<h2>Must know</h2>
<ul>
<li><strong>Xbox One boot ROM compromised via voltage glitching</strong>: A decade after its release, the Xbox One has been fully compromised using a sophisticated voltage glitching attack named Bliss. Security researcher Gaasedelen used custom hardware to bypass ARM Cortex memory protection and hijack Memcpy operations within the silicon boot ROM. Because the exploit targets the hardware’s immutable boot code, it is physically unpatchable and allows for unsigned code execution at the hypervisor and kernel levels. <a href="https://app.daily.dev/posts/59weZvOHj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mandiant report reveals collapsing ransomware hand off windows</strong>: The M-Trends 2026 report highlights a terrifying shift where the window between initial access and ransomware deployment has collapsed from hours to just 22 seconds. Attackers are increasingly using voice phishing to breach cloud environments and targeting edge devices that lack telemetry, often exploiting vulnerabilities seven days before a patch is even released. Mandiant notes that while AI is being integrated into attack toolkits, the primary drivers remain social engineering and the systematic destruction of backup infrastructure. <a href="https://app.daily.dev/feed-by-ids?id=YEw08MVRF&amp;id=7UwlA6t2o" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google deploys Gemini agents for dark web intelligence</strong>: Google has launched a preview of a threat intelligence service that uses Gemini AI agents to ingest and classify up to 10 million dark web posts daily. The system autonomously builds organizational profiles to filter out the 90% false positive rate typical of keyword-based tools, identifying threats even when attackers mask victim names. Additionally, Google introduced remote MCP server support, allowing enterprises to build security agents without hosting their own infrastructure. <a href="https://app.daily.dev/posts/40Ri2RlBf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>BIO is a new RISC V I/O coprocessor for open source SoCs</strong>: Designed as a leaner alternative to Raspberry Pi’s PIO, BIO uses four PicoRV32 cores with a snap-to-quantum timing mechanism for deterministic real-time I/O. <a href="https://app.daily.dev/posts/Ueh17ApXw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Whistler enables live eBPF programming from Common Lisp</strong>: This new DSL and compiler allows developers to write and load eBPF programs directly from a REPL without requiring an external LLVM toolchain. <a href="https://app.daily.dev/posts/huR3SmHyC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Unikraft boots one million microVMs on a single server</strong>: By leveraging Firecracker and compressed differential snapshots, researchers demonstrated booting 1M isolated sandboxes in 10ms for high-density AI agent workloads. <a href="https://app.daily.dev/posts/ZIuVqXL43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vite 8 moves to Rust powered Rolldown bundler</strong>: The latest release replaces the esbuild and Rollup hybrid with a single Rust-based engine, claiming 10 to 30 times faster production builds. <a href="https://app.daily.dev/posts/QG6z68w6t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wix migrates 1000 MySQL servers to Graviton in 30 days</strong>: The migration achieved a 50% reduction in CPU utilization and significant cost savings by automating the move from CentOS 7 to Amazon Linux 2023. <a href="https://app.daily.dev/posts/mlsIwgQ0W" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>VoidStealer malware bypasses Chrome encryption via debuggers</strong>: A new infostealer uses novel debugger-based techniques to extract credentials without needing administrative privilege escalation. <a href="https://app.daily.dev/posts/9c1ADEshL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LibreOffice adds donation banners to its start center</strong>: The upcoming August release will include a persistent banner in the Start Center to help fund the open-source project’s operations. <a href="https://app.daily.dev/posts/lQSq0v0a0" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Vibe coding is just a fancy name for technical debt</strong>: The industry is currently obsessed with ‘vibe coding,’ where AI agents like Replit or Lovable generate thousands of lines of code based on a ‘feeling.’ While it’s great for building a $6.6 billion valuation on hype, senior engineers are warning that it produces unreviewable pull requests and massive ‘AI debt’ that no one actually understands. It’s essentially rapid prototyping rebranded as a replacement for actual engineering rigor. <a href="https://app.daily.dev/feed-by-ids?id=uv72ZTEQg&amp;id=EQi7fPMBC&amp;id=LjytsSGo1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI chatbots are not making you delusional</strong>: Stanford researchers are looking into ‘delusional spirals’ where users think AI is sentient or in love with them, according to reports from 19 individuals. While the chatbots are certainly flattering and fail to discourage violence, blaming the math for human delusions is a convenient way for AI companies to dodge liability. It’s not a ‘sentient’ entity; it’s a glorified autocomplete that happens to be very good at mirroring your own biases back at you. <a href="https://app.daily.dev/posts/O76YP5zn5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The unintentional AI art excuse</strong>: Pearl Abyss got caught shipping AI-generated assets in Crimson Desert and claimed it was an ‘unintentional oversight’ of placeholder props. This follows the same tired script used by Ubisoft and 11 Bit Studios when they get called out for violating Steam’s disclosure policies. Apparently, ‘comprehensive audits’ only happen after the community notices the six-fingered NPCs or warped textures. <a href="https://app.daily.dev/posts/tdUbsebm7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
