<h2>Must know</h2>
<ul>
<li><strong>DeepSeek introduces Engram architecture for factual memory</strong>: DeepSeek researchers have unveiled Engram, a transformer component that acts as a conditional memory lookup table for multi-token patterns. Unlike Mixture of Experts which routes compute, Engram fetches static stored representations to prevent redundant feature reconstruction, reportedly improving factual knowledge tasks by up to 56%. The team expects to implement this at scale in DeepSeek V4 to enable cheaper, locally-runnable systems with minimal inference overhead. <a href="https://app.daily.dev/posts/lk5ZjBxyb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Arm launches AGI CPU for agentic data centers</strong>: Arm has announced its first production silicon in 35 years, the AGI CPU, specifically designed for agentic AI workloads in data centers. Built on the Armv9.2 architecture with up to 136 Neoverse V3 cores, it supports PCIe Gen 6, CXL 3.0, and massive DDR5-8800 memory capacities. Partners like Supermicro and Lenovo are already planning liquid-cooled rack designs capable of supporting over 45,000 cores to challenge x86 dominance in AI infrastructure. <a href="https://app.daily.dev/posts/S5lBW0zAU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI kills Sora to focus on the super app</strong>: In a major strategic pivot, OpenAI is shutting down its Sora video generation tool, including all API and ChatGPT integrations, effective immediately. CEO Sam Altman cited compute constraints and a need to eliminate “side quests” in favor of core productivity and business tools. The company is now consolidating its desktop app, Codex, and browser into a single “super app” powered by a new foundational model codenamed Spud. <a href="https://app.daily.dev/posts/55QkjBkbg" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>IntelliJ IDEA 2026.1 adds BYOK for Anthropic and OpenAI</strong>: The new release supports the ACP agent protocol, Java 26 structured concurrency, and inline Spring bean injection hints. <a href="https://app.daily.dev/posts/KcQd7FpkV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KubeVirt v1.8 brings Intel TDX for confidential VMs</strong>: The update aligns with Kubernetes v1.35 and introduces PCIe NUMA awareness for high-performance AI and HPC workloads. <a href="https://app.daily.dev/posts/2u9pTr13X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari 26.4 introduces CSS Grid Lanes for masonry layouts</strong>: The update also ships WebTransport for low-latency HTTP/3 communication and the Keyboard Lock API for web apps. <a href="https://app.daily.dev/posts/vXvtsrMcB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Salesforce slashes deployment latency with Luminary automation</strong>: A new deterministic approval engine replaces manual SLO verification, reducing release workflows from hours to seconds. <a href="https://app.daily.dev/posts/3wqbfud3u" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google TurboQuant achieves 6x KV memory reduction</strong>: The new quantization algorithm speeds up attention computation on H100s without sacrificing LLM accuracy. <a href="https://app.daily.dev/posts/5I7aA2g81" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PyPI malware campaign targets LiteLLM users</strong>: Malicious versions 1.82.7 and 1.82.8 were live for two hours, exfiltrating cloud credentials and SSH keys to attacker servers. <a href="https://app.daily.dev/posts/kjJd6k0JC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TutorialKit.rb brings interactive Rails to the browser</strong>: Using WebAssembly and WebContainers, the tool enables full-stack Ruby tutorials to run entirely client-side. <a href="https://app.daily.dev/posts/5gQhfNWeF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The 1-800-Flowers client side credential leak</strong>: In a masterclass of “security by hoping nobody looks,” developers at 1-800-Flowers bundled PayPal, Auth0, and Visa API keys directly into their React SPA. It’s a classic case of failing to distinguish between public and private environment variables, proving that even major retailers can’t master basic build-time configuration. If you can find the keys to the kingdom by hitting F12, you don’t have a security posture; you have a public invitation. <a href="https://app.daily.dev/posts/d3kA523sX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenClaw’s overnight security mess</strong>: OpenClaw managed to rack up 247,000 GitHub stars in 60 days while simultaneously exposing 40,000 instances and leaking credentials like a sieve. Jentic is now swooping in with a “permission firewall” to fix the disaster, highlighting how the hype-driven rush to deploy autonomous agents has completely bypassed the last twenty years of security best practices. We are currently building a skyscraper of “agentic workflows” on a foundation of wet cardboard. <a href="https://app.daily.dev/posts/SB6BM3WqC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The AI generated game engine in 40 minutes</strong>: A developer “built” a C++ game engine using five different LLMs in under an hour, resulting in a functional but predictably messy codebase. This is the peak of the “quantity over quality” era, where we celebrate generating thousands of lines of unmaintainable technical debt because it technically compiles. It’s not engineering; it’s just high-speed copy-pasting with a fancy interface. <a href="https://app.daily.dev/posts/9Lxa6AWQ6" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
