<h2>Must know</h2>
<ul>
<li><strong>Malicious LiteLLM versions on PyPI steal cloud credentials</strong>: PyPI issued an urgent warning regarding two malicious versions of LiteLLM (1.82.7 and 1.82.8) that were live for two hours on March 25. The payload, linked to the LAPSUS$ group, harvests environment variables, SSH keys, and cloud credentials for AWS, GCP, and Azure. If you installed these versions, PyPI and Wiz recommend immediate credential rotation, as the package is present in 36% of cloud environments. <a href="https://app.daily.dev/posts/kjJd6k0JC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GrapheneOS rejects age verification and threatens regional exit</strong>: The privacy-focused Android fork GrapheneOS announced it will not comply with new laws in the UK, Australia, and several US states requiring age data collection at the OS level. Because the OS is designed to function without personal accounts or identification, the team stated they would rather exit those markets than compromise their architecture. This stance complicates their recent partnership with Motorola, which likely won’t sell GrapheneOS-powered hardware in restricted regions. <a href="https://app.daily.dev/posts/agWvIPypH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Arm launches AGI CPU for agentic data centers</strong>: Arm has unveiled its first production silicon, the ARM AGI CPU, specifically designed for AI infrastructure and agentic workloads. Built on 3nm lithography with up to 136 Neoverse V3 cores, the chip supports 6TB of DDR5 memory and PCIe Gen6. Reference designs from Supermicro suggest high-density configurations capable of packing over 45,000 cores into a single liquid-cooled rack. <a href="https://app.daily.dev/posts/S5lBW0zAU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Kubernetes SIG Apps introduces Agent Sandbox for stateful AI workloads</strong>: A new CRD and warm pool resource designed to eliminate cold starts and provide persistent identity for AI agents. <a href="https://app.daily.dev/posts/wroMbko1c" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel launches elastic build machines in beta</strong>: The system automatically assigns Standard, Enhanced, or Turbo resources based on project complexity to optimize cost and performance. <a href="https://app.daily.dev/posts/2w3G0XlDk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Load Balancer Controller adds type safe Gateway API support</strong>: Version 3.1.0 replaces annotation-heavy configs with CRDs for better validation and role-separated RBAC. <a href="https://app.daily.dev/posts/ELZeYfvNA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Syncfusion Agent Skills provides playbooks for AI coding assistants</strong>: New <a href="http://SKILL.md" target="_blank" rel="noopener nofollow">SKILL.md</a> files help LLMs correctly configure UI components across React, Angular, and .NET frameworks. <a href="https://app.daily.dev/posts/3MBz09FW1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>IntelliJ IDEA 2026.1 adds BYOK for AI and Java 26 support</strong>: The update includes virtual thread visualization, Spring 7 DSL support, and free basic TS/JS support in the unified build. <a href="https://app.daily.dev/posts/KcQd7FpkV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mozilla expands official RPM support for Firefox Beta and Developer Edition</strong>: Linux users on Fedora, openSUSE, and RHEL now have access to hardened, performance-optimized official binaries. <a href="https://app.daily.dev/posts/269faraFG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MS-DOS 2.0 successfully ported to the Apple IIe</strong>: The project uses an x86 co-processor card and a custom bridge program to communicate with the 6502 CPU. <a href="https://app.daily.dev/posts/9mxresSa3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The Jevons Paradox hopium for developer jobs</strong>: Optimists are citing the Jevons Paradox to claim that AI efficiency will actually create <em>more</em> developer jobs by exploding software demand. It’s a comforting bedtime story that ignores the fact that steam engines didn’t need to be ‘aligned’ or ‘supervised’ by the coal they were replacing. Expecting a 10x increase in software volume to save your salary while agents do the actual building is peak industry denial. <a href="https://app.daily.dev/posts/1powuaBgn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apple’s bug reporting is a masterclass in gaslighting</strong>: A developer recently called out Apple for ignoring a network leak bug for three years, only to demand a ‘verification’ within two weeks or face closure. Even after Little Snitch developers confirmed the bug still exists in the latest macOS beta, Apple is sticking to its bureaucratic script. It’s a transparent attempt to artificially deflate open bug counts by exhausting the volunteers doing their QA for free. <a href="https://app.daily.dev/posts/2hIqqorcX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The 1-800-Flowers client side credential buffet</strong>: In a stunning display of ‘it worked on my machine,’ a major retailer was caught bundling PayPal, Venmo, and Auth0 private keys directly into their React SPA. This isn’t just a mistake; it’s what happens when ‘move fast and break things’ meets a total lack of understanding of how environment variables work in client-side bundles. If you’re looking for a quick way to exfiltrate an entire company’s payment infrastructure, apparently all you need is F12. <a href="https://app.daily.dev/posts/d3kA523sX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
