<h2>Must know</h2>
<ul>
<li><strong>Kubernetes RCE flaw identified, fix delayed</strong>: Edera Advisory discovered a critical design flaw in Kubernetes that allows remote code execution (RCE) in any container on a node via commonly used <code>nodes/proxy GET</code> permissions. While a fix is slated for Kubernetes 1.36, expected in April 2025, many production clusters will take months or years to update, leaving them vulnerable. Organizations should implement fine-grained authorization controls and regularly scan for RCE attempts, as this issue is not classified as a CVE. <a href="https://app.daily.dev/posts/phMyeDnVg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s Xbox gaming division reports significant declines</strong>: Microsoft’s gaming division is the sole underperforming segment in Q2 FY26, with Xbox console sales declining 32% year-over-year and overall gaming revenue dropping 9%. This marks the sixth consecutive year of declining console sales, following price increases for Game Pass and consoles in 2025, and multiple layoffs at Xbox Game Studios. Despite record PC players, Microsoft anticipates continued declines in Q3, as reported by multiple sources. <a href="https://app.daily.dev/posts/uKbAAElcM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Musk’s companies explore major mergers</strong>: SpaceX, xAI, and potentially Tesla are in early merger discussions to form a trillion-dollar super-company under Elon Musk. Scenarios include SpaceX merging with Tesla, or SpaceX combining with xAI before SpaceX’s IPO, aiming to consolidate rockets, satellites, AI, and electric vehicles. A key driver is the plan for space-based AI data centers to reduce training costs, though building data centers in space is noted as a risky proposition given AI’s rapid evolution. <a href="https://app.daily.dev/posts/wMYF638eZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Rust ecosystem updates and new OS for IoT</strong>: This Week in Rust #636 highlights compiler improvements, library enhancements, and new Cargo lints, while Ariel OS, a new Rust-based library operating system, is designed for secure, memory-safe, low-power IoT devices. <a href="https://app.daily.dev/feed-by-ids?id=4drrcHn85&amp;id=eCviEdJvc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft deploys custom AI chip while still buying from Nvidia</strong>: Microsoft has deployed its Maia 200 AI inference chip in data centers, claiming superior performance, but CEO Satya Nadella confirmed the company will continue purchasing AI chips from Nvidia and AMD, indicating a diversified supply chain strategy. <a href="https://app.daily.dev/posts/kN85HgrLU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta escalates AI infrastructure investment</strong>: Meta plans to invest $115-135 billion in AI infrastructure in 2026, nearly doubling its 2025 investment, to support Superintelligence Labs and integrate large language models with recommendation systems across its platforms. <a href="https://app.daily.dev/posts/JHGPGk0MW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apple acquires audio AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a></strong>: Apple acquired Israeli audio AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a> for an estimated $1.6 to $2 billion, strengthening its AI hardware capabilities with <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a>’s expertise in whispered speech recognition and audio enhancement, particularly for AirPods and Vision Pro. <a href="https://app.daily.dev/posts/PknWg8Xks" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Container security practices show significant gaps</strong>: A BellSoft survey revealed that 23% of respondents experienced container-related security incidents, with human error being the primary cause for 62% of mistakes, and nearly half of developers preferring pre-hardened images over self-management. <a href="https://app.daily.dev/posts/I55IVTrKU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js affected by OpenSSL vulnerabilities</strong>: Three OpenSSL CVEs, assessed at Low to Moderate severity, affect Node.js versions due to PFX certificate file processing, with fixes planned for regular Node.js releases rather than dedicated security patches. <a href="https://app.daily.dev/posts/jITntLdtr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA GeForce NOW launches native Linux support</strong>: NVIDIA’s GeForce NOW cloud gaming service launched native Linux PC support in beta, officially supporting Ubuntu 24.04 LTS and later, offering up to 5K resolution at 120fps with RTX performance. <a href="https://app.daily.dev/posts/RB8XUehQ7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Google DeepMind’s Project Genie: infinite worlds, limited reality</strong>: Google DeepMind launched Project Genie, an ‘experimental web prototype’ that generates ‘infinite, interactive environments’ using the Genie 3 world model. While it excels at whimsical styles, it struggles with photorealism and object interaction, and is currently limited to 60-second generations. Google frames this as a step toward AGI, but game developers are already concerned, with 52% believing AI negatively impacts their field. So, ‘infinite worlds’ for Google, ‘infinite layoffs’ for the industry, apparently. <a href="https://app.daily.dev/posts/iit38VC43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding agents: preventing vulnerable code, or just more code?</strong>: Apiiro launched Guardian Agent, an AI security tool that supposedly prevents AI coding agents from generating vulnerable code by rewriting developer prompts in real-time. Apiiro claims enterprises generate 4x more code and expand attack surfaces 6x after adopting AI coding agents. So, the solution to AI-generated vulnerabilities is… more AI? It seems we’re just adding layers of abstraction to the problem, ensuring developers remain blissfully unaware of the mess underneath. <a href="https://app.daily.dev/posts/5AaMXyHJd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GDC organizers: ‘attendance tracking in line with expectations’ (despite everyone bailing)</strong>: GDC organizers are optimistically reporting attendance is ‘tracking in line with expectations’ and they ‘haven’t seen cancellations reflected in ticket sales yet.’ This is despite many international developers expressing reluctance to attend due to US immigration concerns and confirmed non-attendance from some UK and European publishers. It seems GDC’s definition of ‘expectations’ is as flexible as a rubber band, stretching to cover the inconvenient reality of a shrinking international presence. <a href="https://app.daily.dev/posts/dX5Rur1jC" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
