<h2>Must know</h2>
<ul>
<li><strong>Meta pivots from metaverse to AI, cuts Reality Labs staff</strong>: Meta is closing three VR studios and laying off 10% of its Reality Labs workforce, approximately 1,500 employees, after the division lost over $70 billion since 2021. This strategic shift moves investment away from the metaverse and VR towards AI-powered glasses and wearable technology, as reported by multiple sources. The company aims to reallocate resources in response to sustained financial losses and slow market growth in VR hardware. <a href="https://app.daily.dev/posts/7ystcAQPc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare fined by Italy, threatens withdrawal over Piracy Shield law</strong>: Italy’s AGCOM has fined Cloudflare €14.2 million for not blocking pirate sites on its 1.1.1.1 DNS resolver, citing the Piracy Shield law. Cloudflare argues compliance is technically infeasible without impacting all users and has threatened to withdraw its servers from Italy, according to Cloudflare’s public statements. CEO Matthew Prince is seeking U.S. government support and has notified the International Olympic Committee about potential cybersecurity risks for the 2026 Winter Olympics in Italy. <a href="https://app.daily.dev/posts/Q0IbcQd4P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s AI data center expansion faces backlash and energy scrutiny</strong>: Microsoft’s ‘Community-First AI Infrastructure’ initiative, promising to cover power costs and minimize water usage for its U.S. data centers, is a direct response to widespread community protests in 24 states. The company aims to prevent residential electricity bill increases, but faces ongoing resistance, having already abandoned projects in Wisconsin. This comes as the IEA projects global data center electricity demand to more than double by 2030, intensifying scrutiny on energy policy and clean energy solutions. <a href="https://app.daily.dev/posts/jqtBl3Jnb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic commits $1.5 million to Python Software Foundation for security</strong>: Anthropic has pledged $1.5 million over two years to the Python Software Foundation (PSF) to enhance Python ecosystem security, focusing on automated malware detection for PyPI packages and supporting CPython core development. <a href="https://app.daily.dev/posts/yCHi0TB7q" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google and Meta expand multimodal AI and infrastructure</strong>: Google released Veo 3.1 for vertical video and Gemini 3, a multimodal AI platform with a 1M+ token context window, while Meta announced Meta Compute, a massive AI infrastructure scale-up targeting tens of gigawatts of power capacity. <a href="https://app.daily.dev/feed-by-ids?id=2S31ZjKRT&amp;id=NEGZugNBg&amp;id=kwRMqebwB&amp;id=qjYQj2ENJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Linux malware targets cloud and container infrastructure</strong>: Check Point Research identified VoidLink, a new Linux malware framework written in Zig, designed to infiltrate cloud and container environments (AWS, Azure, GCP, Docker, Kubernetes) using advanced rootkit techniques and a modular plugin system for credential harvesting and lateral movement. <a href="https://app.daily.dev/posts/uJaIfhgHH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WordPress 7.0 to drop PHP 7.2/7.3 support</strong>: The WordPress core team is preparing for the 7.0 release, which will discontinue support for PHP 7.2 and 7.3, and is calling for volunteers to participate in the development process. <a href="https://app.daily.dev/posts/xho5u0zys" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases security updates</strong>: Node.js 20.20.0 (LTS) and 25.3.0 (Current) were released with security updates addressing multiple CVEs, enhancing permission handling, and improving error management for TLSSocket and async_hooks. <a href="https://app.daily.dev/feed-by-ids?id=DwsoMgMKH&amp;id=Wy4br4Zyw&amp;id=Zr0Dv9dwZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust infrastructure team recap and plans</strong>: The Rust Infrastructure Team migrated to a new CI bot, moved <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> to Fastly CDN, implemented parallel benchmarks, expanded Infrastructure as Code, and renamed default branches to ‘main’ across 14 repositories. <a href="https://app.daily.dev/posts/m2OVQmP6S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Frontend frameworks evolve for senior developers</strong>: React, Vue, Svelte, Solid, and Qwik are evolving, requiring senior developers to understand performance tradeoffs and architectural concepts like fine-grained reactivity and resumability, with Web Components gaining legitimacy for framework-agnostic UI primitives. <a href="https://app.daily.dev/posts/RRH1cjln0" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents are unreliable and insecure by design, says Signal</strong>: Signal’s leadership is out here stating the obvious: agentic AI systems, like Microsoft’s Recall, are ‘unreliable and insecure by design.’ Apparently, storing all user activity in databases vulnerable to malware and prompt injection is a bad idea. Who knew? They’re calling for a halt to ‘reckless AI deployment,’ which sounds a lot like asking tech companies to prioritize user safety over quarterly earnings. Good luck with that. <a href="https://app.daily.dev/feed-by-ids?id=TJt6uaOsV&amp;id=XnmeLgefE&amp;id=rjeAcjlYe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailwind CSS revenue plummets due to AI, blames documentation caching</strong>: Tailwind CSS is reportedly seeing an 80% revenue drop, and they’re blaming AI-driven documentation caching and search. So, instead of adapting, they’re rejecting pull requests that would improve LLM parsing, because protecting direct traffic is apparently more important than, you know, progress. It’s almost like they’re discovering that open-source business models built on documentation are a bit fragile when AI can just scrape everything. <a href="https://app.daily.dev/feed-by-ids?id=2a8HRxzCb&amp;id=Ml47Y2Hd6&amp;id=g50WJmopi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Traditional code review is dead, long live ‘verify outcomes’</strong>: Apparently, ‘traditional code review is dead’ because AI-generated code is just too much to handle. Now, instead of actually reading code, we’re supposed to ‘verify behavior in live preview environments.’ This shift, of course, creates ‘infrastructure challenges’ because AI agents are generating ‘multiple PRs simultaneously.’ So, we’ve traded human toil for AI-induced infrastructure headaches. Progress! <a href="https://app.daily.dev/posts/1lxfdifYi" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
