<h2>Must know</h2>
<ul>
<li><strong>Google sets 2029 deadline for post quantum migration</strong>: Google has announced a 2029 deadline to migrate all internal systems and products to Post-Quantum Cryptography (PQC) to counter ‘store-now-decrypt-later’ attacks. The shift is driven by faster-than-expected progress in quantum hardware, with new estimates suggesting a 2,048-bit RSA key could be factored in under a week using one million noisy qubits. Security experts at Dark Reading emphasize that organizations must immediately inventory cryptographic usage and prioritize ‘crypto agility’ to adapt as NIST standards evolve. <a href="https://app.daily.dev/feed-by-ids?id=2Ya2QAFm3&amp;id=7VBfWeOlQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Massive supply chain attack compromises Trivy and PyPI</strong>: A sophisticated threat actor group, TeamPCP, exploited a GitHub Actions misconfiguration to compromise the Aqua Security Trivy scanner, exfiltrating 300 GB of cloud credentials and SSH keys. Simultaneously, the official Telnyx Python SDK on PyPI was found to contain malware using audio steganography for fileless, in-memory execution of credential harvesters. Socket Research Team recommends rotating all secrets and pinning GitHub Actions to specific commit SHAs rather than tags to mitigate these escalating CI/CD pipeline risks. <a href="https://app.daily.dev/feed-by-ids?id=1N56isWio&amp;id=EeEZo06er&amp;id=fyhf7Sv5C&amp;id=w52uMMkqR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 LTS beta arrives with Linux 7.0</strong>: The ‘Resolute Raccoon’ beta has been released, featuring the Linux 7.0 kernel and GNOME 50, with a controversial plan to fully remove X11 from the main flavor. Under the hood, the release includes GCC 15.2, Python 3.14, and Docker Engine 29 using Containerd as the default image store. While the beta introduces a new ‘Resources’ app and stable variable refresh rates, a separate proposal for the 26.10 cycle to strip Btrfs, ZFS, and LUKS support from signed GRUB builds is facing heavy community pushback. <a href="https://app.daily.dev/feed-by-ids?id=ZDMMAi90w&amp;id=XPJSKIrCG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Turbolite serves SQLite queries from S3 with sub 250ms latency</strong>: This Rust-based VFS uses B-tree-aware page grouping and zstd multi-frame compression to enable efficient multi-tenant architectures without per-database volumes. <a href="https://app.daily.dev/posts/9ZseH6udT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TypeScript 6.0 adds ES2025 support as final JS based release</strong>: This version serves as a bridge to TypeScript 7.0, which will feature a Go-based compiler (Project Corsa) promising 10x faster type-checking. <a href="https://app.daily.dev/feed-by-ids?id=fwC1fC7w1&amp;id=2TBDrCEMI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Edera ocirender pulls container images 31 percent faster than Docker</strong>: The Rust library processes OCI layers in reverse order using an in-memory overlay merge engine to eliminate intermediate disk extraction. <a href="https://app.daily.dev/posts/9nORTX9om" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WinApp CLI unifies Windows development across Rust and C++</strong>: Microsoft’s new tool automates environment setup and allows attaching package identity to executables without full MSIX packaging. <a href="https://app.daily.dev/posts/Y5SIfePPI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Betterleaks replaces Gitleaks with Go based BPE token scanning</strong>: The new secrets scanner avoids CGO dependencies and uses Common Expression Language for flexible validation in agentic workflows. <a href="https://app.daily.dev/posts/CnjLBDMza" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js HTTP parser deep dive explores llhttp state machine</strong>: Core maintainers discussed the migration from C to TypeScript-generated C code and the performance costs of the C++/JS boundary. <a href="https://app.daily.dev/posts/ea169A6aB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Authenticator deep link vulnerability allowed account takeover</strong>: A flaw in the ms-msa protocol registration allowed malicious apps to intercept tokens during QR setup; a patch is now available. <a href="https://app.daily.dev/posts/80heTirQH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The AI industry is a house of cards built on letters of intent</strong>: Ed Zitron argues that the sector is systematically misleading investors with ‘fictional deals’ and vaporware, noting that OpenAI’s Sora was hyped as a Hollywood disruptor before being quietly sidelined. Despite hundreds of gigawatts of announced data centers, only 3GW of actual IT load came online in 2025, suggesting the ‘economic value’ is mostly marketing copy repeated by uncritical journalists. <a href="https://app.daily.dev/posts/xuU3Q5U61" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Taste is just pattern recognition with a better PR agent</strong>: The industry claim that ‘taste’ is the ultimate differentiator in the AI era is a misleading attempt to frame a learnable skill as an innate gift. As argued on HackerNoon, ‘taste’ is simply the result of doing enough reps to build intuition, and telling juniors otherwise just creates a fake barrier to entry for those who haven’t shipped enough bugs yet. <a href="https://app.daily.dev/posts/1kdbR9MM2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Absa Group writes off 2.4 billion Rand because cloud is hard</strong>: The bank is framing a massive software write-off as a ‘strategic reprioritization’ due to ‘accelerating technology cycles.’ In reality, it’s a textbook case of legacy mainframe architecture meeting the high cost of cloud migration, proving that calling it ‘digital transformation’ doesn’t make the technical debt any cheaper. <a href="https://app.daily.dev/posts/1TufRk9Tv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
