<h2>Must know</h2>
<ul>
<li><strong>Apple partners with Google for AI, TypeScript compiler rewritten in Go</strong>: Apple is integrating Google’s Gemini AI models into Siri and other features, a multi-year, non-exclusive partnership reportedly costing Apple $1 billion annually. This comes after Apple evaluated models from OpenAI and Anthropic, ultimately choosing Gemini as the foundation for its own AI. Meanwhile, TypeScript 7 (Project Corsa) is getting a complete compiler rewrite in Go, promising up to 10x faster build times and reduced memory usage, as reported by InfoQ. This move leverages Go’s performance for efficient parallel processing and aligns TypeScript with other high-performance native tooling. <a href="https://app.daily.dev/feed-by-ids?id=joVK7B34Z&amp;id=iOoEZIQrn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust-based malware targets crypto, MuddyWater APT shifts to Rust</strong>: A new GoBruteforcer botnet, written in Golang, is actively targeting Linux servers and cryptocurrency infrastructure, exploiting weak credentials often found in LLM-generated code. Simultaneously, the Iran-linked MuddyWater APT group has shifted from PowerShell to a new Rust-based malware called RustyWater for espionage campaigns in the Middle East, targeting diplomatic, maritime, financial, and telecom organizations. This indicates a growing trend of sophisticated threats leveraging modern languages like Go and Rust for stealth and efficiency. <a href="https://app.daily.dev/feed-by-ids?id=nO4oxH8nA&amp;id=xFuCzijpN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes 1.35 brings workload-aware scheduling, Linux 6.19-rc5 released</strong>: Kubernetes v1.35 has been released, introducing workload-aware scheduling and a new Workload API, including gang scheduling to prevent partial resource usage and deadlocks. This aims to improve resource efficiency and stability in cloud-native environments. Concurrently, Linux 6.19-rc5 is out, featuring a fix for newer NVIDIA GPUs in the Nouveau driver, a RISC-V security vulnerability patch, and support for the Logitech MX Anywhere 3S mouse, as reported by Phoronix. <a href="https://app.daily.dev/feed-by-ids?id=R6fTuHjeX&amp;id=zTULpLxtX&amp;id=MbuLWzK6Y" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Deno 2.6 boosts performance with Go-based type checker</strong>: Deno 2.6 introduces a 2x faster experimental TypeScript type checker written in Go, alongside granular permission controls and enhanced Node.js compatibility. <a href="https://app.daily.dev/posts/Z4UbFEwzL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Postman acquires Fern for API documentation and SDK automation</strong>: Postman has acquired Fern, a startup specializing in automating API documentation and generating client SDKs in nine programming languages, aiming to streamline the API lifecycle for developers. <a href="https://app.daily.dev/posts/9UqlZV9z7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic launches agentic AI file management for non-coders</strong>: Anthropic’s new Cowork feature in Claude Desktop (macOS, Claude Max subscribers) allows users to manage files, organize data, and draft reports via a chat interface, without requiring command-line knowledge. <a href="https://app.daily.dev/posts/TLkxIySjV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CloudWatch revamped for unified observability</strong>: AWS has transformed CloudWatch into a unified observability platform, consolidating operational, security, and compliance logs across accounts, supporting OpenTelemetry, and offering natural language queries. <a href="https://app.daily.dev/posts/Z4eMJMdxN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent security shifts to external controls</strong>: AI agent security is moving towards deterministic external controls like network-isolated environments and gateway-enforced policies to counter semantic/intent-based attacks and prompt injection, as traditional methods prove ineffective. <a href="https://app.daily.dev/feed-by-ids?id=CuSSpmwf6&amp;id=EDYtMcTfL&amp;id=JuPUyAfNx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft retires MDT, limits Copilot admin control</strong>: Microsoft has abruptly retired the Microsoft Deployment Toolkit (MDT) after 20 years, pushing users towards cloud-integrated solutions, while also introducing limited admin controls for removing the Copilot app on managed devices. <a href="https://app.daily.dev/feed-by-ids?id=0sSu27x90&amp;id=8WMJpirC0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Googler shares lessons on simple, clear code</strong>: A Google senior engineer emphasizes solving user problems, shipping early, writing clear code, avoiding premature optimization, and deleting unnecessary code for robust and maintainable software systems. <a href="https://app.daily.dev/posts/17tA898FS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>India wants your smartphone’s source code, but not really</strong>: India’s proposed smartphone security rules include demands for source code access and 12-month device log retention, which Apple, Samsung, and Google are, predictably, resisting. The IT ministry publicly denies seeking source code, calling Reuters reports inaccurate, while industry documents suggest otherwise. It’s a classic ‘trust us, but also give us everything’ scenario, with no other government globally making such demands. Good luck with that, India. <a href="https://app.daily.dev/posts/C0BEamxdR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI code generation: cheap code, expensive problems</strong>: LLM tools like Claude Code make code generation fast and accessible, even for non-developers, but don’t mistake cheap code for reliable software. Salesforce learned this the hard way, laying off 4,000 experienced staff to replace them with AI, only to reverse course three months later due to reliability issues. Turns out, domain expertise and human judgment are still essential, because AI can’t quite grasp the nuances of ‘not breaking everything.’ <a href="https://app.daily.dev/feed-by-ids?id=BCKlippws&amp;id=aKgPqgLac" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic restricts third-party AI agents, OpenAI swoops in</strong>: Anthropic, in a brilliant move to control its value chain, restricted OAuth access for third-party agents like OpenCode, forcing them to use higher-cost API access. Naturally, OpenAI immediately announced official support for using ChatGPT subscriptions in OpenCode, positioning itself as the ‘open’ alternative. It’s almost like Anthropic forgot that alienating your developer community is a fantastic way to drive them straight to your competitor. <a href="https://app.daily.dev/feed-by-ids?id=8dtXe7P09&amp;id=eRi1VQ5SP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
