<h2>Must know</h2>
<ul>
<li><strong>Trivy vulnerability scanner hit by supply chain attack</strong>: Hackers compromised Aqua Security’s Trivy, injecting malicious code into version 0.69.4 and affecting multiple GitHub Action tags. The malware was designed to exfiltrate GitHub tokens, cloud credentials, and Kubernetes secrets from CI/CD pipelines to attacker-controlled servers. Maintainers advise rotating all pipeline secrets immediately if you ran any version other than the unaffected 0.35.0. <a href="https://app.daily.dev/posts/2d8XVA28P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft rolls back Copilot entry points in Windows 11</strong>: Responding to feedback about ‘AI bloat,’ Microsoft is removing Copilot integrations from Photos, Notepad, and Snipping Tool to focus on more intentional experiences. This shift accompanies a new quality-focused roadmap that prioritizes File Explorer performance and user control over updates. The company is also migrating WinUI3 components to lower latency and improve memory efficiency across the OS. <a href="https://app.daily.dev/posts/R3I8JkvR5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Germany mandates open document formats for government</strong>: The Deutschland-Stack framework now requires all public administrations to use ODF and PDF/UA, explicitly excluding proprietary Microsoft formats like .doc and .xls. Targeting a 2028 rollout, the mandate aims to reduce vendor lock-in and promote European digital sovereignty. The Document Foundation has hailed the move as a fundamental step for democratic infrastructure and open-source adoption. <a href="https://app.daily.dev/posts/ffG1g9Lse" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Next.js 16.2 adds agent native features and 400 percent faster dev startup</strong>: The release includes an <a href="http://agents.md" target="_blank" rel="noopener nofollow">agents.md</a> file for AI context and experimental tools that expose browser-level data to coding agents. <a href="https://app.daily.dev/feed-by-ids?id=pLH5NluEB&amp;id=TgFXANsju" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sashiko brings AI powered code review to the Linux kernel</strong>: Developed by a Google engineer, this Rust-based tool analyzes mailing list patches and caught 53% of bugs missed by human reviewers. <a href="https://app.daily.dev/posts/j5mdnOwUC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Television is a Rust based fuzzy finder with channel architecture</strong>: This FZF alternative uses ‘channels’ to handle files, git, and community libraries for AWS, Docker, and Kubernetes. <a href="https://app.daily.dev/posts/HAbGCXW9P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel 12 launches official AI SDK for multi provider orchestration</strong>: The framework-native SDK provides a consistent API for text generation, embeddings, and agents with automatic provider fallbacks. <a href="https://app.daily.dev/feed-by-ids?id=fqJ4PUxyc&amp;id=HLhWYIKDD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SingleStore 9.1 introduces F16 vector type for 50 percent storage savings</strong>: The new 16-bit floating point type reduces storage requirements and speeds up exact kNN queries by 38% over F32. <a href="https://app.daily.dev/posts/xRqtno45x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Canonical releases MicroCloud Cluster Manager beta for edge management</strong>: The Go-based tool provides a unified dashboard for discovering and monitoring lightweight cloud clusters across data centers. <a href="https://app.daily.dev/posts/eNJ4S0Xa7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.5 adds Linux syscall user dispatch for gaming performance</strong>: The update fixes long-standing crashes in titles like Red Dead Redemption 2 by redirecting non-native system calls to user-space. <a href="https://app.daily.dev/posts/1L0pKGR6J" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Amazon loses 6 million orders to vibe coding</strong>: After mandating 80% AI tool usage, Amazon suffered a six-hour outage because junior operators blindly accepted AI-generated code they couldn’t actually read. It’s a perfect example of ‘triage slop,’ where professional-looking AI alerts lack any actual depth, leading to catastrophic production failures. Apparently, ‘vibe coding’ works great until you realize the vibes don’t include a working checkout service. <a href="https://app.daily.dev/feed-by-ids?id=kWuil8E6j&amp;id=qbUFVk9kz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Delve fabricates compliance evidence for SOC 2 reports</strong>: An investigation revealed that YC-backed Delve has been using Indian certification mills to rubber-stamp identical, pre-written auditor conclusions for hundreds of clients. They’ve essentially turned GRC into a creative writing exercise, leaving NASDAQ-traded companies with massive HIPAA and GDPR liabilities. It turns out ‘automating compliance’ was just a fancy way of saying ‘we have a script that generates fake trust pages.’ <a href="https://app.daily.dev/posts/zmPU272WX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA DLSS 5 faces backlash for rewriting artistic intent</strong>: Gamers and developers are revolting against DLSS 5 because its AI-powered ‘breakthrough’ keeps washing out contrast and distorting character faces. Jensen Huang’s dismissive response hasn’t helped, especially since the tech seems to prioritize frame rates over the actual atmospheric lighting developers spent years perfecting. It’s the ultimate ‘AI for AI’s sake’ move: making games run faster by making them look significantly worse. <a href="https://app.daily.dev/feed-by-ids?id=BsIJ2t6dP&amp;id=bugYUlRMu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
