<h2>Must know</h2>
<ul>
<li><strong>Kubernetes RCE flaw identified, patch coming in 2025</strong>: Edera Advisory has uncovered a critical design flaw in Kubernetes that allows remote code execution (RCE) in any container on a node via commonly used <code>nodes/proxy GET</code> permissions. While the problematic permission is slated for removal in Kubernetes 1.36, expected in April 2025, many production clusters will take months or years to update. Organizations are advised to scan for RCE attempts and implement fine-grained authorization controls to mitigate risk. <a href="https://app.daily.dev/posts/phMyeDnVg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s Xbox gaming division reports significant declines</strong>: Microsoft’s gaming division is the sole underperforming segment in the company’s Q2 FY26 results, with Xbox console sales plummeting 32% year-over-year and overall gaming revenue dropping 9%. This marks the sixth consecutive year of declining console sales, following price increases and multiple layoffs throughout 2025. Despite record PC players, Microsoft anticipates continued declines in Q3, with Xbox Game Pass growth expected to only partially offset future losses. <a href="https://app.daily.dev/posts/uKbAAElcM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Musk’s companies exploring major mergers</strong>: SpaceX, xAI, and potentially Tesla are in early discussions to merge, aiming to create a trillion-dollar super-company under Elon Musk. Two main scenarios are on the table: SpaceX merging with Tesla, or SpaceX combining with xAI before SpaceX’s IPO. The proposed consolidation seeks to integrate rockets, satellites, AI, and electric vehicles, with a key rationale being the development of space-based AI data centers to reduce model training costs. This move could also strengthen Pentagon contracts and military AI integration. <a href="https://app.daily.dev/posts/wMYF638eZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Google Cloud launches conversational analytics in BigQuery</strong>: Google Cloud introduced Conversational Analytics in BigQuery (preview), an AI-powered agent integrated into BigQuery Studio that enables natural language data analysis without requiring SQL knowledge, leveraging Gemini models to generate, execute, and visualize queries. <a href="https://app.daily.dev/posts/2YKMeABdR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apple acquires audio AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a></strong>: Apple has acquired Israeli audio AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a> for an estimated $1.6 billion to nearly $2 billion, strengthening Apple’s AI hardware capabilities with <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a>’s expertise in whispered speech recognition and audio enhancement, particularly for AirPods and Vision Pro. <a href="https://app.daily.dev/posts/PknWg8Xks" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta’s AI infrastructure investment escalates</strong>: Meta plans to invest $115-135 billion in AI infrastructure in 2026, nearly doubling its 2025 investment, to support Superintelligence Labs and integrate large language models with recommendation systems across its platforms. <a href="https://app.daily.dev/posts/JHGPGk0MW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA GeForce NOW launches native Linux support</strong>: NVIDIA’s GeForce NOW cloud gaming service now offers native Linux PC support in beta, officially on Ubuntu 24.04 LTS, enabling high-performance game streaming with RTX capabilities. <a href="https://app.daily.dev/posts/RB8XUehQ7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js affected by OpenSSL vulnerabilities</strong>: Three OpenSSL CVEs, assessed at Low to Moderate severity, affect Node.js versions due to issues with PFX certificate file processing, with fixes planned for regular Node.js releases. <a href="https://app.daily.dev/posts/jITntLdtr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>freeCodeCamp releases relational database design course</strong>: freeCodeCamp launched a 6-hour video course on relational database design, covering SQL basics, entity-relationship modeling, and normalization forms, based on the book ‘Grokking Relational Database Design’. <a href="https://app.daily.dev/posts/xdwl0QPIc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Formae IaC platform adds multi-cloud support and plugin SDK</strong>: Platform Engineering Labs announced beta multi-cloud support for its open-source IaC platform, formae, now including Google Cloud, Azure, Oracle Cloud, and OVHcloud, alongside a Plugin SDK for custom extensions. <a href="https://app.daily.dev/posts/bqzmDPKsL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Google DeepMind’s Project Genie: infinite worlds, finite fun?</strong>: Google DeepMind just dropped Project Genie, an ‘experimental web prototype’ that supposedly generates ‘infinite, interactive environments’ using their Genie 3 world model. It’s available to Google AI Ultra subscribers, because of course it is. While it excels at ‘whimsical, artistic styles,’ it struggles with photorealism and object interaction, and oh, it has 60-second generation caps. Google frames this as a step toward AGI and a game prototyping tool, but 52% of game developers already think AI negatively impacts their field, and 33% have been laid off. So, ‘infinite worlds’ for some, ‘infinite unemployment’ for others, apparently. <a href="https://app.daily.dev/posts/iit38VC43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apiiro’s Guardian Agent: AI security for AI-generated code, because we can’t have nice things</strong>: Apiiro launched Guardian Agent, an AI security tool designed to prevent AI coding agents from generating vulnerable code. Apparently, enterprises are generating 4x more code and expanding attack surfaces 6x after adopting AI coding agents, and developers are ‘often unaware’ of the vulnerabilities. So, instead of fixing the AI that generates the bad code, we now need AI to fix the AI that generates the bad code. It’s a security ouroboros, and I’m sure it’ll be perfectly secure this time. <a href="https://app.daily.dev/posts/5AaMXyHJd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Container security: human error is the new ‘it’s complicated’</strong>: A BellSoft survey found that nearly a quarter of developers experienced container-related security incidents last year, with ‘human error’ being the primary culprit for 62% of mistakes. Apparently, time constraints and lack of organizational prioritization are hindering security efforts, yet 86% of organizations prioritize performance over security when selecting base images. So, we’re too busy to be secure, but not too busy to blame the humans for the inevitable breaches. Classic. <a href="https://app.daily.dev/posts/I55IVTrKU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
