<h2>Must know</h2>
<ul>
<li><strong>Stripe considers acquiring PayPal</strong>: Stripe, now valued at $159 billion after a 74% valuation jump, is reportedly eyeing PayPal for acquisition. This comes as PayPal, valued at over $40 billion, faces slowing growth and increased competition from tech giants like Apple and Google. While talks are early, the news sent PayPal’s shares up nearly 7%, according to Bloomberg. <a href="https://app.daily.dev/feed-by-ids?id=gB7UDBJXo&amp;id=2WYO6dKLA&amp;id=HqWjbO0Bb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cybersecurity landscape worsens, AI-enabled attacks surge</strong>: CrowdStrike’s latest report paints a grim picture: average cyberattack breakout time plummeted 65% to 29 minutes, with AI-enabled attacks soaring 89%. Threat actors are increasingly using GenAI across the attack kill chain, and 82% of detections are now malware-free, indicating a shift to stealthier tactics. Cloud intrusions are up 37%, and North Korea-linked incidents surged 130%, including a $1.46 billion crypto theft. <a href="https://app.daily.dev/posts/WsqeDq8OW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>npm supply chain attack targets AI coding tools</strong>: Socket researchers uncovered the ‘SANDWORM_MODE’ npm supply chain attack, involving 19 typosquatted packages impersonating developer utilities and AI coding tools like Claude Code. The malware harvests credentials, injects malicious code into GitHub Actions, and deploys a malicious MCP server for prompt-injection attacks against AI assistants, silently exfiltrating SSH keys and cloud credentials. npm has responded by tightening registry controls. <a href="https://app.daily.dev/posts/q6c2RLQKH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Meta secures major AMD chip deal for AI expansion</strong>: Meta signed a multiyear deal with AMD for up to $100 billion in chips, including MI540 GPUs, to add 6GW of data center compute capacity and diversify its AI compute stack beyond Nvidia. <a href="https://app.daily.dev/posts/vYZNsZv8f" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents for autonomous software development</strong>: Cursor launched cloud agents that operate in isolated VMs with full dev environments, capable of controlling remote desktops, interacting with UIs, and producing merge-ready Pull Requests with video artifacts. <a href="https://app.daily.dev/posts/BbESdM4Ct" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New LLM inference technique triples speed</strong>: Researchers developed a multi-token prediction technique that triples LLM inference speed without auxiliary draft models, achieving 3x+ speedup on math benchmarks with under 3% accuracy loss by fine-tuning models with a confidence-adaptive decoding strategy. <a href="https://app.daily.dev/posts/hxaAjvILy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Hetzner Cloud price hike due to hardware costs</strong>: Hetzner, a budget cloud provider, announced price increases of up to 50% starting April 1, citing dramatic rises in hardware costs due to increased AI industry demand, which disproportionately affects mid-tier providers without hyperscaler-level contracts. <a href="https://app.daily.dev/posts/van1jyyDC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DMARCbis update and mailbox provider requirements</strong>: The DMARCbis update (draft-ietf-dmarc-dmarcbis-41) is evolving the DMARC email authentication standard with clearer reporting expectations and standardized DNS tree walks for receiver-side policy discovery, as major mailbox providers tighten DMARC, SPF, and DKIM requirements. <a href="https://app.daily.dev/posts/yEFoBF8zN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Private Kubernetes for enterprise hybrid cloud portability</strong>: Private Kubernetes offers a vendor-neutral abstraction layer for enterprise hybrid cloud, enabling workload portability across on-prem, private, and public clouds with consistent security and operational predictability, addressing common failures from inconsistent operations and fragmented IAM. <a href="https://app.daily.dev/posts/j1OYXy6B1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vulnerability management paradigm shift</strong>: Traditional CVE-based vulnerability management is deemed ‘fundamentally broken’ due to overwhelming volume and reactive failures, advocating for a shift to runtime behavioral visibility to identify truly exploitable weaknesses irrespective of CVE existence. <a href="https://app.daily.dev/posts/jo3DbbjZG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents make ‘10x developer’ debate moot, says guy who predicted it</strong>: Justin Searls, a self-proclaimed oracle, declared the ‘10x developer’ debate dead because AI agents supposedly equalize or amplify everyone’s output. Conveniently, he offered zero evidence on how this magical equalization happens, just a pat on his own back for a ‘nailed’ prediction. Guess we can all stop trying now, the robots got us covered. <a href="https://app.daily.dev/posts/dMpIU74OH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS blames engineer for AI tool outage, calls AI involvement ‘coincidence’</strong>: AWS, in a move that screams ‘blame the human, save the AI,’ attributed a production outage to an engineer with ‘broader permissions than expected’ who accidentally triggered a CloudFormation teardown using their Kiro AI coding tool. They called Kiro’s involvement a ‘coincidence,’ which is a pretty convenient coincidence given they’re simultaneously laying off thousands of human workers. Now, AI-generated changes require mandatory human peer review—because apparently, the AI is too innocent to be held accountable. <a href="https://app.daily.dev/posts/qZoHoApRh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Samsung’s ‘upcycling’ program wins award despite being a shell of its promise</strong>: Samsung won a sustainability award for its ‘Galaxy Upcycling’ program, which was initially hyped to let users unlock bootloaders and repurpose old phones. What actually launched was a severely scaled-back version offering only sound detection and brightness measurement, with no bootloader unlocking or custom OS support. iFixit called it ‘nearly unrecognizable,’ but hey, a Reuters award for greenwashing is still an award, right? <a href="https://app.daily.dev/posts/ebOB9DlFn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
