<h2>Must know</h2>
<ul>
<li><strong>Trivy vulnerability scanner hit by supply chain attack</strong>: Hackers compromised Aqua Security’s Trivy, injecting malicious code into nearly all versions of the popular open-source scanner. The attack targeted GitHub Actions to exfiltrate cloud credentials, SSH keys, and Kubernetes tokens from CI/CD pipelines to attacker-controlled servers. Maintainers advise an immediate rotation of all pipeline secrets for anyone who ran version 0.69.4 or used the affected GitHub Actions. <a href="https://app.daily.dev/posts/2d8XVA28P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Germany mandates open document formats for public sector</strong>: The German government’s new Deutschland-Stack framework officially mandates the use of ODF and PDF/UA across all public administrations by 2028. This move explicitly excludes proprietary Microsoft formats like .doc and .xls to reduce vendor lock-in and bolster European digital sovereignty. The Document Foundation has hailed the decision as a fundamental win for open-source infrastructure in democratic administration. <a href="https://app.daily.dev/posts/ffG1g9Lse" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft rolls back Copilot entry points in Windows 11</strong>: Responding to user feedback and performance concerns, Microsoft is reducing the number of Copilot AI entry points in core apps like Photos, Notepad, and Snipping Tool. The company claims it is shifting toward more intentional AI integrations while focusing on a quality-driven roadmap for Windows 11 that prioritizes reliability and file explorer performance. This follows a Pew Research study indicating that half of U.S. adults are more concerned than excited about pervasive AI. <a href="https://app.daily.dev/posts/R3I8JkvR5" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Next.js 16.2 adds agent native features and 400 percent faster dev startup</strong>: The release includes an <a href="http://agents.md" target="_blank" rel="noopener nofollow">agents.md</a> file for AI context and experimental tools that expose browser-level data to coding agents. <a href="https://app.daily.dev/feed-by-ids?id=pLH5NluEB&amp;id=TgFXANsju" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Salesforce acqui hires Clockwise team to bolster Agentforce orchestration</strong>: The AI calendar startup will shut down on March 27 as its team joins Salesforce to work on agent interoperability. <a href="https://app.daily.dev/posts/32Jbna35V" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Canonical launches MicroCloud Cluster Manager beta for edge environments</strong>: The new Go-based tool provides a unified dashboard for managing lightweight cloud clusters across data centers and mixed deployments. <a href="https://app.daily.dev/posts/eNJ4S0Xa7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google engineer introduces Sashiko AI code reviewer for Linux kernel</strong>: Written in Rust, the tool found 53% of bugs in testing that were previously missed by human reviewers on the mailing lists. <a href="https://app.daily.dev/posts/j5mdnOwUC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.5 adds Linux syscall user dispatch for better game performance</strong>: The update fixes long-standing crashes in titles like Red Dead Redemption 2 by redirecting non-native system calls to user-space. <a href="https://app.daily.dev/posts/1L0pKGR6J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SingleStore 9.1 introduces F16 vector type to halve storage costs</strong>: The new 16-bit floating point type reduces embedding storage by 50% while maintaining 96-98% recall for semantic search. <a href="https://app.daily.dev/posts/xRqtno45x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Devvami CLI unifies GitHub and AWS workflows in the terminal</strong>: The Node.js tool manages PRs, CI/CD, and AWS costs through a single command with secure credential storage. <a href="https://app.daily.dev/posts/4IKzpqGc2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The automated AI researcher by 2028 fantasy</strong>: OpenAI is back at it, promising a fully autonomous AI researcher by 2028 and an ‘intern’ version by this September. This is a bold claim for a company whose models still hit a 0% success rate on medium-difficulty esoteric programming benchmarks like EsoLang-Bench. It’s the classic Silicon Valley move: promise a digital Einstein while your current tech still struggles to write a basic Brainfuck script without hallucinating. <a href="https://app.daily.dev/feed-by-ids?id=5rUZDVSxD&amp;id=NwGOQcAls" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon’s vibe coding outage and the senior engineer tax</strong>: Amazon reportedly lost 6.3 million orders during a six-hour outage caused by junior operators blindly accepting AI-generated code they didn’t understand. Their brilliant solution? Mandate 80% AI tool usage while simultaneously requiring senior engineers to sign off on every single line of junior code. It’s a masterclass in corporate cognitive dissonance: forcing a tool that breaks things and then making your most expensive employees do the cleanup for the ‘efficiency’ gains. <a href="https://app.daily.dev/feed-by-ids?id=WUU9cqG9n&amp;id=gcPJlzGP1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Delve’s compliance evidence fabrication factory</strong>: A Y Combinator-backed startup called Delve is allegedly ‘automating’ SOC 2 compliance by simply fabricating the evidence and having offshore mills rubber-stamp the reports. An investigation found that 99.8% of their client reports were identical, right down to the script-generated typos. It turns out ‘AI-powered GRC’ is often just a fancy wrapper for old-fashioned fraud that leaves clients with massive HIPAA and GDPR liabilities. <a href="https://app.daily.dev/posts/zmPU272WX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
