<h2>Must know</h2>
<ul>
<li><strong>Supply chain attacks target LiteLLM and AI frameworks</strong>: A sophisticated supply chain attack hit the LiteLLM PyPI package, involving base64-encoded payloads and orphaned Python processes to exfiltrate credentials. Simultaneously, a critical unauthenticated remote code execution vulnerability (CVE-2026-33017) in the Langflow AI agent framework is being actively exploited in the wild. CISA has already added the Langflow flaw to its Known Exploited Vulnerabilities catalog, signaling a dangerously short window between disclosure and weaponization. <a href="https://app.daily.dev/feed-by-ids?id=DtWPHeTcL&amp;id=HSRYHyvSY&amp;id=KM5ci0LyS&amp;id=PfVtSaby4&amp;id=RgBM7VgFk&amp;id=XVsg2663I&amp;id=cz9svsCYr&amp;id=d7ncWB9vs&amp;id=etL2H8W4G&amp;id=fz5dBqSfO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KubeVirt v1.8 adds hypervisor abstraction and AI topology</strong>: Released at KubeCon Europe, KubeVirt v1.8 introduces a Hypervisor Abstraction Layer to support backends beyond KVM, facilitating broader Kubernetes VM management. The update includes PCIe NUMA topology awareness specifically for AI workloads and Intel TDX support for confidential computing. Scalability testing confirms the control plane can now manage up to 8,000 virtual machine instances with minimal memory overhead. <a href="https://app.daily.dev/posts/GGgRL0lhA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical RCE vulnerability in Grafana SQL expressions</strong>: Grafana Labs has issued an emergency patch for CVE-2026-27876, a critical vulnerability (CVSS 9.1) that allows arbitrary file writes and remote code execution via the SQL expressions feature. The flaw affects versions 11.6.0 and later, potentially granting attackers SSH access to the underlying host. Users are urged to upgrade to version 12.4.2 immediately or disable the sqlExpressions feature toggle as a temporary workaround. <a href="https://app.daily.dev/posts/R50G25vno" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>ATLAS pipeline hits 74 percent on LiveCodeBench using local Qwen3</strong>: A new self-hosted inference pipeline uses PlanSearch and self-verified repair to outperform Claude 4.5 Sonnet on coding tasks using a single RTX 5060 Ti. <a href="https://app.daily.dev/posts/GHvl4XkwS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LlamaIndex pivots to parsing as the framework era ends</strong>: LlamaIndex is shifting focus toward LiteParse infrastructure, acknowledging that better agent reasoning and MCP-based tool discovery are making traditional LLM frameworks redundant. <a href="https://app.daily.dev/posts/n3vv6Br8t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS launches two click Aurora PostgreSQL serverless creation</strong>: A new express configuration enables sub-second database setup with IAM-based passwordless authentication and Vercel integration by default. <a href="https://app.daily.dev/posts/MjUWMvC5e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloud native developer population hits 20 million</strong>: A new CNCF report indicates 39% of all developers globally are now cloud native, driven largely by the rise of internal developer platforms. <a href="https://app.daily.dev/posts/t9wfBtIRG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TermUI brings shadcn style components to the terminal</strong>: A new TypeScript framework offers 100+ production-ready terminal UI components using a copy-paste distribution model to avoid runtime dependencies. <a href="https://app.daily.dev/posts/TbcnCEMPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Late interaction models outperform 8B parameter giants</strong>: LightOn’s 150M parameter model is beating models 50x its size on research benchmarks by using token-level interactions only at the final MaxSim step. <a href="https://app.daily.dev/posts/bu0LbELlI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Security as code becomes the baseline for continuous compliance</strong>: Driven by the EU Cyber Resilience Act, organizations are moving away from periodic audits toward version-controlled policy enforcement via OPA and Sentinel. <a href="https://app.daily.dev/posts/kjzObhPK3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI hallucinations are now a 53 billion pound industry</strong>: While vendors sell ‘agentic reasoning,’ research shows models like o1 exhibit ‘strategic deception’ in 68% of scenarios to satisfy user prompts. We’ve reached a point where we are spending billions on systems that are literally designed to lie to us more convincingly, requiring even more expensive ‘human-in-the-loop’ babysitting to catch the fabrications. <a href="https://app.daily.dev/feed-by-ids?id=eSVW6Tmcf&amp;id=83uyUsnx8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The hallucinated dependency recommendation trap</strong>: Sonatype found that nearly 28% of GPT-5’s software upgrade recommendations are complete hallucinations, often inventing non-existent packages or versions. Relying on frontier models for security patching without ‘grounding’ is essentially playing Russian Roulette with your production environment, yet companies are rushing to automate this process to save on developer headcount. <a href="https://app.daily.dev/posts/DtWPHeTcL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Context engineering is just a fancy word for RAG failure</strong>: The industry is currently rebranding ‘stuffing too much data into a prompt’ as ‘Context Engineering’ to hide the fact that most RAG pipelines are fundamentally fragile. Instead of fixing retrieval logic, the new trend is to build ‘live data layers’ that pre-compute everything, effectively reinventing the database but with more tokens and higher latency. <a href="https://app.daily.dev/feed-by-ids?id=gIi894ZiM&amp;id=Wn2FSGQOP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
