Kent C. Dodds reported using AI agents like Cursor to rapidly implement features, including semantic search and keyboard shortcuts, on his personal site, clearing a backlog since 2019. <a href="https://app.daily.dev/posts/HVH19Oob1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DMARCbis update and mailbox provider requirements</strong>: The DMARCbis update (draft-ietf-dmarc-dmarcbis-41) is evolving the DMARC email authentication standard with clearer reporting and standardized DNS discovery, as major mailbox providers tighten sender requirements. <a href="https://app.daily.dev/posts/yEFoBF8zN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js 25.7.0 released with HTTP/2 and SEA improvements</strong>: Node.js 25.7.0 is out, featuring HTTP/2 <code>http1Options</code>, ESM support for Single Executable Applications, a release candidate for the built-in SQLite module, and an npm upgrade to 11.10.1. <a href="https://app.daily.dev/posts/K4geCuziz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab extends GPG key for repository metadata</strong>: GitLab extended its GPG key expiration to February 6, 2028, for <a href="http://packages.gitlab.com" target="_blank" rel="noopener nofollow">packages.gitlab.com</a>, aiming to maintain integrity and minimize disruption for users, though some may need to manually update. <a href="https://app.daily.dev/posts/JTFdrzyr9" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AWS blames engineer for AI tool outage</strong>: AWS published a blog post blaming an engineer with ‘broader permissions than expected’ for a production outage caused by their AI coding tool, Kiro, accidentally triggering a CloudFormation teardown. AWS called Kiro’s involvement a ‘coincidence,’ which is convenient given they’re simultaneously laying off thousands of human workers. Now, they’re mandating human peer review for AI-generated changes, because apparently, the AI isn’t quite ready to take over <em>all</em> the jobs just yet. (Source: AWS) <a href="https://app.daily.dev/posts/qZoHoApRh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents render ‘10x developer’ debate moot</strong>: Justin Searls, a named individual, claims AI agents have “nailed” his 2023 prediction, rendering the ‘10x developer’ debate moot by equalizing or amplifying developer output. No specific details or evidence, just a self-serving declaration that his prediction was spot on. Because, you know, if one guy says it, it must be true for the entire industry. (Source: Justin Searls) <a href="https://app.daily.dev/posts/dMpIU74OH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Samsung’s ‘upcycling’ program under scrutiny</strong>: Samsung’s ‘Galaxy Upcycling’ program, initially promising bootloader unlocking and open-source repurposing for old phones, launched with a drastically reduced scope, offering only basic sound detection and brightness measurement. Despite this, Samsung won a sustainability award, leading to accusations of ‘greenwashing.’ It seems they’re great at marketing, less so at delivering on promises. (Source: iFixit) <a href="https://app.daily.dev/posts/ebOB9DlFn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
