<h2>Must know</h2>
<ul>
<li><strong>Iranian hacktivists claim massive wiper attack on Stryker</strong>: The Iranian group Handala claims to have wiped data from 200,000 systems across 79 countries at medical tech giant Stryker. Stryker confirmed a global network disruption but found no evidence of traditional ransomware, suggesting a shift toward destructive sabotage. Security researchers at Krebs on Security and Palo Alto Networks indicate the attackers likely abused Microsoft Intune to issue remote wipe commands using legitimate administrative credentials. <a href="https://app.daily.dev/feed-by-ids?id=qJLUV3dqX&amp;id=kgoMiexIm&amp;id=RNP1WzQpA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google patches two Chrome zero days under active attack</strong>: Google released an emergency update to address CVE-2026-3909 and CVE-2026-3910, both of which are being exploited in the wild. The vulnerabilities involve an out-of-bounds write in the Skia graphics library and a flaw in the V8 JavaScript engine that allows arbitrary code execution. IT teams are urged to update to version 146.0.7680.75 immediately, as all Chromium-based browsers including Edge are affected. <a href="https://app.daily.dev/posts/uX3JbsRgx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SUSE Linux reportedly exploring six billion dollar sale</strong>: Private equity firm EQT is reportedly working with investment banks to sell SUSE Linux for approximately $6 billion. This potential change in ownership follows a long history of acquisitions by Novell, Attachmate, and Micro Focus. While official confirmation is pending, Reuters reports that potential buyers could include major industry players like Amazon, IBM, or Oracle, raising questions about the future of the community-managed openSUSE project. <a href="https://app.daily.dev/posts/K5D6L4joV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>MacBook Neo earns highest repairability score in fourteen years</strong>: iFixit awarded the $599 MacBook Neo a 6/10, praising its screw-secured battery tray and modular keyboard that finally moves away from glued-in top cases. <a href="https://app.daily.dev/posts/OwTiCs59U" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vite 8.0 launches with Rust based Rolldown bundler</strong>: The major release replaces the esbuild/Rollup hybrid with Rolldown, delivering up to 30x faster production builds while maintaining full plugin compatibility. <a href="https://app.daily.dev/feed-by-ids?id=ftus2EKcR&amp;id=FK7SZspfC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bun 1.3.11 adds native cron and Windows ARM64 support</strong>: The update introduces a native Bun.cron API for OS-level scheduling and fixes over 100 bugs, including critical Node.js compatibility issues. <a href="https://app.daily.dev/posts/DuG54Q8tB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Chrome finally expands to ARM64 Linux</strong>: Addressing a long-standing gap for Raspberry Pi and Snapdragon X Elite users, Google announced an official ARM64 Linux build arriving in Q2 2026. <a href="https://app.daily.dev/posts/tvUGu2bvl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Electron 38.2 defaults to Wayland on Linux</strong>: Following Chromium’s lead, Electron now defaults to Wayland, though developers must navigate new restrictions on window positioning and screen capture. <a href="https://app.daily.dev/posts/pfckIQzun" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nuxt 4.4 delivers massive module parsing speedup</strong>: The release features a 14,000x faster module ID parsing optimization and migrates route generation to a trie-based structure for 28x faster dev server updates. <a href="https://app.daily.dev/posts/VdiDzqJQy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot for JetBrains adds custom agent hooks</strong>: Now in public preview, developers can execute custom shell commands via a hooks.json file at key points during AI agent sessions. <a href="https://app.daily.dev/posts/MtAxg9eh2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The 100x engineer gap is the latest management hallucination</strong>: Consultants are now claiming AI has widened the gap between ‘great’ and ‘mediocre’ engineers from 2x to 100x. This is a classic case of using a made-up metric to justify aggressive hiring and firing cycles. In reality, generating 100x more code just means you’re creating 100x more technical debt for the senior engineers who actually have to review it. <a href="https://app.daily.dev/posts/o9h36HY82" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenClaw is a security dumpster fire masquerading as a viral agent</strong>: Despite reaching 200,000 GitHub stars, research shows 26% of OpenClaw’s third-party skills contain critical vulnerabilities. China’s CERT has already issued warnings about its ‘extremely weak’ default security, yet startups are still rushing to build commercial ‘Claw’ wrappers. It’s a perfect example of ‘vibe coding’ prioritizing GitHub stars over basic input sanitization. <a href="https://app.daily.dev/feed-by-ids?id=nMNWqA5sG&amp;id=uuZ0cuYiM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Algolia admin keys are leaking everywhere because of DocSearch</strong>: Security researchers found 39 active admin API keys exposed in open-source docs because maintainers can’t distinguish between search-only and write-access keys. Projects like Home Assistant were caught in the net, proving that even ‘expert’ teams are failing at basic secret management. If your documentation tool requires an admin key to show a search bar, the tool is the problem. <a href="https://app.daily.dev/posts/IipayUDBi" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
