<h2>Must know</h2>
<ul>
<li><strong>NVIDIA and CNCF standardize AI infrastructure on Kubernetes</strong>: At KubeCon Europe 2026, NVIDIA donated its GPU Dynamic Resource Allocation (DRA) driver to the CNCF, moving away from legacy integer-based resource models toward a richer ResourceClaims system. This shift, backed by AWS and Google Cloud, enables workloads to request specific GPU topologies and multi-node NVLink interconnects natively. Additionally, the new llm-d framework was donated to optimize distributed inference through KV-cache-aware routing and prefill/decode disaggregation, doubling time-to-first-token performance in early Google Cloud testing. <a href="https://app.daily.dev/feed-by-ids?id=AoVkebmT8&amp;id=tdsbXMmJT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Arm enters the data center silicon market with AGI CPU</strong>: Arm has launched its first production silicon, the AGI CPU, featuring up to 136 Neoverse V3 cores and targeting agentic AI workloads. The chip supports DDR5-8800 memory with up to 6TB capacity and utilizes PCIe Gen 6 and CXL 3.0 for high-bandwidth data center interconnects. Launch partners including Meta, OpenAI, and Supermicro are already showcasing liquid-cooled designs capable of supporting over 45,000 cores per rack. <a href="https://app.daily.dev/feed-by-ids?id=S5lBW0zAU&amp;id=7HHpd3WhV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source supply chain hit by coordinated TeamPCP attacks</strong>: A massive supply chain campaign by threat group TeamPCP has compromised Checkmarx’s KICS GitHub Action, multiple VS Code plugins, and the popular LiteLLM package. The attackers exploited a GitHub Actions misconfiguration in Aqua Security’s Trivy scanner to exfiltrate privileged tokens and push backdoored container images. Security researchers at Wiz and Mandiant warn that the malware specifically targets SSH keys, cloud credentials, and API tokens across thousands of cloud environments. <a href="https://app.daily.dev/feed-by-ids?id=FpC0RIGlf&amp;id=GU6PZXcza&amp;id=I6Q0A8ukt&amp;id=rQV4oxnV0" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic adds auto mode to Claude Code</strong>: A new classifier-based permission system allows Claude to autonomously execute safe tool calls while escalating destructive actions to humans. <a href="https://app.daily.dev/posts/Hgz3is1rZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel acquires new.website to bolster v0 agents</strong>: The acquisition integrates native, agent-aware primitives for forms and databases directly into the v0 generative UI platform. <a href="https://app.daily.dev/feed-by-ids?id=TXo5OfLTR&amp;id=20Ih1mD20" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare Dynamic Workers enable AI code execution</strong>: A new V8 isolate-based runtime allows AI agents to generate and execute TypeScript functions in milliseconds with 100x faster startup than containers. <a href="https://app.daily.dev/posts/eYSqS4YkC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases critical security patches</strong>: Versions 20.20.2 and 24.14.1 address high-severity vulnerabilities including prototype pollution in HTTP headers and TLS callback errors. <a href="https://app.daily.dev/feed-by-ids?id=C8HkH2xnr&amp;id=Wjr34d3yd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TutorialKit.rb brings Ruby to the browser via WASM</strong>: The new release candidate uses WebContainers to run full Rails tutorials entirely client-side with sub-5-second boot times. <a href="https://app.daily.dev/posts/5gQhfNWeF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Video.js v10 beta merges major media frameworks</strong>: A ground-up rewrite integrates Plyr and Vidstack into a composable, shadcn-style architecture with an 88% reduction in bundle size. <a href="https://app.daily.dev/posts/esarQysuG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ghostty creator’s terminal tech reaches new milestones</strong>: The high-performance terminal emulator is increasingly being integrated into AI agent workflows for real-time PTY orchestration. <a href="https://app.daily.dev/feed-by-ids?id=SimdrwIKH&amp;id=bMS20uy9Z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The Sora sunset and the pivot to Spud</strong>: OpenAI is killing Sora before it even really lived, citing ‘compute constraints’ and ‘side quests’ while promising a new ‘super app’ codenamed Spud. It turns out making high-fidelity video is hard when Chinese competitors like Cling are already eating your lunch, so Sam Altman is reframing a product failure as a ‘strategic consolidation.’ Expect Spud to be another wrapper for the same productivity tools we already have, just with more hype. <a href="https://app.daily.dev/posts/55QkjBkbg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI productivity metrics and the calorie tracking fallacy</strong>: Management is now trying to track ‘tokens per developer’ as a productivity metric, effectively reinventing the ‘lines of code’ fallacy for the LLM era. New tools like ‘Weave’ claim to measure the ‘caloric value’ of engineering work, ignoring that shipping 98% more PRs doesn’t matter if your review time also jumps by 91%. It’s a classic case of measuring what’s easy instead of what’s valuable, leading to a sea of AI-generated ‘slop’ that humans still have to fix. <a href="https://app.daily.dev/feed-by-ids?id=f6NPwxABK&amp;id=RvQ2iIf5k&amp;id=UnZDMoU3C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The US FCC’s router ban theater</strong>: The FCC just banned ‘almost every’ new foreign-made consumer router for ‘national security,’ despite the fact that even US brands like Cisco and Netgear manufacture almost everything abroad. Unless you’re buying a Starlink router made in Texas, you’re apparently a security risk, even though the ‘evidence’ is just standard firmware CVEs that affect every device on the planet. It’s market protectionism masquerading as cybersecurity, and it’s going to do exactly nothing to stop software-level exploits. <a href="https://app.daily.dev/feed-by-ids?id=Ll2NLdArm&amp;id=N8TfQEV2B&amp;id=p4tK0Js3X" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
