<h2>Must know</h2>
<ul>
<li><strong>InstallFix campaign targets devs with fake Claude installers</strong>: A new cyberattack dubbed ‘InstallFix’ is exploiting the developer habit of copy-pasting terminal commands by serving malicious one-liner installers for Anthropic’s Claude Code. Discovered by Push Security, the campaign uses Google-sponsored ads and legitimate hosting like Cloudflare Pages to deploy the Amatera infostealer on both Windows and macOS. The malware harvests browser credentials, session tokens, and crypto wallet data, proving that even experienced engineers aren’t immune to a well-placed malicious script. <a href="https://app.daily.dev/posts/9qIpGNF3w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Skir emerges as a modern Protobuf alternative</strong>: Skir is a new declarative schema language designed for defining data types and APIs with a focus on modern developer experience. It supports type-safe code generation for Go, TypeScript, and Rust, offering multiple serialization formats including dense binary and readable JSON. According to reports on Hacker News, it features a VS Code extension for real-time validation and supports cross-project type sharing via GitHub imports, aiming to fix the ergonomic friction often found in gRPC and Protobuf workflows. <a href="https://app.daily.dev/posts/K1Dw3NIL7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents breach McKinsey and Mexican government</strong>: The escalation of autonomous cyber warfare has reached a tipping point, with a hacker using Anthropic’s Claude to exfiltrate 150GB of data from Mexican agencies. Simultaneously, CodeWall’s autonomous agent reportedly compromised McKinsey’s internal AI chatbot, Lilli, gaining read-write access to 46 million chat messages in under two hours. These incidents highlight a systemic shift where AI is no longer just a coding assistant but a high-speed exploitation engine targeting unauthenticated API endpoints. <a href="https://app.daily.dev/feed-by-ids?id=8qxOdh1eq&amp;id=CXplMNyrx&amp;id=kM7L9oZVw" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Microsoft releases MCP C# SDK v1.0</strong>: The official SDK now fully supports the latest Model Context Protocol spec, including incremental scope consent and tool calling in sampling. <a href="https://app.daily.dev/posts/w7U4l6bvf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Context-use turns data exports into local AI memory</strong>: This open-source CLI tool uses pgvector to convert personal data exports into a searchable memory store for local LLMs via an MCP server. <a href="https://app.daily.dev/posts/QTiD20nVa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FivWall offers a local-first visual note-taking PWA</strong>: Built with Next.js 16 and React 19, this MIT-licensed tool combines an infinite canvas with Kanban boards and works fully offline. <a href="https://app.daily.dev/posts/EKOEMzVYv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA adds official RHEL and AlmaLinux support</strong>: CUDA 13.2 now allows direct package distribution from AlmaLinux repositories, simplifying infrastructure management for enterprise Linux users. <a href="https://app.daily.dev/posts/P12eZnWKo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GCC 16 targets mid-April release with C++20 default</strong>: The upcoming compiler release includes an Algol 68 front-end and support for AMD Zen 6 and Intel Nova Lake architectures. <a href="https://app.daily.dev/posts/LUtVxhcR4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AngstromIO is a tiny 9mm dev board</strong>: Based on the ATtiny1616, this miniature board features USB-C power and I2C breakouts, panelized with a dual CH340E programmer. <a href="https://app.daily.dev/posts/53QqnzVuM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apono integrates with Grafana for JIT access</strong>: The integration replaces static permissions with policy-driven, time-bound access based on on-call schedules and active incident context. <a href="https://app.daily.dev/posts/LkV0E54LV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The $5,000 Claude loss is pure math fiction</strong>: A viral Forbes claim suggesting Anthropic loses $5,000 per Claude Code Max subscriber has been thoroughly debunked by OpenRouter pricing analysis. Actual inference costs are roughly 10x lower, making most users profitable and exposing the claim as a convenient narrative to justify massive enterprise markups. It’s a classic case of frontier labs crying poor while sitting on healthy margins. <a href="https://app.daily.dev/posts/75TvZRw7g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s E7 tier is a bundle of nothing</strong>: Microsoft is trying to sell the ‘First Frontier Suite’ for $99 a month, but Gartner has already called out the measly 13% discount as ‘unimpressive.’ The ‘Agent 365’ control plane is being described as a work in progress with limited functionality, essentially charging enterprises a premium to beta test Microsoft’s internal governance tools. It’s a masterclass in rebranding existing features into a higher price bracket. <a href="https://app.daily.dev/posts/CA1PJtcwI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI brain fry is the new corporate burnout</strong>: A Boston Consulting Group study found that 14% of workers are suffering from ‘AI brain fry’ because they are being forced to manage too many agents. Productivity apparently tanks after the third tool, proving that throwing more ‘autonomous’ assistants at a problem just creates a new layer of management overhead for the humans. We’ve successfully automated the process of making ourselves exhausted. <a href="https://app.daily.dev/posts/8fPvXqX73" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
