<h2>Must know</h2>
<ul>
<li><strong>AMD chips vulnerable to StackWarp attack</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen 1–5 CPUs, including EPYC 7003, 8004, 9004, and 9005 series. This flaw allows privileged attackers to bypass SEV-SNP confidential VM protections by manipulating the CPU stack engine, enabling control flow hijacking. AMD has released microcode updates, with more firmware patches expected in April 2026, and advises disabling hyperthreading on critical systems as a mitigation. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Chrome extensions steal enterprise session tokens</strong>: Five Chrome extensions, disguised as productivity tools, were found stealing authentication session tokens from enterprise HR and ERP platforms like Workday, NetSuite, and SuccessFactors. Socket.dev researchers reported that these extensions exfiltrated cookies, bypassing MFA and allowing full account takeover for over 2,300 users. Google was notified, but the extent of removal and user remediation remains unclear. <a href="https://app.daily.dev/posts/3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubisoft sued for constructive dismissal by former Assassin’s Creed lead</strong>: Marc-Alexis Côté, who led the Assassin’s Creed franchise for nearly two decades, is suing Ubisoft for $1.3 million CAD, alleging constructive dismissal. Côté claims Ubisoft demoted him by offering diminished roles at its Tencent-backed Vantage Studios, forcing his departure. He also seeks to remove a non-compete clause, while Ubisoft maintains his exit was voluntary. <a href="https://app.daily.dev/posts/LIV91KSqU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitLab 18.8 launches AI-orchestrated DevOps platform</strong>: GitLab 18.8 introduces the Duo Agent Platform, enabling AI agents to manage work items and triage security vulnerabilities using natural language processing, with a central AI Catalog for discovery and management. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio under .NET Foundation</strong>: Microsoft has open-sourced XAML Studio, a lightweight prototyping tool for WinUI and UWP, under the .NET Foundation, with version 2.0 featuring a redesigned UI and deeper WinUI 3 integration. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel updates LLM-Scaler-Omni for Arc Graphics</strong>: Intel released an update to LLM-Scaler-Omni, enhancing support for ComfyUI and SGLang on Intel Arc Graphics, focusing on improved performance for image, voice, and video generation workloads. <a href="https://app.daily.dev/posts/XBX3pzO5M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sequoia Capital invests in Anthropic, despite rival stakes</strong>: Sequoia Capital is investing in Anthropic’s $25 billion funding round, valuing the company at $350 billion, despite already holding stakes in OpenAI and xAI, breaking traditional VC norms against backing direct competitors. <a href="https://app.daily.dev/posts/yuiHTajaU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Windows 11 23H2 emergency patch for shutdown and RDP bugs</strong>: Microsoft released an emergency update (KB5077797) for Windows 11 version 23H2, fixing critical bugs that prevented proper shutdown/restart and caused persistent credential prompts for Remote Desktop users. <a href="https://app.daily.dev/posts/u2UYa6XNM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0.0 released with modernization focus</strong>: jQuery 4.0.0, released for its 20th anniversary, focuses on removing deprecated features, dropping support for older browsers, and rewriting the codebase as ES modules, reducing library size and improving standards compliance. <a href="https://app.daily.dev/feed-by-ids?id=5SOCKxGlX&amp;id=dThF1vPz2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.0 stable release brings major technical upgrades</strong>: Wine 11.0 stable is out with over 6,300 changes, including NTSYNC kernel module support, a completed WoW64 architecture, EGL as the default OpenGL backend, and Vulkan 1.4.335 support. <a href="https://app.daily.dev/posts/5LDn1X8et" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding tools: the new productivity panacea, or just more prompt engineering?</strong>: Apparently, AI coding tools like Copilot and Claude Code are ‘reshaping productivity’ and ‘freeing mental capacity’ for developers. But wait, you still need ‘clear context and instructions’ for LLMs, and ‘prompt engineering’ is now a ‘critical skill.’ So, we’re just trading one kind of coding for another, only now we’re talking to a chatbot that might hallucinate. Progress! <a href="https://app.daily.dev/feed-by-ids?id=3DI7vnha4&amp;id=iCtRT8XFn&amp;id=ATZPMmQn8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents: the next big thing, or just more ‘psychosis’?</strong>: Changelog News is worried about ‘AI agent psychosis’ – erratic behavior from AI in production. Meanwhile, <a href="http://Monday.com" target="_blank" rel="noopener nofollow">Monday.com</a> is busy deploying Slack bots powered by LLM agents to save engineers ‘hours’ of manual work, after fixing ‘hallucinations’ with server-side pre-computation. So, either AI agents are going crazy, or some companies are actually figuring out how to make them useful without all the drama. Pick your narrative. <a href="https://app.daily.dev/feed-by-ids?id=AJzG7x8FZ&amp;id=AS53pzdrZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA allegedly training AI on pirated books: because ethics are for other companies</strong>: NVIDIA executives reportedly contacted Anna’s Archive, a known pirate library, to access millions of copyrighted books for AI model training, according to an amended authors’ lawsuit. They were allegedly warned about the illegal nature of the content but proceeded anyway. Because why pay for data when you can just, you know, ‘access’ it? It’s not like copyright laws apply to AI, right? <a href="https://app.daily.dev/posts/2IcgLruSE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
