<h2>Must know</h2>
<ul>
<li><strong>AMD Zen CPUs vulnerable to StackWarp attack</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen 1-5 CPUs, including EPYC 7003, 8004, 9004, and 9005 series. This flaw allows privileged attackers to bypass SEV-SNP confidential VM protections by manipulating the CPU stack engine, leading to control flow hijacking. AMD has released microcode updates, with further firmware patches expected in April 2026. Disabling hyperthreading on critical systems is advised as a mitigation. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Chrome extensions hijack enterprise sessions</strong>: Five Chrome extensions, disguised as productivity tools, were found stealing authentication session tokens from enterprise HR and ERP platforms like Workday, NetSuite, and SuccessFactors. These extensions bypassed credentials and MFA, allowing attackers full access to compromised accounts. Socket.dev researchers reported the issue to Google, but not before thousands of users were affected. Enterprises should review extension policies and user education. <a href="https://app.daily.dev/posts/3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab 18.8 launches AI-orchestrated DevOps platform</strong>: GitLab 18.8 introduces the Duo Agent Platform, now generally available, which orchestrates AI agents across the software development lifecycle. This includes a Planner Agent for work items and a Security Analyst Agent that uses natural language for vulnerability triage, even automatically dismissing irrelevant ones. A Central AI Catalog helps manage these agents, allowing users to create custom AI workflows from planning to deployment, as detailed in GitLab’s release announcement. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Pinterest migrates big data to Kubernetes with Moka</strong>: Pinterest has moved its large-scale data processing from Hadoop to Moka, a Kubernetes-based platform running on Amazon EKS with Apache Spark, addressing scalability, security, and cost for various processing frameworks. <a href="https://app.daily.dev/posts/YFV8rOL2r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SaaS downtime surges, cloud reliability gaps persist</strong>: SaaS downtime incidents increased by 69% in 2025, with DevOps platforms experiencing 156 critical outages, highlighting the need for robust backup strategies and recovery testing due to cloud’s shared responsibility model. <a href="https://app.daily.dev/feed-by-ids?id=HfVfar8hJ&amp;id=XatxqEJEy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio under .NET Foundation</strong>: Microsoft has open-sourced XAML Studio, a lightweight prototyping tool for WinUI and UWP, under the .NET Foundation, aiming for community contributions and a redesigned UI in version 2.0. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Windows 11 23H2 emergency patch for shutdown and RDP bugs</strong>: Microsoft released an emergency update (KB5077797) for Windows 11 23H2 to fix critical bugs preventing proper shutdown/restart and causing persistent Remote Desktop credential prompts, introduced by a previous Patch Tuesday update. <a href="https://app.daily.dev/posts/u2UYa6XNM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI security and governance investments escalate</strong>: CISOs are prioritizing AI security, focusing on identity access management for AI agents, enhanced email security, automated vulnerability discovery, and unified data governance, with startups like Witness AI securing significant funding. <a href="https://app.daily.dev/feed-by-ids?id=2XMeIQvIr&amp;id=6gbkOathj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel LLM-Scaler-Omni update for ComfyUI and SGLang on Arc Graphics</strong>: Intel updated LLM-Scaler-Omni to improve support for ComfyUI and SGLang on Intel Arc Graphics, enhancing its capabilities for image, voice, and video generation in both Omni Studio and Omni Serving modes. <a href="https://app.daily.dev/posts/XBX3pzO5M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0.0 released with modernization focus</strong>: jQuery 4.0.0, released on its 20th anniversary, focuses on removing deprecated features, dropping support for older browsers, and rewriting the codebase as ES modules, significantly reducing its size and improving standards compliance. <a href="https://app.daily.dev/feed-by-ids?id=5SOCKxGlX&amp;id=dThF1vPz2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents: the new frontier of ‘psychosis’ and ‘hallucinations’</strong>: Changelog News is apparently concerned about ‘AI agent psychosis,’ a term for erratic AI behavior in production. Meanwhile, <a href="http://Monday.com" target="_blank" rel="noopener nofollow">Monday.com</a> is busy actually engineering solutions to LLM hallucinations by pre-computing statistics and adding human-in-the-loop approvals. So, while some are busy coining dramatic new terms, others are just, you know, building reliable systems. Who knew engineering could be so mundane? <a href="https://app.daily.dev/feed-by-ids?id=AJzG7x8FZ&amp;id=AS53pzdrZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA allegedly sought pirated books for AI training: because ethics are for other people</strong>: NVIDIA executives are being sued for allegedly contacting Anna’s Archive, a known pirate library, to access millions of copyrighted books for AI model training. The lawsuit claims NVIDIA was explicitly warned about the illegal nature of the content but proceeded anyway. Because why pay for data when you can just ‘allegedly’ steal it? It’s not like they’re a multi-billion dollar company or anything. <a href="https://app.daily.dev/posts/2IcgLruSE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: the new productivity panacea, or just more tech debt?</strong>: AI coding tools are supposedly reshaping development, with some claiming measurable productivity gains. Yet, hands-on experiments show they generate lower-quality code for complex tasks, requiring substantial human correction and leading to questions about long-term maintainability. So, are we really boosting productivity, or just accelerating the creation of future tech debt? It seems the ‘AI coding requires managers’ crowd might be onto something. <a href="https://app.daily.dev/feed-by-ids?id=3DI7vnha4&amp;id=ATZPMmQn8&amp;id=DdiXGTqPN&amp;id=L2hSWhbgY&amp;id=LJqUceZbE&amp;id=Y8gY63ibF&amp;id=aGFVTrinz&amp;id=aKVj0i6Bm&amp;id=j91dGf3TP&amp;id=tJZLXej6S" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
