<h2>Must know</h2>
<ul>
<li><strong>AMD CPUs vulnerable to StackWarp attack</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen 1-5 CPUs, allowing privileged attackers to bypass SEV-SNP confidential VM protections. This exploit manipulates the CPU stack engine to hijack control flow without reading encrypted memory, impacting AMD EPYC 7003, 8004, 9004, and 9005 series. AMD has released microcode updates, with more firmware patches expected in April 2026, and advises disabling hyperthreading on critical systems as a mitigation. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab 18.8 launches AI-orchestrated DevOps platform</strong>: GitLab 18.8 introduces the Duo Agent Platform, now generally available, which orchestrates AI agents across the software development lifecycle. This includes a Planner Agent for managing work items and a Security Analyst Agent that uses natural language processing to triage vulnerabilities, even automatically dismissing irrelevant ones. A Central AI Catalog is also included for agent discovery and management, integrating these AI capabilities directly into the GitLab platform, as detailed in the official GitLab release announcement. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Chrome extensions steal enterprise session tokens</strong>: Five Chrome extensions, disguised as productivity tools, were found stealing authentication session tokens from enterprise HR and ERP platforms like Workday, NetSuite, and SuccessFactors. Socket.dev researchers reported that these extensions exfiltrated cookies, bypassing credentials and MFA, allowing attackers full access to compromised accounts. Google was notified but the extensions had already been installed by thousands of users, with no confirmation yet on their full removal or remediation steps for affected organizations. <a href="https://app.daily.dev/posts/3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI coding tools reshape developer workflows</strong>: AI coding tools like Cursor and Copilot are widely adopted, boosting productivity for some developers, but often generate lower-quality code for complex tasks, requiring significant human oversight and exposing existing ‘process debt’ in organizations. <a href="https://app.daily.dev/feed-by-ids?id=3DI7vnha4&amp;id=ATZPMmQn8&amp;id=DdiXGTqPN&amp;id=L2hSWhbgY&amp;id=LJqUceZbE&amp;id=Y8gY63ibF&amp;id=aGFVTrinz&amp;id=aKVj0i6Bm&amp;id=j91dGf3TP&amp;id=tJZLXej6S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes takes over big data processing at Pinterest</strong>: Pinterest migrated its large-scale data processing from Hadoop to Moka, a Kubernetes-based platform on Amazon EKS using Apache Spark, demonstrating a significant industry shift towards Kubernetes as a control plane for data workloads. <a href="https://app.daily.dev/posts/YFV8rOL2r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio</strong>: Microsoft has open-sourced XAML Studio, a lightweight prototyping tool for WinUI and UWP, under the .NET Foundation, aiming to foster community contributions and provide a faster UI feedback loop for developers. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.0 stable release brings major upgrades</strong>: Wine 11.0 stable is out with over 6,300 changes, including NTSYNC kernel module support for better performance, a completed WoW64 architecture, and upgraded graphics with EGL as default OpenGL backend and Vulkan 1.4.335 support. <a href="https://app.daily.dev/posts/5LDn1X8et" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel boosts LLM-Scaler-Omni for Arc Graphics</strong>: Intel updated LLM-Scaler-Omni to enhance support for ComfyUI and SGLang on Arc Graphics, focusing on improved performance for image, voice, and video generation in both Omni Studio and Omni Serving modes. <a href="https://app.daily.dev/posts/XBX3pzO5M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SaaS and DevOps downtime surges</strong>: SaaS downtime incidents increased by 69% in 2025, with DevOps platforms experiencing 156 critical outages totaling over 9,255 hours, highlighting critical reliability gaps and the need for robust backup and recovery strategies. <a href="https://app.daily.dev/feed-by-ids?id=HfVfar8hJ&amp;id=XatxqEJEy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DuckDB ecosystem expands with new features</strong>: The DuckDB ecosystem now supports full DML operations for Iceberg, browser-based Iceberg queries via DuckDB-Wasm, and new extensions like QuackFIX for FIX protocol logs and Onager for graph analytics, alongside serverless distributed query execution with Quack-Cluster. <a href="https://app.daily.dev/posts/T0eFsI0Yd" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents: now with ‘psychosis’ and ‘hallucinations’</strong>: Changelog News is apparently concerned about ‘AI agent psychosis,’ a term for erratic AI behavior, while <a href="http://Monday.com" target="_blank" rel="noopener nofollow">Monday.com</a> engineers are busy mitigating ‘hallucinations’ in their Slack-integrated AI bot. It seems our AI overlords are not just making things up, but also having mental breakdowns. Good to know we’re building reliable systems here. <a href="https://app.daily.dev/feed-by-ids?id=AJzG7x8FZ&amp;id=AS53pzdrZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA allegedly trains AI on pirated books, because ethics are for other people</strong>: NVIDIA executives are being sued for allegedly contacting Anna’s Archive, a known pirate library, to access millions of copyrighted books for AI model training. The lawsuit claims NVIDIA was warned about the illegal content but proceeded anyway, also using other piracy sites like Books3 and Sci-Hub. Because why pay for data when you can just ‘allegedly’ steal it and then claim you’re advancing AI? <a href="https://app.daily.dev/posts/2IcgLruSE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sequoia Capital invests in Anthropic, because conflict of interest is the new synergy</strong>: Sequoia Capital, already holding stakes in OpenAI and xAI, is now investing in Anthropic’s $25 billion funding round, valuing it at $350 billion. This move apparently breaks established VC norms against backing direct competitors. OpenAI CEO Sam Altman once said investors would lose access to confidential info if they funded rivals, but I guess rules are more like ‘guidelines’ when there’s enough money involved. <a href="https://app.daily.dev/posts/yuiHTajaU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
