<h2>Must know</h2>
<ul>
<li><strong>AI agent security flaws and emerging threats</strong>: Security researchers breached an AI agent social network, Moltbook, in under three minutes by exploiting basic design flaws, demonstrating how AI coding assistants can be used for both development and exploitation. This incident, along with the emergence of ‘prompt worms’ that target AI agents’ instruction-following functions, highlights critical and evolving security challenges. Gravitee research indicates 1.5 million AI agents in large enterprises operate without oversight, leading to incidents like unauthorized actions and data leaks, with AI-powered tools now automating 80-90% of some cyberattacks, as reported by The Register. <a href="https://app.daily.dev/feed-by-ids?id=ycPDVy6OP&amp;id=Hv04ODVQw&amp;id=ehksC8VMf&amp;id=gy7WeHs5A&amp;id=kssiMjacP&amp;id=9iyiZmtgx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy reaches GA and introduces Deno Sandbox</strong>: Deno Deploy is now generally available, offering zero-config deployment for JavaScript and TypeScript applications with new features like Node.js framework support, integrated serverless PostgreSQL, and OpenTelemetry. Alongside this, Deno introduced Sandbox in beta, providing instant Linux microVMs for securely running untrusted code, particularly LLM-generated code, with hypervisor-level isolation and network egress control. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks Lakebase and Snowflake expand AI data cloud offerings</strong>: Databricks Lakebase is now generally available on AWS, offering a new operational database architecture that separates compute from storage and runs directly on data lakes, unifying operational, analytical, and AI workloads. Snowflake also expanded its AI Data Cloud with Cortex AI, a serverless generative AI suite, and a PostgreSQL database-as-a-service, both designed to operate directly within the Data Cloud without external data movement, simplifying architecture and strengthening governance. <a href="https://app.daily.dev/feed-by-ids?id=qtDOznoeU&amp;id=1F9HXgJiK&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OIDC adoption for machine identities and cloud security</strong>: Dependabot now supports OpenID Connect (OIDC) authentication for private registries, allowing dynamic acquisition of short-lived credentials and reducing the attack surface, while Bitbucket Pipelines also added support for multiple audiences in OIDC claims. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel v0 platform revamped for enterprise AI development</strong>: Vercel rebuilt its v0 AI-powered development platform, evolving it into an enterprise-grade tool with security features, integrations with Snowflake and AWS, and Git-based workflows to bridge AI-generated prototypes with production-ready code. <a href="https://app.daily.dev/posts/8wRm1h8NM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM Identity Center supports multi-region replication</strong>: AWS IAM Identity Center launched multi-Region replication support for workforce identities and permission sets, enhancing resiliency and enabling applications to be deployed closer to users while maintaining centralized configuration. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks funding, Rust alternative gains traction</strong>: Todd C. Miller, the sole maintainer of <code>sudo</code> for over 30 years, is seeking sponsorship to continue development, as <code>sudo-rs</code>, a memory-safe Rust reimplementation, gains traction with Ubuntu 25.10 set to adopt it as default. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Hurd project shows significant progress</strong>: The GNU Hurd project, a microkernel-based Unix replacement, is showing significant progress with 80% Debian package compilation, support for major desktop environments, and completed x86_64 and SMP functionality. <a href="https://app.daily.dev/posts/XjM52iBH8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL ecosystem developments and community engagement</strong>: PostgreSQL 18 development is seeing major corporate contributions, advanced text search capabilities via <code>pg_text_search</code> with BM25, and upcoming in-person training sessions at SCaLE 23x. <a href="https://app.daily.dev/feed-by-ids?id=9j18xk0DP&amp;id=Ia4IF0ShW&amp;id=s1yWQCmsf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>eBPF for deep observability and advanced networking</strong>: eBPF allows secure and efficient in-kernel programmability for deep observability, advanced networking, runtime security, and policy enforcement with minimal overhead, adopted by major cloud providers for Kubernetes networking. <a href="https://app.daily.dev/posts/5dgqAdLOO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X replaces search with Grok LLM</strong>: Apparently, fixing X’s existing search system was ‘too difficult,’ so they just threw billions of dollars at GPU infrastructure to replace it with Grok, an LLM. Because when in doubt, just replace a broken search engine with a hallucinating chatbot. What could possibly go wrong? <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Take-Two Interactive clarifies AI use in GTA 6</strong>: Take-Two Interactive CEO Strauss Zelnick had to clarify that generative AI plays ‘zero part’ in GTA 6 development, emphasizing it’s ‘entirely handcrafted.’ This comes after their stock dropped because Google announced an AI tool for creating game worlds. It’s almost like the market gets spooked by the idea that AI might actually <em>create</em> something, rather than just being a buzzword for ‘efficiency.’ <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: The Polish railway portal is now displaying randomized train schedules to mobile users, specifically those on CGNAT IP addresses. They claim it’s an anti-scraping measure, which is a fancy way of saying they’re punishing legitimate users because they can’t figure out how to block bots properly. PKP declined to comment, citing ‘security reasons,’ which is code for ‘we have no idea what we’re doing.’ <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
