<h2>Must know</h2>
<ul>
<li><strong>TypeScript 6.0 bridges the gap to a Go native compiler</strong>: TypeScript 6.0 has officially launched as the final JavaScript-based version, introducing support for the Temporal API and Map upsert methods while enforcing stricter defaults like <code>esnext</code> modules. This release serves as a stable transition point for the upcoming TypeScript 7.0, which features a nearly complete Go-native compiler designed to drastically reduce build times. Key legacy options like <code>baseUrl</code> and <code>moduleResolution:node</code> are now deprecated to streamline the ecosystem for the 7.0 transition. <a href="https://app.daily.dev/posts/kynZFJI6r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Unikraft boots one million microVMs in ten milliseconds</strong>: At QCon London 2026, Unikraft CEO Felipe Huici demonstrated a breakthrough in AI agent infrastructure by booting 1,000,000 virtual machines on a single commodity server using Firecracker and compressed differential snapshots. This architecture allows for VM-grade isolation with container-like density, specifically targeting the massive scaling requirements of autonomous AI agent sandboxes. By integrating these microVMs as Kubernetes pods via a virtual kubelet, the system maintains standard orchestration while keeping sensitive credentials in host-side proxies. <a href="https://app.daily.dev/posts/ZIuVqXL43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mandiant reports ransomware hand off window collapsed to seconds</strong>: The Mandiant M-Trends 2026 report reveals that the time between initial access brokers and ransomware operators has plummeted from 8 hours to just 22 seconds. Attackers are increasingly using voice phishing (vishing) to bypass MFA, making it the top access method for cloud breaches. The report also highlights a ‘recovery denial’ strategy where threat actors prioritize the destruction of backup infrastructure and virtualization management planes before deploying encryption. <a href="https://app.daily.dev/posts/YEw08MVRF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Kubeflow SDK 0.4.0 adds SparkConnect and Model Registry</strong>: The update introduces a Pythonic ModelRegistryClient and SparkClient for interactive distributed data processing on Kubernetes without requiring YAML. <a href="https://app.daily.dev/posts/gMtyzcheV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wix migrates 1,000 MySQL servers to Graviton in 30 days</strong>: Using Ansible and an internal developer platform, Wix achieved a 15% cost reduction and 50% lower CPU utilization with zero downtime during the fleet-wide migration. <a href="https://app.daily.dev/posts/mlsIwgQ0W" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AMD pghot subsystem targets Linux kernel hot page tracking</strong>: A new RFC proposes a unified ‘pghot’ subsystem to centralize page promotion logic and optimize memory tiering for CXL-equipped servers. <a href="https://app.daily.dev/posts/9z2uCLEQw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare Gen 13 servers switch to 192 core AMD Turin</strong>: The new hardware coupled with a core Rust rewrite (FL2) of the request handling layer delivers 2x throughput and 50% better performance-per-watt. <a href="https://app.daily.dev/feed-by-ids?id=0evhtm4ji&amp;id=Fgktk9kvT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Temporal releases AI coding agent skill for domain expertise</strong>: The new skill automatically injects best practices for determinism and error handling into coding agents when Temporal-related code is detected. <a href="https://app.daily.dev/posts/qBS2n9k2x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DuckDB 1.5.1 adds Lance and Iceberg v3 support</strong>: The release expands interoperability with open data formats, including support for Iceberg deletion vectors and partitioned table insertion. <a href="https://app.daily.dev/posts/WR87Gvn0N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Trypema Rust library claims 170x higher throughput than redis cell</strong>: This new rate-limiting library uses a hybrid provider that buffers locally and syncs to Redis to handle over 11 million operations per second. <a href="https://app.daily.dev/posts/oQC2SB1NA" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The 98 percent accuracy dark web AI</strong>: Google is claiming its new Gemini-powered threat intelligence service has 98% accuracy in classifying dark web threats, a suspiciously convenient number compared to the ‘80-90% false positive’ rate they attribute to competitors. It’s the classic ‘AI magic’ marketing play where a black box supposedly understands your business context better than your own security team. In reality, it’s likely just a very expensive keyword filter with a LLM-generated summary attached. <a href="https://app.daily.dev/posts/40Ri2RlBf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palantir’s land and expand regulatory trial</strong>: The UK’s FCA has awarded Palantir a ‘trial’ contract worth £30,000 per week to analyze sensitive regulatory data, despite growing concerns over vendor lock-in. Palantir’s strategy of entering via small trials and then becoming an unremovable part of the infrastructure is well-documented, yet agencies continue to act surprised when the bill hits nine figures. The claim that Palantir won’t use this data to train its models is a pinky-promise in an industry built on data exploitation. <a href="https://app.daily.dev/posts/bNEnG5lGb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The AI generated code legal trap</strong>: Industry talking heads are now warning that developers could face prison time for ‘unsupervised’ AI-generated code that causes harm, citing the Volkswagen scandal. While it makes for a great headline, it’s mostly fear-mongering designed to sell ‘AI governance’ platforms and insurance. If we started jailing engineers for shipping bugs they didn’t fully understand, the entire industry would be operating out of a federal penitentiary by next Tuesday. <a href="https://app.daily.dev/posts/pHEO5PFLO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
