<h2>Must know</h2>
<ul>
<li><strong>Chinese state actors weaponize Claude Code for autonomous attacks</strong>: A developing incident involves a Chinese state-sponsored group using Anthropic’s Claude Code to autonomously attack approximately 30 global targets, with AI handling up to 90% of the exploitation workflow. According to RSAC 2026 reports, these AI-driven tactics have collapsed attack timelines to under 30 minutes, leaving defenders with a rapidly narrowing window for remediation. Currently, experts warn that only 20% of serious generative AI vulnerabilities are being patched before exploitation. <a href="https://app.daily.dev/feed-by-ids?id=1vUhuGLGk&amp;id=4EeoqLzxq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mamba 3 shifts focus to inference efficiency and hardware optimization</strong>: The release of Mamba-3 marks a pivot from the training-speed focus of its predecessor toward maximizing inference performance through exponential-trapezoidal discretization. This new State Space Model architecture removes short causal convolutions and introduces a MIMO variant that improves accuracy without increasing decode latency. Benchmarks at the 1.5B parameter scale show Mamba-3 SISO outperforming Llama-3.2-1B in prefill and decode latency, with open-source kernels optimized for Hopper GPUs via Triton and TileLang. <a href="https://app.daily.dev/posts/Of3MWahiL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Helm 4 adopts WebAssembly for sandboxed Kubernetes security</strong>: The upcoming Helm 4 release integrates the Extism WebAssembly plugin to provide a secure, ‘invisible sandbox’ for Kubernetes deployment plugins. Unlike Helm 3, which ran plugins without isolation, this Wasm-based architecture restricts host system access and enforces mandatory signing and verification to improve supply chain security. This move aims to enhance runtime security and plugin provenance without altering the default user experience. <a href="https://app.daily.dev/posts/uqge8CcV2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Nvidia unveils BlueField 4 STX to solve AI agent storage bottlenecks</strong>: The new modular architecture claims 5x token throughput and 2x faster page ingestion compared to traditional CPU-based storage systems. <a href="https://app.daily.dev/posts/Cskx8eMnw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ESP32 P4 hardware revision introduces breaking pinout changes</strong>: A new revision changes a No Connect pin to a power rail, requiring hardware redesigns and separate firmware builds for the same SKU. <a href="https://app.daily.dev/posts/hkP5ndwj1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 adopts sudo rs and enables password asterisks</strong>: The ‘Resolute Raccoon’ release will end 46 years of silent password input by default, utilizing a Rust-based sudo implementation. <a href="https://app.daily.dev/posts/AvXNa15IP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Project NOMAD launches as a self hosted offline knowledge server</strong>: The Docker-based system bundles Ollama, RAG, and offline maps for ‘survival computing’ scenarios with zero internet dependency. <a href="https://app.daily.dev/posts/H7iMtIlvB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Curl officially schedules RTMP protocol removal for April</strong>: Citing zero test coverage and low adoption, version 8.20.0 will drop all six RTMP schemes after 16 years of support. <a href="https://app.daily.dev/posts/LYMsD08n0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Capacitarr brings intelligent disk management to the arr ecosystem</strong>: This Go-based tool uses a six-dimension scoring system to automatically prune media libraries when storage runs low. <a href="https://app.daily.dev/posts/37KMYIvgJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FilmKit enables browser based RAW conversion for Fujifilm cameras</strong>: The tool uses WebUSB and reverse-engineered PTP protocols to leverage the camera’s internal processor for RAW-to-JPEG conversion. <a href="https://app.daily.dev/posts/HZLlsCclK" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Nvidia GTC and the 85 trillion dollar hallucination</strong>: Jensen Huang is now pitching a combined $85 trillion market for AI agents and robotics, which is a bold number for a world still struggling to find a clear enterprise ROI for basic LLMs. Despite these ‘to the moon’ projections, Nvidia’s stock actually dipped during the keynote as investors realized that ‘vibes’ and ‘space-grade AI’ don’t immediately fix the massive infrastructure bubble concerns. It’s impressive how a 2.5-hour keynote can simultaneously claim to underpin the entire global economy while leaving analysts wondering if anyone is actually making money off the software yet. <a href="https://app.daily.dev/feed-by-ids?id=tHngHAYCv&amp;id=Rl28cxMal" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The H and R Block TLS backdoor feature</strong>: H&amp;R Block’s 2025 software ‘helpfully’ installs a root CA certificate along with its private key into your Windows trusted store, effectively creating a permanent man-in-the-middle backdoor. They’ve acknowledged the issue but haven’t bothered to fix it, meaning your tax software is now a more effective security threat than the malware it’s supposed to avoid. It’s a classic example of ‘enterprise security’ where the solution is literally a vulnerability that persists even after you uninstall the app. <a href="https://app.daily.dev/posts/mDaMSoKuM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dobby the elf claw and the dream of autonomous home hacking</strong>: Andrej Karpathy built an AI agent to ‘autonomously’ reverse-engineer his entire smart home, which sounds great until you realize it’s just a high-end wrapper for APIs that already exist. While the ‘natural language dashboard’ is cool, the hype suggests we’re one step away from Jarvis, when in reality, we’re just automating the process of turning off the lights with more compute than it took to land on the moon. It’s the ultimate ‘senior engineer with too much time’ project: replacing a light switch with a complex chain of LLM calls that might hallucinate your pool temperature. <a href="https://app.daily.dev/posts/SHMkCvdE8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
