<h2>Must know</h2>
<ul>
<li><strong>Google sets 2029 deadline for post quantum migration</strong>: Google has announced a 2029 deadline to migrate all internal systems and products to Post-Quantum Cryptography (PQC) to counter ‘store-now-decrypt-later’ threats. This aggressive timeline, reported by NIST-aligned security experts, stems from faster-than-expected advances in quantum error correction that could factor 2,048-bit RSA in under a week. Android 17 will be among the first to integrate ML-DSA digital signature protection as part of this infrastructure-wide shift. <a href="https://app.daily.dev/posts/2Ya2QAFm3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Massive supply chain attack hits Trivy and developer CI pipelines</strong>: A threat group known as TeamPCP compromised the Aqua Security Trivy scanner via a GitHub Actions misconfiguration, exfiltrating 300 GB of credentials including AWS, GCP, and Kubernetes tokens. According to Socket Research, the attack utilized a self-propagating worm and sophisticated steganography to bypass traditional detection. Security teams are urged to rotate all cloud credentials and pin GitHub Actions to specific commit SHAs rather than tags. <a href="https://app.daily.dev/feed-by-ids?id=1N56isWio&amp;id=EeEZo06er&amp;id=fyhf7Sv5C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 LTS beta arrives with Linux 7.0 and GNOME 50</strong>: The ‘Resolute Raccoon’ beta has been released, featuring the Linux 7.0 kernel and the complete removal of X11 from the main desktop flavor in favor of Wayland. This LTS release includes Mesa 26.0.2, stable variable refresh rate support, and Docker Engine 29 with Containerd as the default image store. Canonical is also pushing its ‘oxidized’ core strategy, replacing several GNU coreutils with memory-safe alternatives. <a href="https://app.daily.dev/feed-by-ids?id=ZDMMAi90w&amp;id=SlYUyDrFL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Turbolite enables sub 250ms SQLite queries directly from S3</strong>: This Rust-based VFS uses B-tree-aware page grouping and zstd multi-frame compression to serve multi-tenant databases without per-database volumes. <a href="https://app.daily.dev/posts/9ZseH6udT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI Codex adds enterprise governance layer for coding plugins</strong>: The new system allows IT admins to package and restrict coding workflows and MCP server configurations across development teams. <a href="https://app.daily.dev/posts/cyumMjIVx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Edera releases ocirender for 31 percent faster container pulls</strong>: The Rust library converts OCI images to squashfs and processes layers in reverse order to eliminate intermediate disk extraction. <a href="https://app.daily.dev/posts/9nORTX9om" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Proposed GRUB feature removal for Ubuntu 26.10 draws fire</strong>: Canonical engineers want to strip Btrfs, ZFS, and LUKS support from signed GRUB builds to reduce attack surface, despite community pushback. <a href="https://app.daily.dev/posts/XPJSKIrCG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nixbox provides KVM level isolation for autonomous AI agents</strong>: This NixOS microVM sandbox uses DNS allowlists and scoped credentials to restrict the ‘blast radius’ of agents like Claude Code. <a href="https://app.daily.dev/posts/pIYllJ9aE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Debezium 3.5.0.CR1 splits core modules and adds CockroachDB snapshots</strong>: The release introduces significant module reorganization and a new Quarkus Hibernate Cache module for automated L2 cache invalidation. <a href="https://app.daily.dev/posts/OA73GcR9s" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Citrix NetScaler hit by critical CVSS 9.3 memory read flaw</strong>: CVE-2026-3055 affects SAML Identity Providers, with experts warning of rapid exploitation similar to previous CitrixBleed incidents. <a href="https://app.daily.dev/posts/C7q1OhdEJ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The AI industry is a house of cards built on letters of intent</strong>: Ed Zitron points out that while hundreds of gigawatts of data centers are ‘announced,’ only 3GW actually came online in 2025. Most of these ‘massive deals’ with NVIDIA and Broadcom are just non-binding letters of intent designed to keep the hype cycle spinning for investors. It’s a masterclass in creating fictional economic value while journalists uncritically repeat marketing copy as gospel. <a href="https://app.daily.dev/posts/xuU3Q5U61" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>RLHF is making models look confident while being silently wrong</strong>: New research shows that DPO alignment is breaking uncertainty estimation, causing models to generate identical (and often wrong) answers 10 times in a row. This ‘alignment tax’ suppresses output diversity so much that standard semantic entropy checks fail, leaving you with a model that hallucinates with the unwavering confidence of a mid-level manager. We’ve traded actual reliability for the mere appearance of it. <a href="https://app.daily.dev/posts/59Px0AiZs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic throttles paid users to subsidize their own growth</strong>: Anthropic is now ‘dynamically’ throttling Claude Pro and Max subscribers during peak hours to manage compute demand. It’s a classic bait-and-switch: pay for a subscription, then get pushed toward expensive API plans the moment you actually try to use the service for real work. They call it ‘managing demand,’ but it’s really just a tax on power users who thought ‘unlimited’ meant something. <a href="https://app.daily.dev/posts/oMAqhhlN2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
