<h2>Must know</h2>
<ul>
<li><strong>CanisterWorm npm supply chain attack uses ICP for C2</strong>: A self-spreading worm dubbed CanisterWorm has infected over 50 npm packages by stealing tokens via compromised GitHub Actions. The malware installs a persistent Python backdoor on Linux systems and uses the decentralized Internet Computer Protocol (ICP) for its command-and-control infrastructure, making it exceptionally difficult to take down. Security researchers recommend checking for a ‘pgmon’ systemd service and immediately rotating all npm credentials if infected. <a href="https://app.daily.dev/posts/nKe1S4RDg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Britannica and Merriam-Webster sue OpenAI for copyright and hallucinations</strong>: The two reference giants have filed suit against OpenAI, alleging the unauthorized use of nearly 100,000 articles for model training and RAG. Beyond copyright claims, the lawsuit includes Lanham Act violations, citing instances where OpenAI’s models generated hallucinations and falsely attributed them to Britannica. This follows similar legal actions by the New York Times and Ziff Davis, signaling a tightening legal net around training data provenance. <a href="https://app.daily.dev/posts/03LaAXXJF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CERN bypasses deep learning for FPGA-based tree models</strong>: To handle the 63 Tb/sec throughput of the High Luminosity LHC upgrade, CERN is burning tree-based anomaly detection models directly into FPGA and ASIC silicon using the HLS4ML transpiler. Their AXOL1TL algorithm must execute within 50 nanoseconds to filter collision events, and researchers found that aggressively quantized tree models significantly outperform deep learning for their structured tabular data. This architectural choice highlights the efficiency limits of neural networks in extreme low-latency edge environments. <a href="https://app.daily.dev/posts/HLSLTGctL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel Workflow adds automatic E2E encryption</strong>: The platform now uses AES-256-GCM with unique per-deployment keys to encrypt all workflow inputs, payloads, and stream data by default. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Manyana introduces CRDT-based version control</strong>: BitTorrent creator Bram Cohen released a proof-of-concept VCS that uses a ‘weave’ history structure to guarantee merges never fail. <a href="https://app.daily.dev/posts/ErDrcgZ9t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Aurora DSQL expands PostgreSQL compatibility</strong>: AWS added identity columns, sequence objects, and a browser-based playground to its serverless distributed database, narrowing the gap with standard Postgres. <a href="https://app.daily.dev/posts/Un5GpVc7x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ZeroPath brings reachability analysis to AppSec</strong>: The YC S24 startup combines AST-based program analysis with LLMs to verify if vulnerabilities are actually exploitable before alerting developers. <a href="https://app.daily.dev/posts/5p9F6EuUW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flash-MoE runs 397B models on consumer MacBooks</strong>: A new C/Metal engine achieves 4.4 tokens/second for Qwen3.5 by streaming active experts from SSD and leveraging Apple Accelerate BLAS. <a href="https://app.daily.dev/posts/xsGaEEFUf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel optimizations yield double-digit gains</strong>: Recent updates including idle CPU work stealing and MGLRU have delivered up to 17.8% speedups and a 30% boost for MongoDB workloads. <a href="https://app.daily.dev/posts/QlGhzzwwW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Temper language targets multi-runtime translation</strong>: Designed by a former Google security engineer, Temper compiles to Java, JS, Python, and C# from a single codebase to solve library fragmentation. <a href="https://app.daily.dev/posts/y7ODiLHuf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Nvidia’s AI tokens are the new company store scrip</strong>: Jensen Huang is floating the idea of paying engineers in ‘AI tokens’ worth half their salary, which is a fantastic way to inflate compensation packages with assets that don’t vest, appreciate, or pay rent. It’s essentially a high-tech version of being paid in company gift cards, pressuring staff to use the very compute they’re building just to justify their ‘value.’ If you can’t pay your mortgage with a token, it’s not a salary; it’s a budget for your own work tools. <a href="https://app.daily.dev/posts/03LaAXXJF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon’s Transformer phone is a solution looking for a problem</strong>: Amazon is reportedly building an AI-native smartphone to ‘eliminate app stores,’ apparently forgetting the Fire Phone’s spectacular 2014 cratering. Betting on a hardware-first AI device in a market where the Humane Pin and Rabbit R1 are already gathering dust is a bold move for a company that just laid off thousands in its Alexa division. It’s a classic case of ‘AI FOMO’ driving a product strategy that ignores the fact that people actually like their apps and their iPhones. <a href="https://app.daily.dev/posts/HLSLTGctL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The H&amp;R Block TLS backdoor is a security masterclass in incompetence</strong>: H&amp;R Block’s 2025 tax software installs a root CA certificate and its private key directly into the Windows trusted store, effectively inviting man-in-the-middle attacks on its users. Despite being caught, the company hasn’t fixed it, and the certificate stays behind even after you uninstall the software. It’s a staggering level of negligence that turns a tax tool into a permanent, system-wide security vulnerability. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
