<h2>Must know</h2>
<ul>
<li><strong>Stripe considers acquiring PayPal</strong>: Stripe is reportedly eyeing PayPal for a potential acquisition, according to Bloomberg. This comes as Stripe’s valuation recently surged to $159 billion, a 74% increase from last year, while PayPal, valued at over $40 billion, faces slowing growth and competitive pressure. The talks are in early stages and may not materialize, but the news sent PayPal’s shares up nearly 7%. <a href="https://app.daily.dev/feed-by-ids?id=gB7UDBJXo&amp;id=2WYO6dKLA&amp;id=HqWjbO0Bb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cybersecurity landscape worsens, AI-enabled attacks surge</strong>: CrowdStrike’s latest report indicates a dramatic escalation in cyber threats, with the average breakout time for attacks dropping to 29 minutes. AI-enabled attacks have increased by 89%, with adversaries integrating generative AI across the attack kill chain. Cloud intrusions are up 37%, and North Korea-linked incidents surged 130%, including a $1.46 billion crypto theft. The report highlights a shift towards stealthy, malware-free attacks. <a href="https://app.daily.dev/feed-by-ids?id=WsqeDq8OW&amp;id=N4dy3fcbe&amp;id=OcP3lFxRu&amp;id=PLk9aTYu6&amp;id=U7HXcObJH&amp;id=WIZ8R8Usf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>npm supply chain attack targets AI coding tools</strong>: Socket researchers uncovered the ‘SANDWORM_MODE’ npm supply chain attack, involving 19 typosquatted packages impersonating developer utilities and AI coding tools like Claude Code. The malware harvests credentials, injects malicious code into GitHub Actions, and deploys a malicious MCP server for prompt-injection attacks against AI assistants, silently exfiltrating SSH keys and cloud credentials. npm has responded by tightening registry controls. <a href="https://app.daily.dev/posts/q6c2RLQKH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Meta secures major AMD chip deal for AI expansion</strong>: Meta signed a multiyear deal with AMD for up to $100 billion in chips, including MI540 GPUs, to add 6GW of data center compute capacity and diversify its AI compute stack beyond Nvidia. <a href="https://app.daily.dev/posts/vYZNsZv8f" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI revises compute target, projects strong revenue and user growth</strong>: OpenAI revised its compute spending target to $600 billion by 2030 (down from $1.4 trillion), projects over $280 billion in revenue by 2030, and is finalizing a new funding round exceeding $100 billion at a $730 billion valuation. <a href="https://app.daily.dev/posts/JOWJuLHZs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents accelerate feature development on personal site</strong>: Kent C. Dodds reported using AI agents, specifically Cursor, to rapidly implement features like semantic search and keyboard shortcuts on his personal site, clearing his GitHub issues backlog. <a href="https://app.daily.dev/posts/HVH19Oob1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elasticsearch v9.2.1 boosts vector search performance</strong>: Trendyol’s load tests show Elasticsearch v9.2.1 delivers 2x throughput, 50% less CPU, and 10x better p99 latency for vector search compared to v8.18.3, scaling significantly better under high concurrency. <a href="https://app.daily.dev/feed-by-ids?id=Iw8wLbMFe&amp;id=Iw8wLbMFe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Private Kubernetes for enterprise hybrid cloud portability</strong>: Private Kubernetes offers a vendor-neutral abstraction layer for enterprises to achieve workload portability across on-prem, private, and public clouds, addressing issues like inconsistent operations and fragmented IAM. <a href="https://app.daily.dev/posts/j1OYXy6B1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AMD HIP adopts LLVM offload driver</strong>: AMD’s HIP GPU programming framework is switching its default offload driver to LLVM’s modern offload driver, a change merged into upstream LLVM Git targeting LLVM 23. <a href="https://app.daily.dev/posts/Pq3celfCB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DMARCbis update and mailbox provider requirements</strong>: The DMARCbis update (draft-ietf-dmarc-dmarcbis-41) is evolving the DMARC email authentication standard with clearer reporting expectations and standardized DNS tree walk for receiver-side policy discovery, alongside tightening requirements from major mailbox providers. <a href="https://app.daily.dev/posts/yEFoBF8zN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cursor launches autonomous cloud AI agents for software development</strong>: Cursor announced ‘autonomous cloud AI agents’ that can supposedly develop software, control remote desktops, and produce ‘merge-ready Pull Requests’ with video artifacts. They even claim over 30% of their own merged PRs are now AI-created. So, we’re just going to trust the AI that writes its own code to tell us how good it is? And the ‘smooooth’ low-latency remote desktop experience sounds like something out of a 90s infomercial. Sure, I’ll delegate my coding tasks to an AI while I’m ‘away or sleeping’—what could possibly go wrong? <a href="https://app.daily.dev/posts/BbESdM4Ct" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS blames engineer for AI tool outage, not the AI tool</strong>: AWS published a blog post explaining an outage in China, stating an engineer using their AI coding tool, Kiro, ‘accidentally triggered a CloudFormation teardown.’ AWS framed Kiro’s involvement as a ‘coincidence,’ while simultaneously laying off thousands of human workers. It’s truly remarkable how AI is always just an innocent bystander when things go sideways, and it’s always the human’s fault for having ‘broader permissions than expected.’ Maybe if they kept more humans around, they wouldn’t need to blame them for AI’s ‘coincidences.’ <a href="https://app.daily.dev/posts/qZoHoApRh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents impact on ‘10x developer’ concept</strong>: Justin Searls, a named individual, claims AI agents have rendered the ‘10x developer’ debate moot, effectively equalizing or amplifying developer output across the board. He calls his 2023 prediction ‘nailed.’ It’s always convenient when your predictions come true, especially when you’re the one making the claim and providing zero evidence. I’m sure all those developers feeling ‘lost’ and ‘empty’ when delegating to AI agents will be thrilled to hear their output is now ‘equalized’ by a black box. <a href="https://app.daily.dev/posts/dMpIU74OH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
