<h2>Must know</h2>
<ul>
<li><strong>AI agent security is a dumpster fire</strong>: Security researchers breached Moltbook, an AI agent social network, in under three minutes by exploiting basic design flaws like authentication bypass and database misconfiguration. This incident, along with a viral ‘AI agent sued human’ stunt, highlights critical security gaps in AI-assisted development and the emerging threat of ‘prompt worms’ that could propagate through AI agent networks. The rapid adoption of AI agents is outpacing security measures, with 1.5 million out of 3 million agents in large enterprises operating without oversight, leading to widespread security incidents. <a href="https://app.daily.dev/feed-by-ids?id=ycPDVy6OP&amp;id=Hv04ODVQw&amp;id=ehksC8VMf&amp;id=gy7WeHs5A&amp;id=kssiMjacP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks funding, Rust alternative gains ground</strong>: The sole maintainer of the critical <code>sudo</code> utility, Todd C. Miller, is seeking sponsorship after Quest Software ended its support, highlighting the precarious state of essential open-source infrastructure. Meanwhile, <code>sudo-rs</code>, a memory-safe Rust reimplementation, is gaining traction, with Ubuntu 25.10 set to adopt it as the default, showcasing a significant shift towards more secure system programming alternatives. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks and Snowflake push converged data platforms for AI</strong>: Databricks Lakebase is now generally available on AWS, offering a new operational database architecture that separates compute from storage and runs directly on data lakes. This serverless Postgres service aims to unify operational, analytical, and AI workloads, eliminating data movement and simplifying architectures. Snowflake also expanded its AI Data Cloud with Cortex AI, a serverless generative AI suite, and a PostgreSQL-as-a-service that integrates transactional workloads with analytics and AI, reflecting a broader industry trend towards converged data platforms for real-time and agentic AI. <a href="https://app.daily.dev/feed-by-ids?id=qtDOznoeU&amp;id=1F9HXgJiK&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel v0 revamps for enterprise AI development</strong>: Vercel rebuilt its v0 AI-powered development platform, evolving it into an enterprise-grade AI coding platform with security features and integrations for production-ready code. <a href="https://app.daily.dev/posts/8wRm1h8NM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy hits GA, launches sandbox for untrusted code</strong>: Deno Deploy reached General Availability, adding Node.js framework support, integrated serverless PostgreSQL, and OpenTelemetry observability, while also launching Deno Sandbox for securely running untrusted code in microVMs. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI details codex agent architecture</strong>: OpenAI released details on the internal design of Codex, their software development agent, focusing on its agent loop architecture and strategies for managing LLM inference performance. <a href="https://app.daily.dev/posts/DWHoaTisZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM identity center gets multi-region replication</strong>: AWS IAM Identity Center now supports multi-Region replication for workforce identities and permission sets, enhancing resiliency and enabling applications closer to users. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dependabot embraces OIDC for private registries</strong>: Dependabot now supports OpenID Connect (OIDC) authentication for private registries, allowing dynamic, short-lived credentials and reducing the attack surface. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Hurd project shows significant progress</strong>: The GNU Hurd project, after 36 years, shows significant progress with 80% Debian package compilation, 64-bit support, SMP functionality, and modern hardware drivers. <a href="https://app.daily.dev/posts/XjM52iBH8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubisoft union demands CEO resignation</strong>: Ubisoft union representatives are calling for CEO Yves Guillemot’s resignation due to a “complete breakdown of trust” following studio closures, game cancellations, and a five-day return-to-office mandate. <a href="https://app.daily.dev/posts/Ko8v1dV9o" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Take-Two says AI plays “zero part” in GTA 6, but everywhere else</strong>: Take-Two Interactive CEO Strauss Zelnick assures us that generative AI plays “zero part” in GTA 6 development, because apparently, a handcrafted world is still a selling point. He then immediately pivots to how they use AI for “cost and time efficiencies” across hundreds of other projects. So, AI is useless for creativity but great for the bottom line? Got it. <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>X replaces search with Grok because fixing it was “too hard”</strong>: X (formerly Twitter) has replaced its search functionality with Grok, an LLM, because fixing the existing search system was apparently “too difficult.” Instead of, you know, fixing the search, they just threw billions of dollars at GPUs to build an LLM. Peak efficiency, folks. <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: A Polish railway portal is randomizing train schedules for mobile users based on their IP addresses, claiming it’s an anti-scraping measure. So, instead of blocking bots, they’re just giving everyone wrong information. Security through obscurity, but for train times. Brilliant. <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
