<h2>Must know</h2>
<ul>
<li><strong>OpenAI hits 730 billion valuation in circular funding mega-deal</strong>: OpenAI secured $110 billion from Amazon, Nvidia, and SoftBank, but the deal structure raises eyebrows among skeptics. Amazon’s $50 billion and Nvidia’s $30 billion are largely compute commitments for Trainium and Vera Rubin systems, effectively guaranteeing returns for the investors while inflating OpenAI’s valuation. Despite $20 billion in annualized revenue and 900 million weekly users, the company is not expected to hit profitability until 2029. <a href="https://app.daily.dev/feed-by-ids?id=8imM4YubL&amp;id=2MnggU5aN&amp;id=3EaP1eYC2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Lazarus Group targets Web3 devs with StegaBin npm malware</strong>: Socket researchers uncovered 26 malicious npm packages linked to North Korea’s Lazarus Group using character-level steganography in Pastebin posts to hide C2 infrastructure. The ‘StegaBin’ campaign specifically targets blockchain developers, deploying a multi-stage infostealer that sweeps for SSH keys, Git credentials, and 86 different cryptocurrency wallet IDs. The malware even attempts to persist via whitespace-hidden configurations in VS Code. <a href="https://app.daily.dev/posts/FlnRaRBz6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>RoguePilot vulnerability enables full GitHub repository takeover</strong>: Orca Security discovered a critical flaw in GitHub Codespaces where passive prompt injection via hidden HTML comments in Issues could hijack a repository. By tricking Copilot into checking out a crafted PR with a symlink to the GITHUB_TOKEN, attackers could exfiltrate secrets through VS Code’s automatic JSON schema download feature. Microsoft and GitHub have issued patches, but the incident highlights the danger of treating AI context as trusted input. <a href="https://app.daily.dev/posts/LAZy65aYK" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cloudflare core contributor proposes 120x faster JavaScript Streams API</strong>: A technical critique argues the WHATWG Web Streams API is fundamentally broken, proposing an async-iterable alternative that runs significantly faster across all major runtimes. <a href="https://app.daily.dev/posts/x39TDoHIL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Confluent Kafka Clients 2.13.0 brings Python asyncio to GA</strong>: The release includes full type hints, deterministic partitioners, and improved lifecycle management via context managers for Python developers. <a href="https://app.daily.dev/posts/XxtrJwDiH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Red Hat and Nvidia partner on integrated AI Factory stack</strong>: The new Red Hat AI Enterprise platform combines RHEL and OpenShift with Nvidia’s NIM microservices for industrial-scale model deployment and governance. <a href="https://app.daily.dev/posts/It2aRA6ec" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Medidata slashes EKS compute costs by 80 percent with Snowflake Iceberg</strong>: By migrating from Flink and Kafka to Snowflake’s managed Iceberg tables, the team eliminated bloated RocksDB state and costly infinite Kafka retention. <a href="https://app.daily.dev/posts/LeD5yWgOv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Go module Rekoobe linked to state-sponsored APT31</strong>: A package impersonating the official crypto library was found inserting backdoors into terminal password functions to exfiltrate credentials. <a href="https://app.daily.dev/posts/hUbOU1Zfx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 Resolute Raccoon hits final monthly snapshot</strong>: The LTS release is on track for April 23, featuring the Linux 6.19 kernel and GNOME 50 beta components. <a href="https://app.daily.dev/posts/QvM4ZBs0d" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open Source Endowment launches to fund critical independent projects</strong>: The new 501©(3) mirrors university endowment models, using investment income to provide permanent grants for underfunded non-commercial software. <a href="https://app.daily.dev/posts/fRs0oZgID" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Jack Dorsey claims 40 percent layoffs are an AI success story</strong>: Block cut 4,000 staff while Dorsey claimed AI tools are simply ‘performing jobs better,’ a convenient narrative that saw the stock jump 24 percent. Analysts are calling foul, suggesting the move is more about correcting years of pandemic-era overhiring than a sudden breakthrough in autonomous fintech agents. It’s the classic ‘AI made me do it’ defense for standard corporate belt-tightening. <a href="https://app.daily.dev/feed-by-ids?id=yB8j5HQ6b&amp;id=eacyfq01e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The Pentagon tries to bully Anthropic into removing safety guardrails</strong>: Defense Secretary Hegseth is reportedly pressuring Anthropic to strip ethical filters from Claude for use in autonomous weapons and mass surveillance. The irony of a government publicly advocating for ‘AI Safety’ while privately threatening the Defense Production Act to weaponize LLMs is peak bureaucratic cognitive dissonance. Apparently, ‘Responsible Scaling’ only applies until the $200 million defense contracts hit the table. <a href="https://app.daily.dev/feed-by-ids?id=DOq4pZFPp&amp;id=XR0JM9qQf&amp;id=IQbfSgesl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Perplexity pivots to a 200 dollar monthly subscription for GDP moving decisions</strong>: Perplexity is abandoning its ad model to focus on ‘high-value enterprise users’ with a tool that orchestrates 19 different models. They claim to be focusing on ‘GDP-moving decisions’ rather than user growth, which is fancy VC-speak for ‘we haven’t figured out how to make money from normal people yet.’ If you’re paying $2,400 a year for a model router, the only thing moving is your company’s burn rate. <a href="https://app.daily.dev/posts/JYBUJ8DSb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
