<h2>Must know</h2>
<ul>
<li><strong>AI agent security is a dumpster fire</strong>: Security researchers have uncovered critical vulnerabilities in AI agent platforms, with 1.5 million out of 3 million agents in large US and UK enterprises operating without oversight. These flaws, including authentication bypasses and database misconfigurations, allowed breaches in under three minutes, exposing API keys and enabling account hijacking. The rapid adoption of autonomous AI agents is outpacing security teams’ governance capabilities, creating significant risks for millions more planned deployments, as highlighted by Gravitee research and incidents like the Moltbook breach. <a href="https://app.daily.dev/feed-by-ids?id=ycPDVy6OP&amp;id=Hv04ODVQw&amp;id=ehksC8VMf&amp;id=gy7WeHs5A&amp;id=kssiMjacP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks and Snowflake double down on AI data platforms</strong>: Databricks Lakebase and Snowflake’s new offerings are pushing the envelope in data infrastructure, with both now generally available on AWS. Lakebase offers a serverless Postgres service that scales automatically and supports instant data branching directly on data lakes, unifying operational, analytical, and AI workloads. Snowflake’s Cortex AI provides a fully managed generative AI suite and a PostgreSQL database-as-a-service, integrating transactional workloads with analytics and AI, all without moving data. <a href="https://app.daily.dev/feed-by-ids?id=qtDOznoeU&amp;id=1F9HXgJiK&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux drops flawed TCP support, sudo maintainer seeks funding</strong>: The Linux kernel is dropping SMC TCP ULP support due to fundamental design flaws that violate core VFS invariants and create risks of use-after-free errors. This comes after four years of trying to make it work, with developers now recommending cleaner alternatives. Meanwhile, the sole maintainer of <code>sudo</code> for over 30 years, Todd C. Miller, is seeking sponsorship after Quest Software ended its support, highlighting the fragility of critical open-source infrastructure. <a href="https://app.daily.dev/feed-by-ids?id=r5M1zUGS5&amp;id=E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel v0 pivots to enterprise AI development</strong>: Vercel has rebuilt its v0 platform into an enterprise-grade AI coding platform, focusing on bridging AI-generated prototypes to production-ready code with security and Git-based workflows. <a href="https://app.daily.dev/posts/8wRm1h8NM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy goes GA with new sandbox for untrusted code</strong>: Deno Deploy is now generally available, offering zero-config deployment for JavaScript/TypeScript apps, integrated serverless PostgreSQL, and a new Deno Sandbox for securely running untrusted code, especially LLM-generated code. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI details codex agent architecture</strong>: OpenAI has detailed the internal design of Codex, their software development agent, focusing on its agent loop architecture and strategies for managing LLM inference performance. <a href="https://app.daily.dev/posts/DWHoaTisZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM Identity Center gets multi-region replication</strong>: AWS IAM Identity Center now supports multi-Region replication for workforce identities and permission sets, enhancing resiliency and enabling applications closer to users. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dependabot embraces OIDC for private registries</strong>: Dependabot now supports OpenID Connect (OIDC) authentication for private registries, allowing dynamic short-lived credentials and reducing the need for storing long-lived secrets. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding assistants speed up android app migration</strong>: Instacart’s Caper team used AI coding assistants to accelerate their Android app migration from Fragments to Jetpack Compose by 5-7x, turning a multi-quarter effort into a much shorter one. <a href="https://app.daily.dev/feed-by-ids?id=IH6kovw5g&amp;id=OWEjri5UU&amp;id=eAd8BFgLE&amp;id=oppY5SpKL&amp;id=pFVTGaupN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Hurd project shows significant progress</strong>: The GNU Hurd project, after 36 years, is showing significant progress with 80% Debian package compilation, 64-bit support, SMP functionality, and modern hardware drivers running in userland. <a href="https://app.daily.dev/posts/XjM52iBH8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X replaces search with grok because fixing things is hard</strong>: X, in its infinite wisdom, has apparently replaced its entire search functionality with Grok, an LLM, because fixing the existing system was just “too difficult.” So, instead of, you know, <em>fixing</em> things, they just threw billions of dollars at GPUs to build an AI that probably hallucinates search results. What could go wrong with a social media platform’s core search being powered by a chatbot? <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Take-Two says GTA 6 is handcrafted, not AI-generated</strong>: Take-Two Interactive CEO Strauss Zelnick proudly declared that generative AI plays “zero part” in GTA 6’s development, emphasizing its “entirely handcrafted” world. This, of course, came right after their stock dropped because Google announced an AI tool for creating playable game worlds. So, AI is great for “cost and time efficiencies” in hundreds of pilot programs, but when it comes to the flagship title, suddenly it’s all about the artisanal touch. Convenient. <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: The Polish railway portal is now randomizing train schedules for mobile users based on their IP addresses, specifically those on CGNAT. Apparently, this is an “anti-scraping measure,” which means legitimate users get departure times with a uniform random distribution of ±60 minutes. Because nothing says “modern infrastructure” like intentionally giving your customers incorrect information and then declining to comment due to “security reasons.” <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
