<h2>Must know</h2>
<ul>
<li><strong>AI agent security is a dumpster fire</strong>: Security researchers breached an AI agent social network in minutes, exposing critical vulnerabilities like authentication bypass and database misconfigurations. This incident, along with the emergence of ‘prompt worms’ that exploit AI agents’ instruction-following, highlights severe security gaps in rapidly developing AI platforms. The use of AI coding assistants to find these flaws further complicates the landscape, demonstrating that AI can be a double-edged sword in cybersecurity, as reported by Wiz. <a href="https://app.daily.dev/posts/ycPDVy6OP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer needs cash, Rust alternative gains ground</strong>: The sole maintainer of the critical <code>sudo</code> utility for over 30 years is seeking funding after Quest Software ended its support. This comes as <code>sudo-rs</code>, a Rust-based memory-safe alternative, gains traction, with Ubuntu 25.10 planning to adopt it as default. This situation underscores the precarious reliance on individual efforts for foundational open-source infrastructure. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks and Snowflake push new data platforms</strong>: Databricks Lakebase is now generally available on AWS, offering a new operational database architecture that separates compute from storage and runs directly on data lakes. This serverless Postgres service aims to unify operational, analytical, and AI workloads without data movement, simplifying architectures and accelerating delivery. Snowflake also launched a PostgreSQL-as-a-service and Openflow for data integration, signaling a broader industry trend towards integrated data platforms for real-time and AI workflows. <a href="https://app.daily.dev/feed-by-ids?id=qtDOznoeU&amp;id=1F9HXgJiK&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel v0 pivots to enterprise AI development</strong>: Vercel rebuilt its v0 AI-powered development platform into an enterprise-grade tool, focusing on bridging AI-generated prototypes to production-ready code with new security features and Git-based workflows. <a href="https://app.daily.dev/posts/8wRm1h8NM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy goes GA, launches sandbox for untrusted code</strong>: Deno Deploy is now generally available, featuring Node.js framework support, integrated serverless PostgreSQL, and OpenTelemetry observability, alongside a new Deno Sandbox for securely running untrusted code in microVMs. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM Identity Center gets multi-region replication</strong>: AWS IAM Identity Center now supports multi-Region replication for workforce identities and permission sets, enhancing resiliency and enabling applications closer to users without additional cost. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OIDC adoption grows for machine identities</strong>: OpenID Connect (OIDC) authentication is expanding, with Dependabot now supporting it for private registries and Bitbucket Pipelines adding multiple audience support, enhancing security by reducing reliance on long-lived credentials. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI speeds up Android app migration</strong>: Instacart’s Caper team used AI coding assistants to accelerate their Android app migration from Fragments to Jetpack Compose by 5-7x, demonstrating AI’s impact on technical debt reduction. <a href="https://app.daily.dev/feed-by-ids?id=IH6kovw5g&amp;id=OWEjri5UU&amp;id=eAd8BFgLE&amp;id=oppY5SpKL&amp;id=pFVTGaupN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Hurd project shows significant progress</strong>: The GNU Hurd project, after 36 years, shows significant progress with 80% Debian package compilation, 64-bit support, SMP functionality, and modern hardware drivers running in userland. <a href="https://app.daily.dev/posts/XjM52iBH8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubisoft union demands CEO resignation</strong>: Ubisoft union representatives are calling for CEO Yves Guillemot’s resignation due to a “complete breakdown of trust” following studio closures, game cancellations, and a five-day return-to-office mandate. <a href="https://app.daily.dev/posts/Ko8v1dV9o" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X replaces search with Grok LLM</strong>: X, in its infinite wisdom, decided that fixing its search was too hard, so they just replaced it with Grok, their LLM. Apparently, billions were invested in GPU infrastructure for this, because, you know, a simple search index is rocket science. Who needs accurate search results when you can have AI-powered hallucinations? <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Take-Two says GTA 6 is handcrafted, but AI is for the plebs</strong>: Take-Two Interactive CEO Strauss Zelnick proudly declared that generative AI plays “zero part” in GTA 6, assuring us the world is “entirely handcrafted.” Meanwhile, they’re using AI for “cost and time efficiencies” in hundreds of other programs. So, AI is great for saving money, just not for the ‘creative’ stuff that actually sells games. Got it. <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: A Polish railway portal is apparently randomizing train schedules for mobile users, specifically those on CGNAT IP addresses, by up to ±60 minutes. The company declined to comment, citing “security reasons.” Because nothing says “secure” like intentionally providing incorrect information to your customers. Peak user experience, truly. <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
