<h2>Must know</h2>
<ul>
<li><strong>AI agent security flaws exposed, prompt worms emerge</strong>: Security researchers breached Moltbook, an AI agent social network, in under three minutes by exploiting basic design flaws like authentication bypass and database misconfiguration. This incident, along with the emergence of “prompt worms” that exploit AI agents’ instruction-following, highlights critical and evolving security challenges in AI agent platforms, as reported by Wiz. <a href="https://app.daily.dev/posts/ycPDVy6OP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks funding as Rust alternative gains traction</strong>: The sole maintainer of the <code>sudo</code> utility for over 30 years, Todd C. Miller, is seeking sponsorship to continue development after Quest Software ended its support. This comes as <code>sudo-rs</code>, a memory-safe Rust reimplementation, gains traction, with Ubuntu 25.10 planning to adopt it as the default <code>sudo</code> utility. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks Lakebase goes GA on AWS</strong>: Databricks Lakebase is now generally available on AWS, offering a new operational database architecture that separates compute from storage and provides a serverless Postgres service directly on data lakes. This aims to unify transactional, analytical, and AI workloads without data movement, simplifying architectures and speeding up delivery, according to Databricks. <a href="https://app.daily.dev/posts/qtDOznoeU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Deno Deploy goes GA, Sandbox launches for untrusted code</strong>: Deno Deploy reached General Availability with new features like Node.js framework support and integrated serverless PostgreSQL, while Deno Sandbox launched in beta for running untrusted code in instant Linux microVMs. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel v0 platform revamped for enterprise AI development</strong>: Vercel rebuilt its v0 AI-powered development platform, evolving it from a prototyping tool to an enterprise-grade AI coding platform with security features and integrations for production-ready code. <a href="https://app.daily.dev/posts/8wRm1h8NM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dependabot adds OIDC support for private registries</strong>: Dependabot now supports OpenID Connect (OIDC) authentication for private registries, allowing dynamic acquisition of short-lived credentials and eliminating the need to store long-lived secrets. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Snowflake expands AI data cloud with Cortex AI and PostgreSQL</strong>: Snowflake launched Cortex AI, a fully managed, serverless generative AI suite, and a PostgreSQL database-as-a-service, both operating directly within the Snowflake Data Cloud to simplify AI application development and data analysis. <a href="https://app.daily.dev/feed-by-ids?id=1F9HXgJiK&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Hurd project shows significant progress</strong>: GNU Hurd, a microkernel-based Unix replacement, shows significant progress with 80% Debian package compilation, support for major desktop environments, and completed x86_64 and SMP functionality. <a href="https://app.daily.dev/posts/XjM52iBH8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Instacart uses AI to accelerate Android app migration</strong>: Instacart’s Caper team migrated their Android smart cart app from Fragments to Jetpack Compose, accelerating the process by 5-7x using AI coding assistants and formalizing their AI workflow into reusable skills. <a href="https://app.daily.dev/feed-by-ids?id=IH6kovw5g&amp;id=OWEjri5UU&amp;id=eAd8BFgLE&amp;id=oppY5SpKL&amp;id=pFVTGaupN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL 18 development progresses with new features</strong>: PostgreSQL 18 development is underway with major companies contributing, and new features like advanced text search capabilities via <code>pg_text_search</code> using BM25 ranking are emerging. <a href="https://app.daily.dev/feed-by-ids?id=9j18xk0DP&amp;id=Ia4IF0ShW&amp;id=s1yWQCmsf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X replaces search with Grok LLM</strong>: X (formerly Twitter) has apparently replaced its entire search functionality with Grok, an LLM, because fixing the existing search system was “too difficult.” So, instead of engineering a robust search, they just threw billions at an LLM and called it a day. What could possibly go wrong with an AI-powered echo chamber? <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Take-Two says no AI in GTA 6, but everywhere else</strong>: Take-Two Interactive CEO Strauss Zelnick proudly declared that generative AI plays “zero part” in GTA 6 development, emphasizing its “handcrafted” nature. This, of course, came after their stock dropped when Google announced an AI tool for creating game worlds. It’s almost like they’re trying to reassure investors that their multi-billion dollar franchise isn’t just going to be procedurally generated nonsense, but also, they’re using AI for “cost and time efficiencies” everywhere else. Pick a lane, folks. <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: A Polish railway portal is reportedly randomizing train schedules for mobile users based on their IP addresses, specifically those on CGNAT. The system returns departure times with a uniform random distribution of ±60 minutes, likely as an anti-scraping measure. Because nothing says “user-friendly” like making your customers play a guessing game with their travel plans. PKP declined to comment, citing “security reasons,” which is always a great sign. <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
