<h2>Must know</h2>
<ul>
<li><strong>Iranian-backed wiper attack hits Stryker via Microsoft Intune</strong>: The Iranian-linked group Handala claimed a massive destructive attack on medical tech giant Stryker, allegedly erasing data across 200,000 systems. According to Krebs on Security, the attackers bypassed traditional malware by leveraging Microsoft Intune to issue remote wipe commands, forcing thousands of employees offline. Stryker has confirmed a global Windows environment disruption, marking a significant escalation in state-sponsored cyberattacks targeting critical healthcare infrastructure. <a href="https://app.daily.dev/posts/qJLUV3dqX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js moves to annual release cycle starting with version 27</strong>: The Node.js project is retiring its decade-old odd/even release model in favor of a predictable annual cadence every April. Under the new plan, every major version will eventually become an LTS release in October, aligning the ecosystem with Python and .NET. This shift aims to reduce maintainer burden and provide a more stable upgrade path for enterprise users who previously ignored odd-numbered releases. <a href="https://app.daily.dev/posts/h7UZHGfGS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TypeScript 7.0 to feature high-performance Go-based compiler</strong>: With the TypeScript 6.0 release candidate now live, Microsoft has confirmed that version 7.0 will be the first to ship with a compiler rewritten in Go. This move follows the industry trend of replacing JavaScript-based tooling with systems languages to achieve dramatically faster build times. The current 6.0 RC serves as the final JS-based iteration, introducing support for ES2025 features like RegExp.escape and the Temporal API. <a href="https://app.daily.dev/posts/j0iCSd3Er" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Astro 6.0 launches with Cloudflare integration and rewritten dev server</strong>: The first major release since the Cloudflare acquisition features a Vite-powered pipeline that matches local development to production runtimes like KV and D1. <a href="https://app.daily.dev/posts/IHR4FLE2p" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Datadog slashes Go binary size by 77 percent</strong>: Engineers reduced their agent footprint from 1.22 GiB by auditing transitive dependencies and eliminating reflection that prevented linker dead-code elimination. <a href="https://app.daily.dev/posts/QEtzIe7DB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kor is a new Go CLI to find unused Kubernetes resources</strong>: This open-source tool identifies orphaned ConfigMaps, Secrets, and Deployments across clusters, supporting Prometheus metrics and automated cleanup. <a href="https://app.daily.dev/posts/NuOzDoVbb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangChain enables autonomous context compression for agents</strong>: A new middleware allows AI agents to decide when to summarize their own context window based on task boundaries rather than fixed token limits. <a href="https://app.daily.dev/posts/bp7Ij8FZb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tetrate debuts open source marketplace for Envoy extensions</strong>: The ‘Built on Envoy’ project provides ready-to-use Apache 2.0 components for WAF, OAuth2, and AI governance, supporting Go and Rust extensions. <a href="https://app.daily.dev/posts/a9NzgGr3S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Redpanda Cloud brings BYOVPC to AWS production workloads</strong>: The generally available feature allows customers to deploy the Redpanda data plane into their own pre-provisioned VPCs and IAM roles. <a href="https://app.daily.dev/posts/drCAJNp2N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gabagool is a snapshotable WebAssembly interpreter in Rust</strong>: This from-scratch implementation allows the entire execution state of a WASM module to be serialized, suspended, and restored. <a href="https://app.daily.dev/posts/S0ToTrMKr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The auto-approve AI security theater</strong>: Google and Microsoft are racing to release ‘Auto Approve’ modes for AI agents, despite Google’s own docs previously calling the feature ‘extremely dangerous.’ We are essentially being told to trust black-box models with write access to production infrastructure while researchers at Anthropic and Stanford are still trying to figure out why these models lie to please users (AI sycophancy). It’s a bold strategy to automate the ‘delete production’ button and call it a productivity feature. <a href="https://app.daily.dev/feed-by-ids?id=0ainbJCwY&amp;id=0lig7j1SF&amp;id=9PxzaTrWE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-weights models are production-ready lies</strong>: A recent attempt to post-train the 1-trillion parameter Kimi-K2 model revealed that ‘open-weights’ is a far cry from ‘open-source.’ Researchers hit six distinct, deep-seated bugs in the HuggingFace stack, proving that while the weights are public, the actual infrastructure to use them is a fragmented mess of monkey-patches. If your ‘open’ model costs 9x more to run than a proprietary API because the tooling is broken, it’s just a very heavy marketing asset. <a href="https://app.daily.dev/posts/fGLJgG6tV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The dead internet is finally here</strong>: Between AI-generated job applications, Reddit bots astroturfing SaaS products, and LinkedIn feeds drowning in ‘AI slop,’ the internet has officially become a feedback loop of bots talking to bots. Even Hacker News is now forced to restrict AI content to keep the signal-to-noise ratio above zero. We’ve reached the peak of the hype cycle where the primary output of the tech industry is digital pollution that makes the platforms we built unusable. <a href="https://app.daily.dev/posts/PSVuj977R" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
