<h2>Must know</h2>
<ul>
<li><strong>AI agent security is a mess</strong>: Security researchers from Wiz breached an AI agent social network, Moltbook, in under three minutes by exploiting basic design flaws like authentication bypass and database misconfiguration. This incident, along with a viral ‘AI agent sued human’ stunt, highlights critical vulnerabilities in AI-assisted development where rapid prototyping often overlooks threat modeling. The emergence of ‘prompt worms’—self-replicating prompts exploiting AI agents’ instruction-following—is being compared to the 1988 Morris worm, but targeting AI’s core function rather than system flaws, according to Wiz. Meanwhile, Gravitee research indicates 1.5 million of 3 million AI agents in large US and UK enterprises operate without oversight, with 88% of firms experiencing AI agent-related security incidents. <a href="https://app.daily.dev/feed-by-ids?id=ycPDVy6OP&amp;id=Hv04ODVQw&amp;id=ehksC8VMf&amp;id=gy7WeHs5A&amp;id=kssiMjacP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel and Deno push enterprise AI development and secure execution</strong>: Vercel has revamped its v0 platform from a prototyping tool to an enterprise-grade AI coding platform, focusing on bridging AI-generated demos to production-ready code with new security features and integrations with Snowflake and AWS. Concurrently, Deno Deploy reached General Availability, introducing Deno Sandbox in beta, which provides instant Linux microVMs for securely running untrusted code, especially LLM-generated code, with hypervisor-level isolation and sub-second boot times. Both platforms aim to streamline AI-assisted development while addressing critical security and deployment challenges for enterprise users. <a href="https://app.daily.dev/feed-by-ids?id=8wRm1h8NM&amp;id=Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenID Connect gains traction for machine identities and cloud security</strong>: Dependabot now supports OpenID Connect (OIDC) authentication for private registries, allowing dynamic acquisition of short-lived credentials and eliminating the need for storing long-lived secrets. This move, along with Bitbucket Pipelines supporting multiple audiences in OIDC claims, enhances security by reducing attack surfaces and simplifying credential management for non-human identities (NHIs). The broader trend emphasizes comprehensive lifecycle management for NHIs—machine identities with credentials—to mitigate breach risks and improve compliance in cloud environments. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Snowflake expands AI data cloud with new offerings</strong>: Snowflake launched Cortex AI, a serverless generative AI suite, and a PostgreSQL database-as-a-service within its AI Data Cloud, integrating transactional workloads with analytics and AI, alongside Openflow for plug-and-play data integration. <a href="https://app.daily.dev/feed-by-ids?id=1F9HXgJiK&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks Lakebase now generally available on AWS</strong>: Databricks Lakebase, a new operational database architecture separating compute from storage, is now generally available on AWS, offering a serverless Postgres service that scales automatically and supports instant data branching directly on data lakes. <a href="https://app.daily.dev/posts/qtDOznoeU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI details Codex CLI internals and agent loop architecture</strong>: OpenAI published the first in a series explaining the internal design of Codex, their software development agent, focusing on its agent loop architecture and strategies for managing LLM inference performance. <a href="https://app.daily.dev/posts/DWHoaTisZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Android Studio integrates AI for UI transformation</strong>: Android Studio now includes an AI-powered agent mode that allows developers to modify UI elements using natural language commands, with Gemini automatically applying corresponding code modifications. <a href="https://app.daily.dev/posts/j7L8idP80" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Instacart’s Caper team accelerates Android migration with AI coding assistants</strong>: Instacart’s Caper team migrated their Android smart cart app from Fragments to Jetpack Compose, accelerating the process by 5-7x using AI coding assistants and formalizing their AI workflow into reusable AI skills. <a href="https://app.daily.dev/feed-by-ids?id=IH6kovw5g&amp;id=OWEjri5UU&amp;id=eAd8BFgLE&amp;id=oppY5SpKL&amp;id=pFVTGaupN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubisoft union calls for CEO resignation amid trust breakdown</strong>: Union representatives at Ubisoft Paris are calling for CEO Yves Guillemot to resign, citing a ‘complete breakdown of trust’ due to studio closures, game cancellations, cost-cutting, and a five-day return-to-office mandate. <a href="https://app.daily.dev/posts/Ko8v1dV9o" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks funding as Rust alternative gains traction</strong>: Todd C. Miller, the sole maintainer of the <code>sudo</code> utility for over 30 years, is seeking sponsorship to continue development after Quest Software ended support, while <code>sudo-rs</code>, a Rust reimplementation, is gaining traction with Ubuntu 25.10 set to adopt it. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X replaces search with Grok LLM</strong>: Apparently, fixing the existing search system was just too hard for X, so they decided to throw billions at GPU infrastructure to replace it with Grok, an LLM. Because, you know, a large language model is definitely the most efficient and accurate way to find that one tweet from 2022. What could possibly go wrong with a search engine that hallucinates? <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: The Polish railway passenger portal is now displaying randomized train schedules to mobile users, specifically those on CGNAT addresses. PKP declined to comment, citing ‘security reasons.’ So, instead of, say, implementing proper bot detection, they’ve decided to just make their service unusable for legitimate customers. Peak efficiency, folks. <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Take-Two Interactive says GTA 6 is ‘entirely handcrafted,’ no generative AI</strong>: Take-Two Interactive CEO Strauss Zelnick assures us that GTA 6’s world is ‘entirely handcrafted’ and uses ‘zero part’ generative AI, especially after their stock dropped when Google announced an AI tool for creating playable game worlds. He clarifies AI tools ‘enhance workflows but don’t replace creativity.’ Because, obviously, the market needs to be reminded that humans still make games, not just algorithms churning out endless, soulless content. <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
