<h2>Must know</h2>
<ul>
<li><strong>OpenAI hits $730 billion valuation with massive circular investment</strong>: OpenAI secured $110 billion from Amazon, Nvidia, and SoftBank, though much of it is tied to compute commitments rather than pure cash. Amazon’s $50 billion deal requires OpenAI to rent two gigawatts of Trainium accelerators, while Nvidia’s $30 billion is linked to deploying five gigawatts of Vera Rubin systems. This structure effectively guarantees returns for the investors while inflating OpenAI’s valuation to nearly three-quarters of a trillion dollars. <a href="https://app.daily.dev/feed-by-ids?id=8imM4YubL&amp;id=ShShzSJ3B" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google API keys silently granted access to private Gemini data</strong>: Researchers at Truffle Security discovered that GCP API keys, originally intended for billing, were quietly upgraded to authentication credentials for the Gemini AI API without developer notification. This oversight left nearly 3,000 live keys exposed in public code, potentially allowing attackers to access private uploaded files, cached datasets, or rack up massive API bills. Google has since acknowledged the bug and restricted the affected keys, but manual rotation is strongly advised. <a href="https://app.daily.dev/feed-by-ids?id=InhdaYtFz&amp;id=0amBk9Q3T" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AirSnitch vulnerabilities break WiFi client isolation</strong>: UC Riverside researchers introduced AirSnitch, a set of flaws that bypass security features designed to prevent devices on the same network from attacking each other. The vulnerabilities affect WPA2 and WPA3 networks across hardware from Cisco, Ubiquiti, and Netgear, enabling machine-in-the-middle attacks and traffic interception. These flaws stem from a lack of standardization in how Layer 2 and Layer 3 network stacks bind device identities. <a href="https://app.daily.dev/posts/tSnGJTDSb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel open sources 40 performance rules for AI coding agents</strong>: The react-best-practices repository provides architectural rules specifically formatted for tools like Cursor and Claude Code to optimize Next.js apps. <a href="https://app.daily.dev/posts/J6VGCUvIf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Perplexity launches agentic computer for $200 a month</strong>: The new tool orchestrates 19 different AI models to execute complex cloud workflows, signaling a pivot toward high-value enterprise users. <a href="https://app.daily.dev/posts/JYBUJ8DSb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sandia Labs tests reconfigurable supercomputer to challenge Nvidia</strong>: The Spectra system uses NextSilicon Maverick-2 chips that reconfigure hardware data flow dynamically, claiming 2x the speed of Blackwell for HPC workloads. <a href="https://app.daily.dev/posts/t9r2wgx3C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubetorch simplifies remote PyTorch execution on Kubernetes</strong>: A new .to() API allows local Python code to run remotely with sub-2-second hot reloading and programmatic fault tolerance. <a href="https://app.daily.dev/posts/3II62MbL8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>India blocks Supabase access under opaque IT Act order</strong>: The government issued a blocking order affecting major ISPs in Supabase’s fourth-largest market, forcing developers to rely on VPNs for production access. <a href="https://app.daily.dev/posts/x9ggXCarx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go 1.26 introduces speculative stack allocation for slices</strong>: The compiler now provides small stack-allocated backing stores for append calls, significantly reducing heap pressure and GC overhead. <a href="https://app.daily.dev/posts/XIpmjFf08" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>RoguePilot vulnerability enables GitHub repository takeovers</strong>: Orca Security found that passive prompt injection via hidden HTML comments could trick Copilot into exfiltrating GITHUB_TOKEN secrets. <a href="https://app.daily.dev/posts/LAZy65aYK" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The circular logic of the $730 billion OpenAI valuation</strong>: OpenAI is ‘worth’ $730 billion because Amazon and Nvidia gave them billions of dollars that OpenAI is contractually obligated to spend back on Amazon and Nvidia hardware. It’s a masterclass in accounting gymnastics where everyone ‘wins’ by trading credits in a closed loop while the actual path to profitability remains a 2029 pipe dream. If you think this is a standard equity round, I have some FTX tokens to sell you. <a href="https://app.daily.dev/feed-by-ids?id=8imM4YubL&amp;id=ShShzSJ3B" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are coming for the Indian IT sector</strong>: The Nifty IT index tanked 20% because investors finally realized that thin SaaS wrappers around Western APIs won’t save a labor-arbitrage model built on routine QA. Analysts are panicking that AI agents will cannibalize legacy migration work, yet the industry’s response is to build more ‘AI-powered’ wrappers. It’s a race to the bottom where the only thing being ‘disrupted’ is the ability to charge for junior developer hours. <a href="https://app.daily.dev/feed-by-ids?id=cajA1f3yJ&amp;id=llqcdvFwX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The six hour AI built dashboard miracle</strong>: The Leet Container Dashboard is being marketed as ‘built in 6 hours’ using Codex and Cline, as if speed-running a TypeScript project is a substitute for architectural stability. We’ve reached the point where ‘I didn’t spend time on this’ is a feature rather than a warning sign for production software. Expect a ‘built in 15 minutes’ version next week that probably forgets to implement basic auth. <a href="https://app.daily.dev/posts/GVRafeRV4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
