<h2>Must know</h2>
<ul>
<li><strong>Istio pivots to AI traffic management at KubeCon</strong>: Istio announced major updates at KubeCon 2026 to position itself as the service mesh for agentic workloads, including a new Gateway API Inference Extension for standardizing AI traffic. The release introduces an experimental ‘agentgateway’ to secure communication between AI tools and models, responding to CNCF data showing 66% of organizations now run generative AI on Kubernetes. Additionally, Ambient Multicluster has entered beta, extending sidecar-less security across multiple clusters to simplify complex infrastructure. <a href="https://app.daily.dev/posts/qhBrMdykE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu proposal to strip GRUB features sparks backlash</strong>: Canonical engineers are proposing a significant reduction of features in Ubuntu 26.10’s signed GRUB builds, targeting support for LVM, LUKS-encrypted boot partitions, and ZFS to reduce the pre-boot attack surface. The move has faced stiff opposition from the Ubuntu Technical Board and community members who point out that Canonical’s own default server installer relies on LVM and LUKS. If implemented, systems using these complex configurations would be blocked from upgrading to the next release. <a href="https://app.daily.dev/posts/XPJSKIrCG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Supply chain attacks hit Trivy and Telnyx SDK</strong>: Threat actor TeamPCP executed a sophisticated supply chain attack by exploiting GitHub Actions misconfigurations in Aqua Security’s Trivy scanner to spread the CanisterWorm malware across npm packages. The group also compromised the official Telnyx Python SDK on PyPI, injecting credential-stealing code that used audio steganography for its second-stage payload. These incidents highlight a critical escalation in targeting developer tooling and CI/CD pipelines to exfiltrate environment secrets. <a href="https://app.daily.dev/feed-by-ids?id=EeEZo06er&amp;id=fyhf7Sv5C&amp;id=1N56isWio" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>TypeScript 6.0 arrives as the final JavaScript based compiler</strong>: This release sets the stage for version 7.0’s Go-based ‘Project Corsa’ engine, which promises 10x faster type-checking for massive codebases. <a href="https://app.daily.dev/feed-by-ids?id=2TBDrCEMI&amp;id=fwC1fC7w1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open sources comprehensive Rust training curriculum</strong>: The curriculum covers seven books ranging from C++/C# bridge courses to expert-level type-driven correctness and async patterns with Tokio. <a href="https://app.daily.dev/posts/xssoc0xIN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda builds Rust based S3 proxy using Pingora</strong>: The ‘Storefront’ proxy replaces DNS round-robin with latency-aware routing and provides credential-less authentication for Kubernetes pods. <a href="https://app.daily.dev/posts/9RMWTF69t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Edera releases ocirender for faster hardened container runtimes</strong>: The Rust library processes OCI layers in reverse order to pull images 31% faster than Docker while running in isolated ‘zones’. <a href="https://app.daily.dev/posts/9nORTX9om" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Turbolite enables sub 50ms SQLite queries from S3</strong>: This experimental Rust VFS uses B-tree-aware page grouping and zstd multi-frame compression to serve SQLite directly from object storage. <a href="https://app.daily.dev/posts/9ZseH6udT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kotlin 2.3.20 integrates Rust based SWC for JS transpilation</strong>: The update also introduces experimental C and Objective-C interoperability for Kotlin Multiplatform development. <a href="https://app.daily.dev/posts/2kRwcIErj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Lambda increases limits to 32GB RAM and 16 vCPUs</strong>: Managed Instances now support configurable memory-to-vCPU ratios for compute-heavy data processing and media transcoding. <a href="https://app.daily.dev/posts/jP3XPTAuv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The DPO lobotomy makes LLMs confidently wrong</strong>: Recent research shows that RLHF alignment, specifically Direct Preference Optimization (DPO), is effectively lobotomizing models by stripping their ability to express uncertainty. In 40–79% of factual queries, aligned models like Qwen3 produce identical answers across multiple samples, making standard uncertainty detection methods completely useless. We’ve traded model honesty for a ‘polite’ interface that lies with 100% confidence. <a href="https://app.daily.dev/posts/pYcDuK02J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coding is just technical debt with a trendy name</strong>: The industry is currently enamored with ‘vibe coding,’ a term for using AI to vomit out undifferentiated landing pages and prototypes without understanding the underlying logic. Critics correctly point out that this ‘reduced effort barrier’ is just a factory for generic, unmaintainable garbage that senior engineers will eventually have to rewrite. It turns out that ‘vibing’ your way through a codebase is a great way to ensure your product has the structural integrity of a wet paper towel. <a href="https://app.daily.dev/posts/Dsi9u6ERQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Forward Deployed Engineer is the new term for Sales Support</strong>: Companies are desperately rebranding Sales Engineering roles as ‘Forward Deployed Engineer’ (FDE) to trick actual developers into applying. Job postings for FDEs have surged 10-fold, but engineers quickly realize they aren’t building platforms; they’re just babysitting customer deployments and closing deals. It’s a classic bait-and-switch where ‘engineering’ really means ‘fixing the client’s YAML files until the check clears.’ <a href="https://app.daily.dev/posts/zBUtELGwV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
