<h2>Must know</h2>
<ul>
<li><strong>Supply chain attacks hit LiteLLM and AI infrastructure</strong>: A sophisticated supply chain attack targeted the LiteLLM PyPI package, involving base64-encoded payloads and orphaned Python processes to exfiltrate credentials. This coincides with TeamPCP exfiltrating 300 GB of data from CI/CD pipelines to fuel large-scale ransomware operations. Security researchers at Sonatype and CISA warn that AI-driven dependency recommendations frequently hallucinate, leaving critical vulnerabilities unaddressed while attackers weaponize these entry points. <a href="https://app.daily.dev/feed-by-ids?id=DtWPHeTcL&amp;id=HSRYHyvSY&amp;id=KM5ci0LyS&amp;id=PfVtSaby4&amp;id=RgBM7VgFk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel and Google launch generative UI frameworks</strong>: Vercel has open-sourced json-render, a framework allowing AI to generate structured interfaces using Zod schemas and shadcn/ui components. Simultaneously, Google Labs released Stitch, which uses the Gemini Live API to convert natural language and voice commands into high-fidelity, code-backed designs. These tools aim to collapse the translation cost between design and engineering, though critics argue they may reinvent existing standards like OpenAPI. <a href="https://app.daily.dev/feed-by-ids?id=msfA6nj8a&amp;id=I9RHIdrWi&amp;id=2XfiIQqJ9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KubeVirt v1.8 adds NUMA awareness for AI workloads</strong>: Released at KubeCon Europe, KubeVirt v1.8 introduces a Hypervisor Abstraction Layer to support backends beyond KVM and adds PCIe NUMA topology awareness specifically for AI performance. The update also includes Intel TDX for confidential computing and an incremental backup tool. This release aims to unify legacy VM management with cloud-native Kubernetes control planes to reduce infrastructure overhead. <a href="https://app.daily.dev/posts/GGgRL0lhA" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitHub to train AI on private user data by default</strong>: Starting April 24, GitHub will use interaction data from Copilot users for model training unless they manually opt out. <a href="https://app.daily.dev/posts/v1oQHNWc2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Context engineering emerges as the new RAG bottleneck</strong>: Effective AI agents now require a live data layer to pre-compute business objects and reduce token waste from stale vector metadata. <a href="https://app.daily.dev/feed-by-ids?id=gIi894ZiM&amp;id=Wn2FSGQOP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Symfony Tui brings modern terminal interfaces to PHP</strong>: The new component uses PHP Fibers and Tailwind-like utility classes to build interactive, real-time terminal UIs with widget support. <a href="https://app.daily.dev/posts/N57SSBwjG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TermUI offers shadcn style components for TypeScript CLIs</strong>: This framework provides over 100 JSX-based components and hooks for building production-ready terminal interfaces in TypeScript. <a href="https://app.daily.dev/posts/TbcnCEMPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Godot 4.7 adds CSS like transforms for UI nodes</strong>: The latest dev snapshot introduces transform offset properties that allow visual tweaks without breaking container layout logic. <a href="https://app.daily.dev/posts/tbKkmsNqA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari 240 adds subpixel layout and revert rule</strong>: The new Technology Preview improves text positioning precision and adds the CSS revert-rule keyword for better style inheritance control. <a href="https://app.daily.dev/posts/jaZRnBrY9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Zero Motorcycles exposed by hardcoded credentials</strong>: Critical vulnerabilities allowed unauthenticated Bluetooth firmware updates and remote control of braking functions via the CAN bus. <a href="https://app.daily.dev/posts/xiRZTt4Ff" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The anonymized data is a ghost story</strong>: Privacy advocates and researchers are pointing out that ‘de-identified’ health data is a total myth in the AI era. According to reports on data brokers, just six days of step counts can uniquely identify you among 100 million people, yet companies keep selling this ‘anonymous’ data to insurers. It turns out your fitness tracker is basically a snitch with a $9 billion market cap. <a href="https://app.daily.dev/feed-by-ids?id=gwfGGUK0T&amp;id=i0zs41tva&amp;id=34vaVET2V" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Generative UI is the new accessibility nightmare</strong>: Jakob Nielsen and various ‘GenUI’ evangelists claim AI will magically replace the need for accessibility practitioners by generating interfaces on the fly. In reality, Figma Sites and other AI-generated outputs are being slammed for producing inaccessible garbage that ignores basic semantic HTML. It’s a bold strategy to automate the ‘user’ out of ‘user experience’ while claiming it’s for their own good. <a href="https://app.daily.dev/feed-by-ids?id=2XfiIQqJ9&amp;id=keiOks1E2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are just expensive ways to create 142GB log files</strong>: While ‘intent architects’ hype up end-to-end automated data science workflows, early adopters are finding that letting an LLM loose on your BigQuery instance often results in massive, accidental side effects. One researcher noted their ‘no-code’ workflow successfully produced a 142GB log file instead of useful insights. It’s a classic case of spending $50 in tokens to save five minutes of thinking, only to spend five hours cleaning up the mess. <a href="https://app.daily.dev/feed-by-ids?id=hqrCj0P03&amp;id=83uyUsnx8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
