<h2>Must know</h2>
<ul>
<li><strong>AMD CPUs vulnerable to StackWarp attack</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen 1-5 CPUs, including EPYC 7003, 8004, 9004, and 9005 series. This flaw allows privileged attackers to bypass SEV-SNP confidential VM protections by manipulating the CPU stack engine, hijacking control flow without reading encrypted memory. AMD has released microcode updates, with further firmware patches expected in April 2026, and advises disabling hyperthreading on critical systems as a mitigation. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Chrome extensions steal enterprise session tokens</strong>: Five Chrome extensions, disguised as productivity tools, were found stealing authentication session tokens from enterprise HR and ERP platforms like Workday, NetSuite, and SuccessFactors. Socket.dev researchers reported that these extensions exfiltrated cookies, bypassing credentials and MFA, allowing attackers full access to compromised accounts. Google was notified, but the extensions had already been installed by thousands of users. <a href="https://app.daily.dev/posts/3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio under .NET Foundation</strong>: Microsoft has open-sourced XAML Studio, a lightweight prototyping tool for WinUI and UWP projects, under the .NET Foundation. This move aims to foster community contributions and revive UI prototyping workflows. Version 2.0, currently in development, will feature a redesigned Fluent UI, deeper WinUI 3 integration, and new features like live data context and property inspectors, as reported by Microsoft. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>jQuery 4.0.0 released after a decade</strong>: jQuery 4.0.0, released on its 20th anniversary, focuses on removing deprecated features, dropping support for older browsers like IE10, and modernizing its codebase to ES modules, resulting in a smaller library size and improved W3C compliance. <a href="https://app.daily.dev/feed-by-ids?id=5SOCKxGlX&amp;id=dThF1vPz2&amp;id=rIv7Y0v7o" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab 18.8 introduces AI-orchestrated DevOps with Duo Agent Platform</strong>: GitLab 18.8 features the Duo Agent Platform, enabling AI agents like the Planner Agent and Security Analyst Agent to manage work items and triage vulnerabilities using natural language processing, integrated with a Central AI Catalog for discovery and management. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.0 stable release brings major technical upgrades</strong>: Wine 11.0 stable is out with over 6,300 changes, including NTSYNC kernel module support for better synchronization, a completed WoW64 architecture, EGL as the default OpenGL backend, Vulkan 1.4.335 support, and new Bluetooth and scanner support. <a href="https://app.daily.dev/posts/5LDn1X8et" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel LLM-Scaler-Omni update enhances ComfyUI and SGLang support on Arc Graphics</strong>: Intel’s LLM-Scaler-Omni update improves support for ComfyUI and SGLang on Intel Arc Graphics, focusing on enhancing LLM-Scaler’s capabilities for image, voice, and video generation in both Omni Studio and Omni Serving modes. <a href="https://app.daily.dev/posts/XBX3pzO5M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust-analyzer v0.3.2761 released with stability and accuracy fixes</strong>: Rust-analyzer version 0.3.2761 fixes 13 issues, including improved flycheck trigger behavior, synchronized cast checks with rustc, corrected naked_asm return type handling, and enhanced symbol indexing for macro-generated imports and re-exports. <a href="https://app.daily.dev/posts/kEIknGK9T" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Fabric Copilot consumes significant capacity units</strong>: Microsoft’s Copilot feature on Fabric platforms is noted for high capacity unit (CU) consumption, impacting cloud resource costs, though users can manage this by disabling Copilot completions at various levels. <a href="https://app.daily.dev/posts/nKPk64Gpl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>JetBrains redesigns debugger for remote development</strong>: JetBrains has revamped the IntelliJ Platform debugger architecture in version 2026.1, splitting it into frontend and backend components to better support remote development, requiring plugin developers to migrate from deprecated APIs. <a href="https://app.daily.dev/posts/a51EQOQ0J" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents: the new frontier of ‘psychosis’ and ‘hallucinations’</strong>: Changelog News is apparently concerned about ‘AI agent psychosis,’ a term for erratic AI behavior, while <a href="http://Monday.com" target="_blank" rel="noopener nofollow">Monday.com</a> engineers are busy mitigating ‘hallucinations’ in their Slack bot by pre-computing statistics server-side. It seems the AI hype cycle has moved from ‘it’s magic!’ to ‘it’s crazy!’—but don’t worry, the engineers are still there to clean up the mess, just like always. Who knew AI would just be another layer of abstraction for us to debug? <a href="https://app.daily.dev/feed-by-ids?id=AJzG7x8FZ&amp;id=AS53pzdrZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sequoia Capital: ‘conflict of interest’ is just a suggestion</strong>: Sequoia Capital, apparently bored with traditional VC norms, is now investing in Anthropic’s $25 billion round, despite already holding stakes in OpenAI and xAI. Because why avoid conflicts when you can just own the entire AI arms race? Sam Altman’s warnings about losing access to confidential info if you fund competitors? Clearly just a quaint suggestion for the big players. It’s not a conflict if you’re everywhere, right? <a href="https://app.daily.dev/posts/yuiHTajaU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA allegedly training AI on pirated books: innovation or intellectual theft?</strong>: NVIDIA executives are now being accused in an amended lawsuit of actively seeking access to millions of copyrighted books from Anna’s Archive, a known pirate library, for AI model training. Because apparently, building the future of AI means skipping pesky things like ‘licensing’ and ‘copyright.’ Who needs legal teams when you have ‘executive approval’ for alleged intellectual property theft? Just another day in the wild west of AI development. <a href="https://app.daily.dev/posts/2IcgLruSE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
