<h2>Must know</h2>
<ul>
<li><strong>Iranian hacktivists weaponize Intune in Stryker wiper attack</strong>: The Iranian-linked group Handala has claimed responsibility for a massive wiper attack on medical tech giant Stryker, allegedly erasing data from 200,000 systems. Security researchers at Check Point and Flashpoint indicate the attackers bypassed traditional malware detection by abusing Microsoft Intune to issue legitimate remote wipe commands. This incident marks a significant escalation in state-sponsored sabotage, shifting from ransomware to pure data destruction via administrative tool abuse. <a href="https://app.daily.dev/feed-by-ids?id=qJLUV3dqX&amp;id=uAjuJpRKe&amp;id=yJEa6I8jt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vite 8.0 swaps Rollup for Rust-based Rolldown</strong>: Vite 8.0 has officially launched, marking its most significant architectural shift by replacing the esbuild/Rollup dual-bundler setup with Rolldown. This new Rust-based bundler, developed by VoidZero, maintains full plugin compatibility while delivering reported build speed improvements of up to 30x. The release also introduces integrated DevTools, WebAssembly SSR support, and browser console forwarding directly to the terminal. <a href="https://app.daily.dev/feed-by-ids?id=ftus2EKcR&amp;id=FK7SZspfC&amp;id=nIhKwLZii" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Glassworm group targets supply chains with invisible Unicode</strong>: A new wave of supply chain attacks attributed to the Glassworm threat actor has compromised over 150 GitHub repositories and npm packages. According to Aikido Security, the group uses invisible Unicode characters to hide malicious payloads from editors and code review tools, making the code appear as empty strings that execute via eval at runtime. The campaign is notably sophisticated, using LLMs to generate high-quality documentation and bug fixes to mask the malicious activity. <a href="https://app.daily.dev/feed-by-ids?id=S42bqYmdx&amp;id=7qAB3XlzU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>JavaScript Temporal API reaches Stage 4</strong>: The TC39 committee has officially finalized the Temporal API for ES2026, finally providing a robust, immutable replacement for the broken Date object. <a href="https://app.daily.dev/feed-by-ids?id=WsjtjDMl5&amp;id=gkoRNJqg4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Astro 6.0 introduces Rust compiler and Fonts API</strong>: Astro 6.0 is out with a new Vite-powered dev server, a stable Fonts API, and an experimental Rust-based compiler for significant performance gains. <a href="https://app.daily.dev/feed-by-ids?id=IHR4FLE2p&amp;id=DAKjdsti9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Brave Wallet integrates NEAR Intents for cross-chain swaps</strong>: Brave version 1.88 enables gas-free, bridge-less swaps across Bitcoin, Solana, and Zcash using NEAR’s intent-based transaction architecture. <a href="https://app.daily.dev/posts/Zq9d5AxwP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java 26 ships with HTTP/3 and G1 GC optimizations</strong>: The latest Java release finalizes HTTP/3 support in the client API and introduces Project Leyden improvements for faster startup times. <a href="https://app.daily.dev/feed-by-ids?id=NtwjCFOhL&amp;id=eMjS9IzX8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Room 3.0 alpha goes Kotlin-only with KMP support</strong>: Android’s Room library is dropping Java support and KAPT in favor of a pure Kotlin/KSP implementation with new Wasm and JS targets. <a href="https://app.daily.dev/posts/beiWlM3Cx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon S3 adds account-regional namespaces</strong>: To prevent bucketsquatting, S3 now allows enforcing unique bucket names per account and region via new IAM condition keys. <a href="https://app.daily.dev/feed-by-ids?id=nekgWU5A0&amp;id=6WKBSnfKB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oxyde is a new high-performance Rust-core Python ORM</strong>: Oxyde combines a Django-style API with Pydantic v2 and a Rust core, outperforming SQLAlchemy and Tortoise in initial benchmarks. <a href="https://app.daily.dev/posts/GbDlMT2wK" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The 30 minute app is the new 10x engineer myth</strong>: Social media is currently flooded with ‘vibe coders’ claiming to build production apps in 30 minutes using Claude or Bolt. Real-world post-mortems, like the Cryptosaurus project, show that getting past the ‘cool prototype’ phase still takes 100+ hours of actual engineering to handle smart contracts, AWS plumbing, and the inevitable edge cases AI ignores. <a href="https://app.daily.dev/feed-by-ids?id=8mHkiEYNC&amp;id=fHFcKvzaA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Perplexity claims $1.6 million in savings with zero math</strong>: Perplexity is touting its new ‘Computer for Enterprise’ by claiming it saved internal teams $1.6 million in labor costs in just four weeks. As The Register pointed out, they’ve provided exactly zero methodology for this figure, making it a textbook example of the ‘AI ROI’ theater used to justify eye-watering compute spend. <a href="https://app.daily.dev/posts/8UNFN0tjN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Orbital data centers are the peak of AI insanity</strong>: Nvidia is now hyping ‘space-based computing’ with its Vera Rubin modules, while startups like Aetherflux plan to launch data center satellites. Gartner analysts have correctly labeled this ‘peak insanity,’ noting that the prohibitive launch costs and the minor detail of ‘cooling a server in a vacuum’ make this more of a sci-fi fever dream than a viable infrastructure strategy. <a href="https://app.daily.dev/posts/5QtI91Gu3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
