<h2>Must know</h2>
<ul>
<li><strong>OpenAI valuation hits 730 billion with massive circular investments</strong>: OpenAI secured $110 billion from Amazon, Nvidia, and SoftBank, but the deal structure is raising eyebrows among industry analysts. Amazon’s $50 billion contribution is largely a compute commitment for Trainium accelerators, while Nvidia’s $30 billion is tied to deploying five gigawatts of Vera Rubin systems. This circular arrangement effectively guarantees returns for the investors while inflating OpenAI’s valuation to nearly three-quarters of a trillion dollars. <a href="https://app.daily.dev/feed-by-ids?id=8imM4YubL&amp;id=ShShzSJ3B" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Lazarus Group uses steganography in npm supply chain attack</strong>: Socket researchers identified 26 malicious npm packages linked to North Korea’s Lazarus Group that hide command-and-control infrastructure inside Pastebin essays using character-level steganography. The ‘StegaBin’ campaign specifically targets Web3 and blockchain developers, deploying a multi-stage toolkit that steals SSH keys, browser credentials, and cryptocurrency wallet data. The malware even includes modules to scan for secrets using TruffleHog and maintain persistence via whitespace-hidden VS Code configurations. <a href="https://app.daily.dev/posts/FlnRaRBz6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google API keys silently exposed private Gemini data</strong>: Truffle Security discovered that Google Cloud Platform API keys, originally intended for billing, were silently upgraded to authentication credentials for the Gemini AI API without notifying developers. This change left nearly 3,000 live keys exposed in public repositories, allowing attackers to access private uploaded files and cached datasets or exhaust API quotas. Google initially dismissed the report as intended behavior before acknowledging the bug and restricting the compromised keys. <a href="https://app.daily.dev/feed-by-ids?id=InhdaYtFz&amp;id=601vxKUqh" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel open sources React optimization rules for AI agents</strong>: The ‘react-best-practices’ repository provides 40+ architectural rules designed for LLMs to improve Next.js performance and reduce bundle sizes. <a href="https://app.daily.dev/posts/J6VGCUvIf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AirSnitch vulnerabilities bypass WiFi client isolation</strong>: Researchers found flaws in the 802.11 standard that allow traffic interception and MitM attacks on WPA3 networks across hardware from Cisco, Ubiquiti, and Asus. <a href="https://app.daily.dev/posts/tSnGJTDSb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Perplexity pivots to 200 dollar monthly enterprise agents</strong>: The new ‘Perplexity Computer’ orchestrates 19 different AI models for complex workflows, signaling a shift away from ad-supported search toward high-value enterprise tools. <a href="https://app.daily.dev/posts/JYBUJ8DSb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari 238 adds customizable select elements and scroll anchoring</strong>: The latest Technology Preview introduces ‘appearance: base-select’ for styling selects and scroll anchoring to prevent annoying viewport jumps during loading. <a href="https://app.daily.dev/posts/NUI8NcsFJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>India blocks Supabase access under IT Act</strong>: The Indian government issued a sudden blocking order affecting major ISPs, disrupting production environments for the platform’s fourth-largest global market. <a href="https://app.daily.dev/posts/x9ggXCarx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go 1.26 optimizes slice allocations to reduce GC pressure</strong>: New compiler optimizations move variable-sized ‘make’ calls and escaping slices from the heap to the stack, improving performance without code changes. <a href="https://app.daily.dev/posts/9nI5Vn4pu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NextSilicon reconfigurable supercomputer enters testing at Sandia</strong>: The Spectra system uses 128 Maverick-2 chips that reconfigure hardware data flow for specific HPC workloads, claiming half the power of Nvidia Blackwell. <a href="https://app.daily.dev/posts/t9r2wgx3C" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The six hour AI built dashboard miracle</strong>: The Leet Container Dashboard claims to be a ‘zero configuration’ open-source monitoring tool built in just six hours using Codex and Cline AI. While it’s a nice TypeScript/Bun project, the ‘built in 6 hours’ tag is the new ‘I wrote this in a weekend’—a marketing flex that ignores the technical debt and security auditing required for production infrastructure. <a href="https://app.daily.dev/posts/GVRafeRV4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Claude Code wipes out 15 billion in cybersecurity market cap</strong>: The launch of Anthropic’s Claude Code reportedly triggered a massive market sell-off, with investors hallucinating that an AI coding assistant makes the entire cybersecurity industry obsolete. As GitGuardian’s CEO pointed out, the real risk in the AI era is secrets management and non-human identity governance, not just finding a few bugs in a C++ file. <a href="https://app.daily.dev/posts/29UvjAahN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Block fires 4,000 people and blames the AI boogeyman</strong>: Block (Square) announced a massive headcount reduction, claiming AI tools allow them to operate with smaller teams while their stock conveniently jumped 24%. Industry veterans are calling foul, suggesting this is classic corporate spin to mask overhiring and satisfy shareholders rather than a genuine leap in AI-driven productivity. <a href="https://app.daily.dev/posts/y7FHwZ7mA" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
