<h2>Must know</h2>
<ul>
<li><strong>AI is changing enterprise IT hiring and cloud costs</strong>: India’s top IT outsourcers (HCL, Infosys, TCS, Wipro) have drastically cut general hiring, adding only 3,910 employees last year, a stark contrast to previous quarters. This shift is driven by increased AI adoption, with a focus on hiring AI-specific talent and retraining existing staff, as reported by various industry analyses. Meanwhile, Microsoft’s Copilot AI feature is consuming significant capacity units on Microsoft Fabric, leading to higher cloud resource costs for users. Admins are advised to monitor usage and disable Copilot completions if needed, highlighting that AI’s utility comes with a tangible operational price tag. <a href="https://app.daily.dev/feed-by-ids?id=DLuyoqNjG&amp;id=nKPk64Gpl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AMD’s SEV-SNP security undermined by new hardware vulnerability</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), has been discovered in AMD Zen 1–5 CPUs, including EPYC 7003, 8004, 9004, and 9005 series. This flaw allows privileged attackers to exploit an undocumented control bit, corrupting the stack pointer and hijacking control flow in SEV-SNP-protected confidential virtual machines. SEV-SNP was previously considered a major security enhancement, but StackWarp bypasses its isolation without needing to read encrypted VM memory. AMD has released microcode updates and plans further firmware patches, urging users to apply updates and consider disabling hyperthreading on critical systems. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Chrome extensions steal enterprise session tokens</strong>: Five Chrome extensions, disguised as productivity tools, were found stealing authentication session tokens from enterprise HR and ERP platforms like Workday, NetSuite, and SuccessFactors. Socket.dev researchers reported that these extensions exfiltrated authentication cookies, bypassing credentials and multi-factor authentication to grant attackers full access to compromised accounts. Some variants even blocked users from accessing security features. Google was notified but the extensions had already been installed by thousands, raising concerns about the effectiveness of store security. <a href="https://app.daily.dev/posts/3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitLab 18.8 introduces AI-orchestrated DevOps</strong>: GitLab 18.8 is out, featuring the Duo Agent Platform for orchestrating AI agents in the software development lifecycle, including a Planner Agent for work items and a Security Analyst Agent for vulnerability triage. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio</strong>: Microsoft has open-sourced XAML Studio, a lightweight prototyping tool for WinUI and UWP, under the .NET Foundation, aiming for community contributions and a redesigned UI in version 2.0. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0.0 released after a decade</strong>: jQuery 4.0.0, released for its 20th anniversary, focuses on removing deprecated features, dropping IE10 support, and modernizing the codebase to ES modules, reducing library size and improving standards compliance. <a href="https://app.daily.dev/feed-by-ids?id=5SOCKxGlX&amp;id=dThF1vPz2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.0 stable brings major technical upgrades</strong>: Wine 11.0 stable is here with over 6,300 changes, including NTSYNC kernel module support, a completed WoW64 architecture, EGL as the default OpenGL backend, and Vulkan 1.4.335 support. <a href="https://app.daily.dev/posts/5LDn1X8et" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel updates LLM-Scaler-Omni for Arc Graphics</strong>: Intel released an update to LLM-Scaler-Omni, enhancing support for ComfyUI and SGLang on Intel Arc Graphics, focusing on improved performance for image, voice, and video generation. <a href="https://app.daily.dev/posts/XBX3pzO5M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Steam clarifies AI disclosure rules for games</strong>: Steam has updated its AI disclosure policy, now requiring developers to only disclose player-facing AI-generated content (artwork, audio, narrative) and exempting AI used for internal development efficiency. <a href="https://app.daily.dev/posts/C2CcXjt7M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New CSS features reduce JavaScript needs</strong>: Modern CSS now allows for scroll spy effects with two lines of code, sci-fi angled corners with <code>corner-shape: bevel</code>, and elegant border-radius transitions using View Transitions, reducing the need for JavaScript. <a href="https://app.daily.dev/posts/XeQaEylTy" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents are having ‘psychotic breaks’ in production</strong>: Changelog News is apparently concerned about ‘AI agent psychosis,’ a term they’ve coined for AI agents acting erratically in production. While <a href="http://Monday.com" target="_blank" rel="noopener nofollow">Monday.com</a> engineers are busy actually solving LLM hallucination issues with server-side pre-computation and human-in-the-loop approvals, some are still out there using sensational metaphors instead of, you know, engineering. Maybe they should try tuning their model’s ‘temperature’ down a bit. <a href="https://app.daily.dev/feed-by-ids?id=AJzG7x8FZ&amp;id=AS53pzdrZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sequoia Capital: ‘Conflict of interest? What conflict of interest?’</strong>: Sequoia Capital is reportedly investing in Anthropic’s $25 billion funding round, despite already holding stakes in direct competitors OpenAI and xAI. This move apparently breaks established VC norms, with OpenAI CEO Sam Altman previously warning investors about losing access if they fund rivals. But hey, when there’s a $350 billion valuation on the table, who cares about ‘norms’ or ‘confidential information,’ right? Money talks, ethics… well, they can walk. <a href="https://app.daily.dev/posts/yuiHTajaU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA allegedly went full pirate for AI training data</strong>: According to an amended authors’ lawsuit, NVIDIA executives allegedly contacted Anna’s Archive, a well-known pirate library, to get millions of copyrighted books for AI model training. The lawsuit claims NVIDIA was explicitly warned about the illegal nature of the content but proceeded anyway, also using other notorious piracy sites like Books3 and Sci-Hub. Because apparently, building the future of AI means skipping the pesky step of, you know, paying for content. <a href="https://app.daily.dev/posts/2IcgLruSE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
