<h2>Must know</h2>
<ul>
<li><strong>Mandiant forces NTLMv1 deprecation with rainbow tables</strong>: Google-owned Mandiant has published comprehensive rainbow tables for Net-NTLMv1, making it trivial to crack credentials in under 12 hours with consumer hardware. This move aims to force organizations to abandon the 20-year-old insecure protocol, which is still prevalent in legacy systems. Microsoft recently removed NTLMv1 support from Windows Server 2025 and Windows 11, but Mandiant’s action highlights the urgent need for organizations to disable it immediately, as reported by Krebs on Security and The Hacker News. <a href="https://app.daily.dev/posts/2q2phjvWS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild regex misconfiguration exposed repos to supply chain attacks</strong>: Security researchers at Wiz discovered a critical vulnerability, dubbed CodeBreach, in AWS CodeBuild due to improperly anchored regex patterns in webhook filters. This flaw allowed attackers to bypass security controls and gain admin-level access to AWS GitHub repositories, including the AWS JavaScript SDK, potentially leading to widespread supply chain attacks. AWS patched the issue within 48 hours, but the incident highlights persistent risks in CI/CD pipeline misconfigurations, as detailed by Wiz. <a href="https://app.daily.dev/posts/q7gLeN4EH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Gemini calendar prompt injection exposed private enterprise data</strong>: A security vulnerability in Google Gemini allowed attackers to extract private calendar data by embedding malicious natural language prompts in Google Calendar invitations. When users queried Gemini about their schedules, the AI processed the malicious content, bypassing privacy controls. Google has since patched the flaw, but the incident underscores the emerging security risks unique to LLM-powered applications, especially in enterprise environments, according to security researchers. <a href="https://app.daily.dev/posts/dHjNBMkFO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cloudflare acquires Astro web framework</strong>: Cloudflare has acquired The Astro Technology Company, makers of the Astro web framework, which will remain open source and platform-agnostic, with the entire Astro team joining Cloudflare to continue development. <a href="https://app.daily.dev/feed-by-ids?id=a23rECuU6&amp;id=6Yvvs8a9F&amp;id=yRAOJZmiR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI introduces targeted ads in ChatGPT free and Go tiers</strong>: OpenAI will launch targeted ads in ChatGPT for free and Go tier users in the US, appearing at the bottom of chat responses and tailored to conversation topics, as the company seeks to diversify revenue streams amid escalating AI infrastructure costs. <a href="https://app.daily.dev/posts/DQh9IAXNl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Windows 11 Insider Preview updates released</strong>: Microsoft released Windows 11 Insider Preview Builds to both the Canary and Beta Channels, featuring fixes for Start menu and File Explorer issues, UI improvements in Account Settings, and enhanced Copilot integration. <a href="https://app.daily.dev/posts/f8KtKj6ie" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.0 released with expanded compatibility and performance</strong>: Wine 11.0 stable has been released, featuring NTSYNC kernel module support for improved performance, full WoW64 architecture for 32-bit apps on 64-bit Linux, and updated Wayland and graphics stack support. <a href="https://app.daily.dev/posts/5LDn1X8et" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Crystal 1.19.0 advances multithreading roadmap</strong>: Crystal 1.19.0 introduces execution contexts as a preview feature, a step towards default multi-threading planned for Crystal 1.20, alongside new synchronization primitives and ARM64 Linux binary support. <a href="https://app.daily.dev/posts/QEQMgHoGA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases address multiple CVEs</strong>: Node.js released versions 20.20.0 LTS and 25.3.0, addressing several security vulnerabilities including disabling futimes with the permission model, improved TLSSocket error handling, and stricter symlink API permissions. <a href="https://app.daily.dev/feed-by-ids?id=DwsoMgMKH&amp;id=WX4br4Zyw&amp;id=Yy5NFIIOM&amp;id=Zr0Dv9dwZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces repository-specific agentic memory</strong>: GitHub Copilot has launched a ‘memories’ feature in Visual Studio, allowing AI agents to automatically learn and document coding preferences and project guidelines, aiming to improve code consistency and speed up onboarding. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding assistants are making developers slower, apparently</strong>: According to some ‘experts,’ AI coding assistants are generating 46% more code but making developers 19% slower, doubling bugs, and increasing code churn. The problem, they say, is AI optimizes for typing speed, not architectural brilliance. So, while you’re busy feeling productive, you’re actually just creating more technical debt for your future self. Who knew that getting more done faster could be so detrimental? <a href="https://app.daily.dev/feed-by-ids?id=5khP9Wt37&amp;id=J24eplQdr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Razer CEO defends AI investments in gaming, because gamers are just ‘skeptical’</strong>: Razer’s CEO, Min-Liang Tan, is out here defending his company’s $600 million AI investment, claiming gamers only reject ‘generative AI slop’ but totally value AI for quality assurance. He’s even pushing ‘Project Ava,’ an AI companion using Grok, while acknowledging ‘mental health concerns’ and ‘unresolved trust and safety issues.’ So, it’s not that gamers hate AI, it’s just that everyone else is doing it wrong. Right. <a href="https://app.daily.dev/posts/bokhtiGjg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta pivots from metaverse to wearables, because $70 billion in losses wasn’t enough of a hint</strong>: Meta is laying off 10% of its Reality Labs workforce and shutting down three VR game studios, all while pivoting from the metaverse to ‘wearable technology, AR glasses, and AI.’ Apparently, $70 billion in accumulated losses since 2021, poor product quality, and low user adoption were just minor setbacks. But don’t worry, their Ray-Ban smart glasses now ‘outsell standard Ray-Bans,’ so clearly, the future is bright. Just not in VR. <a href="https://app.daily.dev/posts/7ystcAQPc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
