<h2>Must know</h2>
<ul>
<li><strong>CanisterWorm npm supply chain attack targets Linux servers</strong>: A self-spreading worm named CanisterWorm is currently infecting npm packages by stealing developer tokens via compromised GitHub Actions. Once installed, it deploys a persistent Python backdoor on Linux systems using a systemd service called ‘pgmon’ and automatically republishes itself to every package the victim can access. The Command and Control infrastructure is hosted on the decentralized Internet Computer Protocol, making it nearly impossible for traditional security teams to take down. <a href="https://app.daily.dev/posts/nKe1S4RDg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cilium hits 10 years with eBPF dominance and ztunnel mTLS</strong>: Cilium celebrated its 10th anniversary by releasing version 1.19, which introduces stable Multi-Pool IPAM and deep integration with Istio’s ztunnel for mTLS. Major providers like Microsoft and Google are now standardizing on Cilium as the networking data plane for large-scale AI training clusters. Real-world case studies from OVHcloud and Zynga highlight how replacing kube-proxy with Cilium’s eBPF-based load balancing eliminates long-standing conntrack scaling bottlenecks. <a href="https://app.daily.dev/posts/rtti5mtPR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Floci emerges as a lightweight LocalStack alternative</strong>: With LocalStack Community Edition sunsetting its free tier this month, Floci has launched as a drop-in, open-source AWS emulator. It supports over 20 services including RDS with IAM auth and DynamoDB Streams while maintaining a tiny 90MB Docker image footprint. Unlike its predecessor, it requires no authentication tokens and is optimized for unlimited CI/CD usage with a 24ms startup time. <a href="https://app.daily.dev/posts/hbh0eKAmA" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Manyana introduces CRDT based version control for fail proof merges</strong>: BitTorrent creator Bram Cohen released a proof-of-concept for a version control system that uses a weave history structure to ensure merges never fail. <a href="https://app.daily.dev/posts/ErDrcgZ9t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Aurora DSQL adds PostgreSQL playground and Go driver support</strong>: Amazon’s serverless distributed database now includes a browser playground and official pgx driver connectors for Go developers. <a href="https://app.daily.dev/posts/Un5GpVc7x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Beacon provides a headless Go CLI for managing Obsidian vaults</strong>: This lightweight tool allows for searching, listing, and creating Obsidian notes on remote servers without requiring a GUI or Electron. <a href="https://app.daily.dev/posts/1aN1Kc9Yv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel 6.14 delivers 17 percent speedup in CPU work stealing</strong>: The latest updates include a virtual swap layer redesign and MGLRU improvements that provide a 30% performance boost for MongoDB workloads. <a href="https://app.daily.dev/posts/QlGhzzwwW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ZeroPath combines program analysis with LLMs for automated security fixes</strong>: The YC S24 startup aims to reduce SAST noise by using reachability analysis to verify exploitability before generating mergeable PR fixes. <a href="https://app.daily.dev/posts/5p9F6EuUW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flash MoE runs 397B parameter models on consumer MacBooks</strong>: A new C/Metal inference engine uses parallel SSD streaming to run massive Mixture-of-Experts models at 4.4 tokens per second on 48GB RAM. <a href="https://app.daily.dev/posts/xsGaEEFUf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>H&amp;R Block software installs a persistent TLS backdoor on Windows</strong>: The 2025 tax software adds a root CA certificate and private key to the trusted store, enabling man-in-the-middle attacks even after uninstallation. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Nvidia AI tokens are the new company scrip</strong>: Jensen Huang suggested paying engineers in ‘AI tokens’ worth half their salary, which is just a high-tech way to inflate compensation packages without spending actual cash. These tokens don’t vest, don’t appreciate, and you certainly can’t use them to pay a mortgage unless your bank accepts hallucinations as collateral. It’s a transparent attempt to trap talent in a proprietary ecosystem while pressuring them to produce at ‘superhuman’ rates. <a href="https://app.daily.dev/posts/03LaAXXJF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The great compliance fabrication scandal</strong>: YC-backed startup Delve is facing accusations of literally making up compliance evidence for customers to pass HIPAA and GDPR audits. If true, it means ‘AI-automated compliance’ is just a fancy wrapper for lying to regulators at scale. This is what happens when you let ‘move fast and break things’ culture meet the legal requirements of data privacy. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elon Musk’s Terafab is another vaporware factory</strong>: Musk announced a ‘Terafab’ chip facility to power 200 gigawatts of computing, despite having zero experience in semiconductor manufacturing. Given the track record of the ‘Full Self-Driving’ timelines, we can expect these chips to arrive right around the same time we colonize Mars. It’s a classic hype cycle distraction to keep the stock price buoyant while actual hardware competitors are eating his lunch. <a href="https://app.daily.dev/posts/qNbywR4ri" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
