<h2>Must know</h2>
<ul>
<li><strong>Iranian wiper attack leverages Microsoft Intune for mass destruction</strong>: The Iranian-backed group Handala claimed a massive wiper attack on medical tech giant Stryker, reportedly using Microsoft Intune to issue remote wipe commands to over 200,000 systems. Krebs on Security reports that employees were urged to uninstall Intune immediately as the group alleged the theft of 50 TB of data. This represents a significant escalation in destructive cyber operations targeting critical healthcare infrastructure via cloud-based management tools. <a href="https://app.daily.dev/posts/qJLUV3dqX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TypeScript 7.0 moves to Go for dramatic performance gains</strong>: Microsoft announced that TypeScript 6.0, hitting general availability on March 17, will be the final version based on a JavaScript codebase. The subsequent TypeScript 7.0 will feature a completely rewritten compiler in Go, aiming to solve long-standing build performance bottlenecks. This shift aligns with a broader industry trend of rewriting developer tooling in systems languages like Go and Rust to handle increasingly massive codebases. <a href="https://app.daily.dev/posts/j0iCSd3Er" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js abandons odd even release cycle for annual model</strong>: Starting with version 27, Node.js is retiring its decade-old release strategy in favor of a single major release every April. Every annual version will now automatically graduate to Long Term Support (LTS) in October, a move designed to reduce maintainer burden and provide a more predictable upgrade path for enterprise users. This change brings Node.js in line with the annual cadences used by the Python and .NET ecosystems. <a href="https://app.daily.dev/posts/h7UZHGfGS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>CodeQL 2.24.3 adds Java 26 support and Maven POM version detection</strong>: The latest static analysis update improves Java 17+ compatibility and expands coverage for the jakarta namespace. <a href="https://app.daily.dev/posts/stFvmHj97" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Astro 6.0 launches with Cloudflare integration and Rust compiler</strong>: The first release since the acquisition features a Vite-powered dev server that matches production runtimes like Cloudflare KV and D1. <a href="https://app.daily.dev/posts/IHR4FLE2p" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangChain enables autonomous context compression for AI agents</strong>: New middleware allows agents to decide when to summarize their own memory based on task boundaries rather than fixed token limits. <a href="https://app.daily.dev/posts/bp7Ij8FZb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome 146 introduces built in Sanitizer API and scoped custom elements</strong>: The update provides native XSS protection and allows multiple definitions for the same tag name to prevent library conflicts. <a href="https://app.daily.dev/posts/8Ir9X3UpZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Redpanda Cloud brings BYOVPC to AWS for production workloads</strong>: The data plane now deploys directly into customer-managed VPCs and IAM roles while supporting PrivateLink and Transit Gateway. <a href="https://app.daily.dev/posts/drCAJNp2N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Lottie4J 1.1.0 brings track matte support and Apache 2.0 licensing</strong>: The JavaFX-based animation library added a debug viewer for side-by-side comparison with the official JS player. <a href="https://app.daily.dev/posts/2eCS9cx9j" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitGuardian automates ownership tracking for non human identities</strong>: The new feature maps service accounts and API keys to owners using IAM data and commit history to close accountability gaps. <a href="https://app.daily.dev/posts/0C7SDYX2D" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The auto approve mode security theater</strong>: Google and Microsoft are racing to release ‘Auto-Approve’ modes for AI agents that bypass human review for multi-file changes. Google’s own documentation for Gemini Code Assist admits this is ‘extremely dangerous,’ yet they’re shipping it anyway to juice productivity metrics. It’s a classic case of ‘move fast and break things’ where the ‘things’ are your production environment and security perimeter. <a href="https://app.daily.dev/feed-by-ids?id=0ainbJCwY&amp;id=0lig7j1SF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Functional programming is not a magic salary multiplier</strong>: Recent industry fluff pieces claim learning Erlang or Scala is a guaranteed ticket to a $150k salary while ignoring the brutal learning curves and niche market demand. While pure functions are great for testing, the ‘FP makes you a better developer’ narrative conveniently forgets that most enterprise systems are still messy, stateful monoliths. High salaries in these niches usually reflect the scarcity of people willing to maintain legacy telecom code, not a paradigm-shift bonus. <a href="https://app.daily.dev/posts/DWRWCKfds" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The self evolving VLM data scarcity myth</strong>: Research into ‘MM-Zero’ claims vision-language models can ‘self-evolve’ without labeled data by using self-generated inputs. In reality, this is just a fancy way of describing a model eating its own tail, which historically leads to model collapse and amplified biases. Calling it ‘self-evolution’ is a marketing masterstroke for what is essentially a high-tech feedback loop of synthetic hallucinations. <a href="https://app.daily.dev/posts/5Jd0lpjDD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
