<h2>Must know</h2>
<ul>
<li><strong>AWS European sovereign cloud is now live</strong>: AWS has launched its European Sovereign Cloud, with the first region in Brandenburg, Germany, and plans for Local Zones in Belgium, Netherlands, and Portugal. This infrastructure is physically and logically separate, operated exclusively by EU residents, and aims to meet strict EU data residency and operational autonomy requirements. Canonical is a launch partner, providing Ubuntu and Ubuntu Pro, as reported by AWS and other sources. This is a significant step for cloud infrastructure in regulated industries. <a href="https://app.daily.dev/feed-by-ids?id=DTVSjPW7g&amp;id=B8P78hRXl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mandiant forces NTLMv1 deprecation with public rainbow tables</strong>: Google-owned Mandiant has released comprehensive rainbow tables for Net-NTLMv1, making it trivial to crack credentials in under 12 hours with consumer hardware. Their goal is to force organizations to abandon the 20-year-old insecure protocol, still prevalent in legacy systems. Microsoft recently removed NTLMv1 support from Windows Server 2025 and Windows 11, but many systems remain vulnerable. Mandiant’s move, while controversial, aims to accelerate deprecation by demonstrating the protocol’s critical insecurity, as detailed across multiple security news outlets. <a href="https://app.daily.dev/posts/2q2phjvWS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js patches critical DoS vulnerability affecting major frameworks</strong>: Node.js has released patches for CVE-2025-59466, a critical denial-of-service vulnerability affecting versions 8.x through 24.x when <code>async_hooks</code> or <code>AsyncLocalStorage</code> are enabled. This flaw causes servers to exit on stack overflow, bypassing error handling, and impacts major platforms like Next.js and React Server Components. The fix re-throws stack overflow errors to user code, but developers are warned not to rely on recoverable stack overflows for security. Users are urged to upgrade immediately to Node.js 20.20.0+ or newer, as reported by Node.js security releases and Datadog advisories. <a href="https://app.daily.dev/feed-by-ids?id=EyLXGRUe2&amp;id=DwsoMgMKH&amp;id=sOiXdYVe6&amp;id=WX4br4Zyw&amp;id=Yy5NFIIOM&amp;id=Zr0Dv9dwZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Rust in production embedded systems</strong>: A firmware engineer at Achilles has been running Rust in production on smart door locks for 4-5 years, leveraging the Embassy async runtime and HAL ecosystem for power-efficient, interrupt-driven firmware without an RTOS. <a href="https://app.daily.dev/posts/SVl4BYYw0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ROS 2 support expands for Clearpath robots</strong>: Clearpath Robotics now supports ROS 2 Humble and Jazzy on most of its robotic platforms (Warthog, Husky, Jackal, Ridgeback, Dingo) for amd64 architectures, with arm64 support coming soon, and provides customized Ubuntu ISOs for easy setup. <a href="https://app.daily.dev/posts/HVQtmPu2c" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New RISC-V microcontroller with integrated motor drivers</strong>: WCH has released the CH32M030 RISC-V microcontroller, now available globally, featuring integrated four half-bridge motor drivers, making it suitable for low-cost robotics projects by combining MCU and motor control functions on a single chip. <a href="https://app.daily.dev/posts/77KoXZmll" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel rootkit for security research</strong>: Singularity, an open-source Linux kernel rootkit, has been released for security research, demonstrating advanced evasion techniques by using Ftrace to hook system calls and hide processes, files, and network activity without modifying the system call vector. <a href="https://app.daily.dev/posts/udoWio4nl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GRUB 2.14 released with EROFS and Year 2038 support</strong>: GRUB 2.14 has been released, bringing EROFS file-system support, LVM enhancements, NX support for EFI platforms, and crucial updates for dates beyond Year 2038, along with numerous security fixes. <a href="https://app.daily.dev/posts/t8YvFjKWA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare fined for not blocking pirate sites in Italy</strong>: Cloudflare has been fined €14.2 million by Italy’s communications regulator for refusing to block pirate websites via its 1.1.1.1 public DNS resolver, with Cloudflare arguing compliance would harm legitimate website accessibility and threatening to withdraw servers from Italy. <a href="https://app.daily.dev/posts/Q0IbcQd4P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare acquires Astro web framework</strong>: Cloudflare has acquired The Astro Technology Company, but Astro will remain an open-source, MIT-licensed, and platform-agnostic web framework, with the entire team joining Cloudflare to continue development. <a href="https://app.daily.dev/feed-by-ids?id=a23rECuU6&amp;id=6Yvvs8a9F&amp;id=yRAOJZmiR" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding assistants: faster code, more bugs, slower devs</strong>: Apparently, AI coding assistants make developers 19% slower despite generating 46% more code. They also double the bugs and increase PR review time by 91%. It seems AI optimizes for typing speed, not actual engineering, leading to more technical debt and developers merging code they don’t understand. So much for the AI revolution making us all 10x engineers. (Source: The Serious CTO, Awesome Coding) <a href="https://app.daily.dev/feed-by-ids?id=5khP9Wt37&amp;id=DdiXGTqPN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Small language models: the new ‘disruptive’ tech that’s just cheaper</strong>: Enterprises are suddenly ‘favoring’ Small Language Models (SLMs) over LLMs because, surprise, they’re cheaper and better for ‘closed, well-defined workflows.’ Benchmarks show 7-billion parameter models ‘outperforming’ frontier LLMs on constrained tasks while being 10,000 times smaller. It’s almost like companies realized that throwing a massive, expensive, general-purpose model at a simple problem is, well, stupid. But don’t worry, the hype cycle will just move to ‘digital factories’ of specialized SLMs. (Source: HX43N3MkE, J1BKrq2u6) <a href="https://app.daily.dev/feed-by-ids?id=HX43N3MkE&amp;id=J1BKrq2u6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA CEO: ‘doomer narrative’ is bad for business (and my stock options)</strong>: NVIDIA CEO Jensen Huang is publicly shaming AI skeptics, calling their warnings a ‘doomer narrative’ that threatens innovation. He’s questioning why ‘well-credentialed figures’ would dare suggest AI needs regulation, conveniently overlooking NVIDIA’s massive financial stake in the AI boom and its military contracts. It’s almost as if a CEO whose company profits immensely from unchecked AI development might have a biased opinion. Who knew? (Source: 1vSR1HgdF, JJAsCgIZe) <a href="https://app.daily.dev/feed-by-ids?id=1vSR1HgdF&amp;id=JJAsCgIZe" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
