<h2>Must know</h2>
<ul>
<li><strong>Node.js security update for OpenSSL vulnerabilities</strong>: Node.js has identified three low to moderate severity vulnerabilities related to PFX certificate processing in OpenSSL, affecting TLS configurations. While these impact all Node.js branches, the attack surface is limited, and fixes will be rolled out in regular releases, not dedicated security patches. This is a good reminder to keep your Node.js environments updated. <a href="https://app.daily.dev/posts/jITntLdtr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Container security practices fall short</strong>: A BellSoft survey reveals significant gaps in container security, with nearly a quarter of respondents experiencing incidents. Human error is the primary cause, exacerbated by time constraints and lack of organizational prioritization. Despite concerns, many developers still use general-purpose images and JDKs, highlighting a disconnect between security needs and current practices. <a href="https://app.daily.dev/posts/I55IVTrKU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apiiro launches AI code security agent</strong>: Apiiro launched Guardian Agent, an AI security tool designed to prevent AI coding agents from generating vulnerable code. It works by rewriting developer prompts into secure ones in real-time within IDEs and CLIs, aiming to shift from reactive vulnerability detection to proactive prevention. This comes as enterprises reportedly see a significant increase in code generation and attack surface expansion with AI coding agents. <a href="https://app.daily.dev/posts/5AaMXyHJd" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>New open-source database management tool with AI assistance</strong>: DB Toolkit is a new open-source, cross-platform database management application supporting PostgreSQL, MySQL, SQLite, and MongoDB, featuring AI-powered query assistance via Cloudflare AI. <a href="https://app.daily.dev/posts/IwUAWOsVf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rspack 1.7 released with performance improvements</strong>: Rspack 1.7, the final 1.x release before 2.0, brings enhanced SWC plugin compatibility, native asset import support, and lazy compilation by default, with users reporting significant build time reductions. <a href="https://app.daily.dev/posts/pFPLemc3H" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Codespaces now supports data residency for enterprises</strong>: GitHub Codespaces is now in public preview for GitHub Enterprise Cloud, offering data residency options in selected regions for compliance. <a href="https://app.daily.dev/posts/m4rSRbzRV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Cloud BigQuery gets conversational analytics</strong>: Google Cloud launched Conversational Analytics in BigQuery (preview), an AI-powered agent that enables natural language data analysis, eliminating the need for SQL. <a href="https://app.daily.dev/posts/2YKMeABdR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>formae IaC platform adds multi-cloud support and plugin SDK</strong>: formae, an open-source IaC platform, announced beta multi-cloud support for Google Cloud, Azure, Oracle Cloud, and OVHcloud, along with a Plugin SDK for custom extensions. <a href="https://app.daily.dev/posts/bqzmDPKsL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA GeForce NOW launches native Linux support</strong>: NVIDIA’s GeForce NOW cloud gaming service launched native Linux PC support in beta, officially supported on Ubuntu 24.04 LTS and later, offering high-performance streaming. <a href="https://app.daily.dev/posts/RB8XUehQ7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CodeQL 2.24.0 improves language support and JavaScript handling</strong>: CodeQL 2.24.0 adds support for Swift 6.2 and .NET 10/C# 14, and improves handling of minified JavaScript files, alongside expanded framework coverage and query accuracy improvements. <a href="https://app.daily.dev/posts/vbDhmAtWr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Musk’s trillion-dollar super-company fantasy</strong>: Elon Musk’s companies—SpaceX, xAI, and possibly Tesla—are reportedly in ‘early merger discussions’ to form a trillion-dollar super-company. The rationale? Space-based AI data centers to ‘reduce AI model training costs.’ Because, clearly, the biggest problem with AI is not enough rockets and satellites. This sounds less like a business strategy and more like a fever dream fueled by too much Starlink, as reported by various sources. <a href="https://app.daily.dev/posts/wMYF638eZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google DeepMind’s ‘Project Genie’ and the gaming industry’s ‘concerns’</strong>: Google DeepMind launched ‘Project Genie,’ an AI world generator that creates ‘infinite, interactive environments.’ Google frames it as a step toward AGI and a game prototyping tool. Meanwhile, 52% of game developers now believe AI negatively impacts their field, up from 30% last year, and 33% have been laid off. Funny how ‘innovation’ often translates to ‘job displacement’ for everyone else, isn’t it? <a href="https://app.daily.dev/posts/iit38VC43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta’s Reality Labs: Peak losses or just peak delusion?</strong>: Meta’s Reality Labs reported $19.2 billion in losses for FY25, bringing its total losses to $83.6 billion since 2020. Mark Zuckerberg, ever the optimist, expects FY25 to be ‘peak losses’ as they pivot to ‘AI-integrated wearables.’ So, after burning tens of billions on a metaverse nobody wanted, the solution is to strap AI to our faces. I’m sure this time it’ll be different. <a href="https://app.daily.dev/posts/ALCffHVkc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
