<h2>Must know</h2>
<ul>
<li><strong>Microsoft kills MDT, pushes cloud-only Windows deployment</strong>: Microsoft abruptly retired the Microsoft Deployment Toolkit (MDT), a 20-year-old tool for zero-touch Windows deployment, without a transition period. This forces organizations towards more complex, cloud-integrated solutions like Windows Autopilot or Configuration Manager OSD, which lack MDT’s independence and simplicity. This move, reported by The Register, leaves many users exposed to unpatched security flaws and highlights Microsoft’s aggressive push towards cloud dependency, even for on-premise IT management. <a href="https://app.daily.dev/feed-by-ids?id=0sSu27x90&amp;id=8WMJpirC0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI data centers demand next-gen nuclear power</strong>: Hyperscale AI data centers, housing hundreds of thousands of GPUs, each demand over a gigawatt of electricity, currently sourced from over 50% fossil fuels. This massive energy consumption is driving urgent interest in advanced nuclear options like small modular reactors (SMRs) using high-assay low-enriched uranium (HALEU) and TRISO fuels. These SMRs promise safer, faster, and cheaper deployment to meet the escalating AI-associated demand, as reported by MIT Technology Review, but also bring community concerns over water usage and noise. <a href="https://app.daily.dev/feed-by-ids?id=bf0xB32y7&amp;id=qk040xtMi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic restricts Claude access for third-party coding agents</strong>: Anthropic has restricted OAuth access for third-party AI coding agents like OpenCode to its Claude Pro/Max models, forcing them to use higher-cost API access. This move, seen as an attempt to control its value chain, has alienated some users. In response, OpenAI publicly announced official support for using ChatGPT subscriptions with OpenCode, positioning itself as a more open alternative and intensifying competition in the LLM tool market, according to TechCrunch. <a href="https://app.daily.dev/feed-by-ids?id=8dtXe7P09&amp;id=eRi1VQ5SP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Kubernetes v1.35 enhances scheduling and workload APIs</strong>: Kubernetes v1.35 introduces workload-aware scheduling, gang scheduling for simultaneous pod starts, and a new Workload API, alongside improvements in service account token handling and mutable PersistentVolume node affinity. <a href="https://app.daily.dev/feed-by-ids?id=R6fTuHjeX&amp;id=zTULpLxtX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 6.19-rc5 brings NVIDIA, RISC-V, and Rust fixes</strong>: Linux 6.19-rc5 includes fixes for newer NVIDIA GPUs in the Nouveau driver, addresses a RISC-V security vulnerability, resolves a Rust Binder bug, and adds Logitech MX Anywhere 3S mouse support. <a href="https://app.daily.dev/posts/MbuLWzK6Y" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GoBruteforcer botnet targets crypto projects via weak credentials</strong>: The GoBruteforcer malware, written in Golang, is actively targeting Linux servers and cryptocurrency infrastructure, particularly the TRON blockchain, by brute-forcing services using weak or default credentials often found in LLM-generated code and public tutorials. <a href="https://app.daily.dev/posts/nO4oxH8nA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CloudWatch revamped for unified observability</strong>: AWS has transformed CloudWatch into a unified observability platform, consolidating operational, security, and compliance logs across accounts, supporting OCSF and OpenTelemetry, and offering Apache Iceberg-compatible access via S3 Tables for in-place querying. <a href="https://app.daily.dev/posts/Z4eMJMdxN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Postman acquires Fern for API documentation and SDK automation</strong>: Postman acquired Fern, a startup specializing in automating API documentation and generating client SDKs in nine languages, aiming to reduce developer friction and support costs by providing a seamless, end-to-end API lifecycle platform. <a href="https://app.daily.dev/posts/9UqlZV9z7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MuddyWater APT deploys new Rust-based malware</strong>: The Iran-linked MuddyWater APT is using a new Rust-based malware, RustyWater, in espionage campaigns targeting diplomatic, maritime, financial, and telecom organizations, primarily in the Middle East, marking a shift from their traditional PowerShell tools. <a href="https://app.daily.dev/posts/xFuCzijpN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Auto-CPUFreq 3.0 for Linux adds enhanced battery controls</strong>: Auto-CPUFreq 3.0 for Linux laptops introduces user-controlled CPU turbo mode override, improved battery handling for multi-battery setups, and ASUS laptop battery charge threshold support, allowing users to balance battery life and performance. <a href="https://app.daily.dev/posts/umWMqgJxW" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>India wants smartphone source code, denies it, then says ‘trust us’</strong>: India’s government proposed 83 security standards for smartphones, including source code access and 12-month device log retention, which Apple, Samsung, and Google are resisting due to proprietary tech concerns. Despite government documents reportedly showing explicit demands for source code, the IT ministry publicly denies it, calling Reuters reporting ‘inaccurate.’ So, they want to peek under the hood of your phone, but don’t you dare suggest they actually <em>want</em> to peek under the hood. Classic. <a href="https://app.daily.dev/posts/C0BEamxdR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents for file management: because what could go wrong with autonomous digital assistants?</strong>: Anthropic launched ‘Cowork,’ a research preview for Claude Max subscribers on macOS, allowing Claude to autonomously read, edit, and create files in a specified folder via chat. It’s pitched as agentic AI for non-coders to organize receipts and draft reports. What could possibly go wrong with an experimental AI having direct write access to your file system? Nothing, I’m sure, especially with those ‘documented risks’ like prompt injection and accidental file deletion. <a href="https://app.daily.dev/posts/TLkxIySjV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered job platform leaks user data: because security is for humans, not AI</strong>: Interview Coder, an AI-powered job interview platform, publicly leaked user data, including full names, offer letters, and compensation, on its homepage via poorly redacted PDFs. This isn’t their first rodeo, as they previously leaked API keys on GitHub. Apparently, while AI is busy generating code, it’s also generating new ways to expose sensitive information. Maybe ‘AI-powered’ should come with a ‘human-supervised security’ disclaimer. <a href="https://app.daily.dev/feed-by-ids?id=UnvBaUcPK&amp;id=wA63z9DYQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
