<h2>Must know</h2>
<ul>
<li><strong>Trivy supply chain attack steals CI/CD credentials</strong>: Aqua Security’s Trivy scanner was compromised in a major supply chain attack that injected credential-stealing malware into 75 official GitHub Action tags. The malware exfiltrates SSH keys, cloud credentials, and Kubernetes tokens from CI/CD runners to attacker-controlled infrastructure. Maintainers advise pinning actions to full commit SHAs and immediately rotating all pipeline secrets if you ran affected versions like trivy-action 0.34.0 or setup-trivy 0.2.5. <a href="https://app.daily.dev/posts/2d8XVA28P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI pivots to enterprise superapp to fight Anthropic</strong>: OpenAI is reportedly merging ChatGPT, Codex, and its internal ‘Atlas’ browser into a single desktop superapp focused on agentic enterprise workflows. This strategic shift, led by Fidji Simo, aims to counter Anthropic, which is currently winning an estimated 70% of head-to-head enterprise deals. The move signals a departure from simple consumer chatbots toward complex, governed AI agents that can handle identity management and audit trails. <a href="https://app.daily.dev/posts/8DNQjej2h" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA invests 4 billion in photonics to break copper limits</strong>: NVIDIA has poured $4 billion into photonics leaders Lumenum and Coherent to replace copper interconnects with optical links in AI clusters. Copper is becoming a physical bottleneck due to heat and signal loss, whereas silicon photonics can reduce matrix multiplication energy consumption by 90% according to MIT research. This hardware shift may be more critical for scaling AI capabilities through 2028 than any specific transformer architecture improvement. <a href="https://app.daily.dev/posts/8q86CzGA8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Wine 11.5 integrates syscall user dispatch for Linux gaming</strong>: The release uses Linux kernel 5.11 features to redirect Windows system calls, fixing long-standing crashes in titles like Red Dead Redemption 2. <a href="https://app.daily.dev/posts/1L0pKGR6J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flash-KMeans achieves 200x speedup over FAISS on H200 GPUs</strong>: A new implementation fuses distance computation with online argmin to eliminate IO overhead in the N×K distance matrix. <a href="https://app.daily.dev/posts/HJdqg7GZf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pinterest cuts 90% of carousel code using native CSS</strong>: By replacing a 2,000-line JavaScript library with 200 lines of native CSS, the team improved page load times by 15% and eliminated main-thread jank. <a href="https://app.daily.dev/posts/OmQ3qCuNd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS DataSync adds Secrets Manager support for all locations</strong>: The service now supports centralized credential management for HDFS, FSx for Windows, and NetApp ONTAP using custom KMS keys. <a href="https://app.daily.dev/posts/DWdtbyORw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 adopts sudo-rs and enables password feedback</strong>: The ‘Resolute Raccoon’ release will display asterisks during sudo input by default, marking a break from 46 years of silent terminal prompts. <a href="https://app.daily.dev/posts/AvXNa15IP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Asahi Linux brings initial boot support for Apple M3 chips</strong>: New kernel patches enable basic serial console and initramfs access on M3 hardware, though GPU support remains months away. <a href="https://app.daily.dev/posts/0TBFbIR8n" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Atuin v18.13 adds daemon-powered fuzzy search for shell history</strong>: The update introduces an in-memory index using the fzf algorithm and a new PTY proxy for rendering UI without clearing terminal output. <a href="https://app.daily.dev/posts/BZMIWeFzk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The math that is quietly killing your AI agents</strong>: While benchmarks like SWE-bench claim 79% accuracy, real-world multi-step tasks often fail because of Lusser’s Law—where an 85% accurate agent on a 10-step task succeeds only 20% of the time. Engineering teams are shipping ‘autonomous’ agents without calculating compound probability, leading to production disasters like Replit’s accidental database deletions. It turns out that ‘agentic reasoning’ is mostly just a fancy way to describe a sequence of coin flips where you lose the whole game if one lands on tails. <a href="https://app.daily.dev/posts/yjcf3hUcE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA DLSS 5 is the motion smoothing of the AI era</strong>: NVIDIA’s latest ‘breakthrough’ is facing a massive backlash from developers who say the AI models are flattening lighting and distorting character faces to the point of ruining artistic intent. Jensen Huang’s dismissive response to critics only highlights that NVIDIA is now an AI infrastructure company that views gaming as a secondary data-gathering exercise. If you enjoyed how ‘TrueMotion’ made every cinematic masterpiece look like a cheap soap opera, you’ll love what DLSS 5 does to your atmospheric lighting. <a href="https://app.daily.dev/feed-by-ids?id=BsIJ2t6dP&amp;id=P7dnxxeG8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coders are 19% slower and 45% more vulnerable</strong>: A recent critical take on the AI coding hype cites research showing that experienced developers actually slow down when using AI, while generating code with a nearly 50% security flaw rate. The ‘vibe coding’ narrative is being propped up by stock-price-driven layoffs rather than genuine productivity gains, as evidenced by an Alibaba study where 75% of autonomous codebases broke within eight months. It seems the only thing ‘vibe coding’ successfully produces is a false sense of confidence and a massive pile of technical debt for the next senior engineer to clean up. <a href="https://app.daily.dev/posts/IusRVfD2s" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
