<h2>Must know</h2>
<ul>
<li><strong>AMD CPUs vulnerable to StackWarp attack</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen 1-5 CPUs, including EPYC 7003, 8004, 9004, and 9005 series. This flaw allows privileged attackers to bypass SEV-SNP confidential VM protections by manipulating the CPU stack engine, enabling control flow hijacking. AMD has released microcode updates, with further firmware patches expected in April 2026, and advises disabling hyperthreading on critical systems as a mitigation. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Chrome extensions steal enterprise session tokens</strong>: Five Chrome extensions, disguised as productivity tools, were found stealing authentication session tokens from enterprise HR and ERP platforms like Workday, NetSuite, and SuccessFactors. Socket.dev researchers reported that these extensions exfiltrated cookies, bypassing credentials and MFA, allowing attackers full access to compromised accounts. Google was notified, but the extensions had already been installed by thousands of users, raising concerns about the Chrome Web Store’s vetting process. <a href="https://app.daily.dev/posts/3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab 18.8 launches AI-orchestrated DevOps platform</strong>: GitLab 18.8 introduces the Duo Agent Platform, now generally available, which orchestrates AI agents across the software development lifecycle. This includes a Planner Agent for managing work items and a Security Analyst Agent that uses natural language processing to triage vulnerabilities, even automatically dismissing irrelevant ones. The platform also features a Central AI Catalog for agent discovery and management, allowing users to create customizable AI workflows from planning to deployment. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Microsoft open-sources XAML Studio</strong>: Microsoft has open-sourced XAML Studio, a lightweight prototyping tool for WinUI and UWP projects, under the .NET Foundation, with version 2.0 in development featuring a redesigned UI and deeper WinUI 3 integration. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0.0 released after a decade</strong>: jQuery 4.0.0, released on its 20th anniversary, focuses on removing deprecated features, dropping support for older browsers like IE10, and modernizing its codebase to ES modules, significantly reducing its size. <a href="https://app.daily.dev/feed-by-ids?id=5SOCKxGlX&amp;id=dThF1vPz2&amp;id=rIv7Y0v7o" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nuxt Studio goes free and open source</strong>: Nuxt Studio is now a free, open-source, self-hosted Nuxt module, replacing the legacy platform with a rebuilt Notion-like Markdown editor, schema-based forms, and direct GitHub/GitLab commits. <a href="https://app.daily.dev/posts/T2J35yOtu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Windows 11 23H2 emergency patch for shutdown and RDP bugs</strong>: Microsoft released an emergency update (KB5077797) for Windows 11 version 23H2 to fix critical bugs preventing proper shutdown/restart and causing persistent credential prompts for Remote Desktop users. <a href="https://app.daily.dev/posts/u2UYa6XNM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.0 stable release with major upgrades</strong>: Wine 11.0 stable is out with over 6,300 changes, including NTSYNC kernel module support, a completed WoW64 architecture, EGL as the default OpenGL backend, and Vulkan 1.4.335 support. <a href="https://app.daily.dev/posts/5LDn1X8et" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel LLM-Scaler-Omni update for Arc Graphics</strong>: Intel updated LLM-Scaler-Omni to improve support for ComfyUI and SGLang on Intel Arc Graphics, enhancing its capabilities for image, voice, and video generation in both Omni Studio and Omni Serving modes. <a href="https://app.daily.dev/posts/XBX3pzO5M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust-analyzer v0.3.2761 released</strong>: Rust-analyzer version 0.3.2761 fixes 13 issues, including improved flycheck stability, synchronized cast checks, and enhanced symbol indexing for macro-generated imports and re-exports. <a href="https://app.daily.dev/posts/kEIknGK9T" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Sequoia Capital’s AI investment strategy: who needs ethics when there’s FOMO?</strong>: Sequoia Capital is reportedly investing in Anthropic’s $25 billion funding round, despite already holding stakes in direct competitors OpenAI and xAI. Apparently, the old VC norm of avoiding conflicts of interest is out the window, especially when there’s a chance to throw money at anything with ‘AI’ in the name. OpenAI CEO Sam Altman once warned investors would lose access to confidential info if they funded rivals, but who cares about ‘confidential info’ when you can just buy a piece of every pie, right? <a href="https://app.daily.dev/posts/yuiHTajaU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: the ultimate productivity hack or just more work?</strong>: AI coding tools like Cursor and Copilot are supposedly revolutionizing development, letting autonomous agents do complex research and generate reports with minimal human oversight. Yet, other reports suggest these tools generate lower-quality code for nuanced tasks, requiring substantial human correction and leading to ‘process debt.’ So, are we boosting productivity or just creating more work for ourselves, only now with a fancy AI assistant to blame? <a href="https://app.daily.dev/feed-by-ids?id=3DI7vnha4&amp;id=ATZPMmQn8&amp;id=DdiXGTqPN&amp;id=L2hSWhbgY&amp;id=LJqUceZbE&amp;id=Y8gY63ibF&amp;id=aGFVTrinz&amp;id=aKVj0i6Bm&amp;id=j91dGf3TP&amp;id=tJZLXej6S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA’s alleged book piracy: training AI on stolen goods, classy!</strong>: NVIDIA executives are being accused in an amended lawsuit of contacting Anna’s Archive, a known pirate library, to access millions of copyrighted books for AI model training. The lawsuit claims NVIDIA was explicitly warned about the illegal nature of the content but proceeded anyway, allegedly using other piracy sites like Books3 and Sci-Hub. Because why pay for data when you can just, you know, ‘innovate’ by stealing it? Very on-brand for the tech industry’s ‘move fast and break things’ ethos, especially copyright laws. <a href="https://app.daily.dev/posts/2IcgLruSE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
