<h2>Must know</h2>
<ul>
<li><strong>AI agents are getting real, and they need real environments</strong>: The push for autonomous AI agents in code generation is hitting a wall: slow verification due to a lack of real runtime environments. New approaches are emerging, leveraging Kubernetes and dynamic routing to create lightweight, sandboxed virtual environments. This allows agents to test code changes against production-like dependencies in seconds, enabling fully self-driven code generation, testing, and verification workflows without human intervention. This is a critical step for moving beyond brittle, monolithic chatbots to resilient, extensible multi-agent AI systems, as detailed in recent technical articles. <a href="https://app.daily.dev/feed-by-ids?id=hWlJbaze9&amp;id=tdoQ95xQI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-driven supply chain attacks are here, and they’re sophisticated</strong>: North Korean threat group PurpleBravo targeted 3,136 IP addresses across 20 organizations by posing as recruiters on LinkedIn, luring developers into fake job interviews. They distributed AI-generated PowerShell backdoors via malicious Visual Studio Code projects, deploying malware like BeaverTail and GolangGhost. This campaign highlights a growing supply chain risk where job applicants unknowingly compromise corporate devices by running infected code, as reported by Check Point Research. Meanwhile, a PyPI package impersonating SymPy was downloaded over 1,000 times, delivering cryptomining malware using advanced evasion tactics like in-memory execution. <a href="https://app.daily.dev/feed-by-ids?id=sGrgwY6TO&amp;id=zO98Y2sJF&amp;id=wO1HB29Wl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The EU wants to mandate open source for digital sovereignty</strong>: The European Commission is seeking public input on mandating Free and Open Source Software (FOSS) adoption in the public sector to reduce dependency on non-EU software firms. This initiative aims to foster digital sovereignty by replacing proprietary software with open-source tools in education and government, and pushing for EU-hosted cloud services. This move signals a significant shift towards controlling digital infrastructure and reducing reliance on major US tech companies, as outlined in the Commission’s consultation process. <a href="https://app.daily.dev/feed-by-ids?id=bi5i5eszo&amp;id=0rtpLEq0S" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>NVIDIA’s Nemotron 3 Nano: A 30B MoE model for your desktop</strong>: NVIDIA released Nemotron 3 Nano, a 30 billion parameter mixture-of-experts (MoE) model that uses only 3.6 billion active parameters at once, making it memory efficient enough to run on 24GB VRAM GPUs like the RTX 3090/4090/5090. It supports built-in reasoning and native tool calling, and can be set up using llama.cpp and Hugging Face weights. <a href="https://app.daily.dev/posts/o2Y2OkLyO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI is straining power grids and supply chains</strong>: The rapid growth of AI is putting immense pressure on global supply chains, particularly for power technology manufacturing. Semiconductor facilities are at full capacity, and raw material scarcity is causing lead times to stretch from weeks to months. Solutions include building new manufacturing plants, automating processes, and regionalizing supply chains to mitigate risks. <a href="https://app.daily.dev/posts/SfHWr5lfZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale’s control plane struggles with hypergrowth</strong>: Tailscale’s CEO addressed recent uptime issues, explaining that while the data plane remains resilient, the control plane’s message bus architecture, with single coordination servers per customer tailnet, is struggling under rapid expansion. Planned improvements include network map caching, sharding with hot spares, and geographically distributed control planes to enhance resilience. <a href="https://app.daily.dev/posts/F6JvRyFcY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New open-source tools for AI security testing</strong>: BlackIce is a new open-source, containerized toolkit bundling 14 AI security tools into a Docker image for red teaming and penetration testing of AI systems. It covers prompt injection, jailbreak detection, data leakage, hallucination detection, and supply chain security, mapping to MITRE ATLAS and DASF frameworks. <a href="https://app.daily.dev/posts/PSfiaCphA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Transfer Family Terraform module adds web app support</strong>: The AWS Transfer Family Terraform module now supports deploying web applications, allowing file transfers to and from Amazon S3 via a web interface. It includes configurable branding, federated authentication via IAM Identity Center, and fine-grained permissions using S3 Access Grants, streamlining web-based file transfer solutions. <a href="https://app.daily.dev/posts/oBG0qA6hP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kotlin 2.3 brings performance and multiplatform improvements</strong>: Kotlin 2.3 introduces an unused return value checker, explicit backing fields, and stabilizes nested type aliases and data flow exhaustiveness checks. It also enhances multiplatform support with improved Swift export in Kotlin Native (up to 40% faster builds) and reduced WebAssembly binary sizes by 13% with UTF-8 string storage. <a href="https://app.daily.dev/posts/1q33ZUkes" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PHPStan 2.1.34 delivers significant speed boost</strong>: PHPStan 2.1.34 has been released, offering a 25-40% increase in static analysis performance. This update aims to improve developer productivity by speeding up code quality checks in PHP projects, without introducing new features beyond this efficiency gain. <a href="https://app.daily.dev/posts/nNqA8xPSh" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will solve all your problems, just ask Palantir</strong>: Palantir CEO Alex Karp, speaking at Davos, boldly claimed AI will eliminate the need for large-scale immigration and slash white-collar jobs, while simultaneously cutting organizational costs by 80% and boosting revenue. Conveniently, he offered no third-party evidence for these miraculous figures, even as Deutsche Bank and Gartner are calling the AI ‘honeymoon over’ and PwC reports most CEOs see no returns. Apparently, AI’s real magic is in generating self-serving executive pronouncements. <a href="https://app.daily.dev/feed-by-ids?id=3s1vrBGbY&amp;id=FLsBFoZv3&amp;id=FWpexauJL&amp;id=KOoayUI82" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI’s Stargate: Half a trillion dollars for 100 jobs</strong>: OpenAI is planning $500 billion ‘Stargate’ datacenters across the U.S., promising to fund their own energy and water, and create ‘workforce development programs.’ The catch? Each facility will employ a whopping 100 full-time workers. Local communities are, understandably, scrutinizing these claims, especially after 20 datacenter projects were blocked or delayed in Q2 2025 due to concerns over electricity, water, and environmental impact. It seems OpenAI’s vision of the future involves a lot of silicon and very few humans, except for the ones paying the utility bills. <a href="https://app.daily.dev/posts/O0VoWxWDb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: The productivity revolution that laid off 75% of a company</strong>: Tailwind Labs laid off 75% of its developers because AI-assisted coding reduced the need for human web searches, leading to decreased website traffic and falling revenues. This, apparently, is the ‘productivity gain’ we’ve been promised. The article suggests future open-source innovation might depend on AI itself, which is a rather bleak outlook for human developers. So, while AI helps you code faster, it might also be coding you out of a job, and the open-source projects you rely on out of existence. <a href="https://app.daily.dev/posts/PBAzOX1yL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
