<h2>Must know</h2>
<ul>
<li><strong>CanisterWorm evolves with ICP based command and control</strong>: The CanisterWorm npm supply chain attack has escalated, with threat actor TeamPCP now using the decentralized Internet Computer Protocol for its C2 infrastructure to resist takedowns. The worm propagates by stealing npm tokens via compromised GitHub Actions and installs a persistent Python backdoor on Linux systems using systemd. Security researchers recommend auditing for a ‘pgmon’ service and immediately rotating all npm credentials if infected packages are detected. <a href="https://app.daily.dev/posts/nKe1S4RDg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cilium hits ten years as the AI networking backbone</strong>: Cilium celebrated its 10th anniversary by solidifying its position as the preferred CNI for large-scale AI clusters at Microsoft and Google. The latest 1.19 release introduces ztunnel mTLS integration and eBPF-based load balancing that eliminates traditional conntrack scaling bottlenecks. New production data from Zynga confirms that replacing kube-proxy with Cilium’s eBPF implementation significantly improves performance for high-throughput workloads. <a href="https://app.daily.dev/posts/rtti5mtPR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel Workflow adds automatic end to end encryption</strong>: Vercel has implemented mandatory E2EE for all workflow data, including step arguments and hook payloads, using unique per-deployment keys derived via HKDF-SHA256. Decryption is restricted to the Web Crypto API or CLI with all access events logged for auditability. This move addresses growing concerns regarding the security of sensitive data processed by serverless orchestration layers. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Linux kernel optimizations deliver major performance gains</strong>: Recent updates include idle CPU work stealing for a 17% speedup and MGLRU improvements providing a 30% boost for MongoDB workloads. <a href="https://app.daily.dev/posts/QlGhzzwwW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Manyana introduces CRDT based version control</strong>: BitTorrent creator Bram Cohen released a proof-of-concept version control system that uses CRDTs to ensure merges never fail and preserves full rebase history. <a href="https://app.daily.dev/posts/ErDrcgZ9t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flash MoE runs massive models on consumer hardware</strong>: A new C/Metal engine enables running a 397B parameter model on a MacBook Pro at 4.4 tokens per second by streaming experts directly from SSD. <a href="https://app.daily.dev/posts/xsGaEEFUf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ZeroPath automates vulnerability exploitability verification</strong>: This AI-native security platform combines program analysis with LLMs to verify if detected vulnerabilities are actually reachable and exploitable before alerting. <a href="https://app.daily.dev/posts/5p9F6EuUW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Aurora DSQL expands PostgreSQL compatibility</strong>: Amazon’s serverless distributed SQL engine now supports identity columns and sequences, alongside new open-source connectors for Go and Node.js. <a href="https://app.daily.dev/posts/Un5GpVc7x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CERN burns AI into silicon for sub microsecond inference</strong>: Using the HLS4ML transpiler, CERN implements anomaly detection directly on FPGAs to process 63 Tb/sec of sensor data with 50-nanosecond latency. <a href="https://app.daily.dev/posts/HLSLTGctL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agentic platform engineering pattern for scale</strong>: A new architectural proposal treats AI agent configurations as versioned infrastructure using Backstage-format catalogs and symlink-based deployment. <a href="https://app.daily.dev/posts/qiDJTjrKj" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Nvidia AI tokens are the new company store scrip</strong>: Jensen Huang is suggesting engineers take half their salary in ‘AI tokens,’ a move critics rightly identify as a way to inflate compensation packages without spending actual cash or equity. These tokens don’t vest, they don’t appreciate, and you certainly can’t use them to pay a mortgage unless your bank accepts H100 compute time. It’s a transparent attempt to lock developers into a high-pressure production cycle while the company hoards the real value. <a href="https://app.daily.dev/posts/03LaAXXJF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The Amazon Transformer phone is a solution looking for a problem</strong>: Amazon is reportedly building an AI-native smartphone codenamed ‘Transformer’ to eliminate app stores, apparently forgetting the Fire Phone disaster. In a market where smartphone shipments are tanking and AI hardware like the Rabbit R1 has been a total flop, Amazon thinks a ‘minimalist dumbphone’ with Alexa is what the world needs. It’s a classic case of a tech giant trying to force a hardware ecosystem because they’re bored with just being a cloud and retail monopoly. <a href="https://app.daily.dev/posts/qNbywR4ri" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elon Musk’s Terafab is another vaporware factory</strong>: Musk announced ‘Terafab,’ a chip manufacturing facility in Austin intended to power a terawatt of compute in space, despite having zero experience in semiconductor fabrication. Given the track record of ‘Full Self-Driving’ and the ‘Optimus’ robot, this feels like another attempt to pump stock value with ambitious sci-fi promises. Building a fab isn’t like building a car; you can’t just ‘move fast and break things’ when you’re dealing with nanometer-scale lithography and multi-billion dollar cleanrooms. <a href="https://app.daily.dev/posts/ibpFpiXCR" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
