<h2>Must know</h2>
<ul>
<li><strong>AI agent security flaws and emerging prompt worm threats</strong>: Security researchers breached an AI agent social network in minutes, exploiting basic design flaws like authentication bypass and database misconfiguration. This incident, along with the emergence of “prompt worms” that self-replicate through AI agent networks, highlights critical and evolving security challenges. The rapid adoption of AI agents, often with access to sensitive data, is outpacing security governance, creating significant risks for enterprises, as reported by Wiz and Gravitee. <a href="https://app.daily.dev/feed-by-ids?id=ycPDVy6OP&amp;id=Hv04ODVQw&amp;id=ehksC8VMf&amp;id=gy7WeHs5A&amp;id=kssiMjacP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks funding as Rust alternative gains traction</strong>: The sole maintainer of the critical <code>sudo</code> utility, Todd C. Miller, is seeking sponsorship after Quest Software ended its support. This highlights the precarious state of essential open-source infrastructure. Meanwhile, <code>sudo-rs</code>, a memory-safe Rust reimplementation, is gaining traction, with Ubuntu 25.10 planning to adopt it as the default <code>sudo</code> utility by October 2025. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks and Snowflake launch new PostgreSQL offerings</strong>: Databricks Lakebase is now generally available on AWS, offering a new operational database architecture that separates compute from storage and runs directly on data lakes. This serverless Postgres service supports instant data branching and unifies operational, analytical, and AI workloads without data movement. Snowflake also launched a PostgreSQL database-as-a-service within its AI Data Cloud, integrating transactional workloads with analytics and AI using <code>pg_lake</code> extensions to read/write directly to Apache Iceberg tables. <a href="https://app.daily.dev/feed-by-ids?id=qtDOznoeU&amp;id=1F9HXgJiK&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel v0 revamps for enterprise AI development</strong>: Vercel rebuilt its v0 AI-powered development platform into an enterprise-grade coding tool, focusing on bridging AI-generated prototypes to production-ready code with security features and integrations with Snowflake and AWS. <a href="https://app.daily.dev/posts/8wRm1h8NM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy hits GA and launches sandbox for untrusted code</strong>: Deno Deploy reached General Availability with new features including Node.js framework support, integrated serverless PostgreSQL, and OpenTelemetry observability, alongside the beta launch of Deno Sandbox for securely running untrusted code in microVMs. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dependabot adds OIDC support for private registries</strong>: Dependabot now supports OpenID Connect (OIDC) authentication for private registries, allowing dynamic acquisition of short-lived credentials and eliminating the need to store long-lived secrets, enhancing security and simplifying credential management. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding assistants accelerate Android app migration</strong>: Instacart’s Caper team migrated their Android smart cart app from Fragments to Jetpack Compose, accelerating the process by 5-7x using AI coding assistants and formalizing their AI workflow into reusable skills. <a href="https://app.daily.dev/feed-by-ids?id=IH6kovw5g&amp;id=OWEjri5UU&amp;id=eAd8BFgLE&amp;id=oppY5SpKL&amp;id=pFVTGaupN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM Identity Center adds multi-region replication</strong>: AWS IAM Identity Center now supports multi-Region replication for workforce identities and permission sets, enhancing resiliency for AWS account access and helping meet data residency requirements. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Hurd project shows significant progress</strong>: The GNU Hurd project, a microkernel-based Unix replacement, shows significant progress with 80% Debian package compilation, support for major desktop environments, and completed x86_64 and SMP functionality. <a href="https://app.daily.dev/posts/XjM52iBH8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubisoft union calls for CEO resignation</strong>: Ubisoft union representatives are calling for CEO Yves Guillemot to resign due to a “complete breakdown of trust” stemming from studio closures, game cancellations, and a five-day return-to-office mandate. <a href="https://app.daily.dev/posts/Ko8v1dV9o" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Take-Two says GTA 6 is “handcrafted,” not AI-generated</strong>: Take-Two Interactive CEO Strauss Zelnick declared that generative AI plays “zero part” in GTA 6’s development, insisting the world is “entirely handcrafted.” This, after their stock dropped when Google announced an AI tool for creating playable game worlds. Apparently, the market needs to be reminded that some things still require actual humans, or maybe they just don’t trust AI to deliver the next big heist. <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>X replaces search with Grok LLM</strong>: X (formerly Twitter) has apparently replaced its traditional search functionality with Grok, an LLM, because fixing the existing system was “too difficult.” So, instead of fixing what was broken, they threw billions at an LLM. Because when in doubt, just replace a bad search engine with a hallucinating chatbot. What could possibly go wrong? <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: A Polish railway portal is displaying randomized train schedules to mobile users based on their IP addresses, specifically those using CGNAT. The system returns departure times with a uniform random distribution of ±60 minutes, likely as an anti-scraping measure. So, if your train is an hour early or late, it’s not a bug, it’s just the railway’s innovative approach to security. PKP declined to comment, citing “security reasons,” which is always reassuring. <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
