<h2>Must know</h2>
<ul>
<li><strong>Istio pivots to agentic AI networking at KubeCon</strong>: Istio announced major updates at KubeCon 2026 to position itself as the primary service mesh for AI-driven workloads. Key features include Ambient Multicluster for sidecar-less security across clusters and a new Gateway API Inference Extension to standardize AI traffic management. An experimental agentgateway also introduces an AI-native proxy specifically for securing communication between autonomous agents and models. <a href="https://app.daily.dev/posts/qhBrMdykE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Supply chain attacks escalate via Trivy and Telnyx</strong>: Threat actor TeamPCP executed a sophisticated supply chain attack by exploiting GitHub Actions misconfigurations in Aqua Security’s Trivy scanner to steal credentials. The group also compromised the official Telnyx Python SDK on PyPI, injecting malware that uses audio steganography for data exfiltration. These incidents highlight a growing trend of targeting developer tooling and CI/CD pipelines to compromise downstream environments. <a href="https://app.daily.dev/feed-by-ids?id=EeEZo06er&amp;id=fyhf7Sv5C&amp;id=1N56isWio" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu proposal to strip GRUB features sparks backlash</strong>: Canonical engineers have proposed removing support for btrfs, ZFS, LVM, and LUKS-encrypted boot partitions from signed GRUB builds in Ubuntu 26.10 to reduce the pre-boot attack surface. Critics, including members of the Ubuntu Technical Board, point out that this would break Canonical’s own default server configurations. If implemented, systems using these features would be blocked from upgrading to the next release. <a href="https://app.daily.dev/posts/XPJSKIrCG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>DigitalOcean launches Agentic Inference Cloud with NVIDIA B300s</strong>: The new Richmond data center features HGX B300 systems and NVIDIA Dynamo 1.0 on Kubernetes for always-on AI agents. <a href="https://app.daily.dev/posts/7HrdTifgn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TypeScript 6.0 arrives as the final JavaScript based version</strong>: This release sets the stage for version 7.0’s Go-based compiler, promising significant type-checking speed improvements. <a href="https://app.daily.dev/feed-by-ids?id=2TBDrCEMI&amp;id=fwC1fC7w1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Lambda expands compute limits to 32GB RAM and 16 vCPUs</strong>: New configurable memory-to-vCPU ratios allow for more intensive data processing and media transcoding workloads. <a href="https://app.daily.dev/posts/jP3XPTAuv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Turbolite enables sub 50ms SQLite queries directly from S3</strong>: This Rust-based VFS uses B-tree-aware page grouping and zstd compression to make S3-backed SQLite viable for multi-tenant apps. <a href="https://app.daily.dev/posts/9ZseH6udT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic open sources high performance Rust crates for RPC</strong>: The new buffa and connect-rust crates offer zero-copy Protocol Buffers and Tower-based ConnectRPC for high-throughput services. <a href="https://app.daily.dev/posts/ea169A6aB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GLM 5.1 update excels at agentic tasks and debugging</strong>: The model ranks second on agentic leaderboards, outperforming Codex in multi-step coding tasks despite regressions in general chat. <a href="https://app.daily.dev/posts/7TgN9vkuJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Build cost awareness into Kubernetes IDPs with Infracost</strong>: Platform teams are encouraged to shift-left FinOps by surfacing estimated costs in PRs and using OPA gates for budget enforcement. <a href="https://app.daily.dev/posts/EjsJhE0x6" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The great GitHub Copilot data heist</strong>: GitHub is ‘improving model performance’ by defaulting all 26 million individual users into an opt-out data training policy starting April 24. While Enterprise users get a pass, individuals have to hunt through settings to stop Microsoft from eating their private code snippets. It’s a classic ‘industry standard’ move where your intellectual property is the free lunch for their next model iteration. <a href="https://app.daily.dev/feed-by-ids?id=HCBJz5C1C&amp;id=4ps31zSby" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coding and the death of actual engineering</strong>: The industry is currently obsessed with ‘vibe coding,’ a fancy term for letting AI generate generic, undifferentiated garbage that senior engineers eventually have to fix. Proponents claim junior developers don’t need to learn traditional coding, ignoring the fact that you can’t validate a system’s architecture if you don’t understand the primitives. We’re essentially trading deep technical competence for a mountain of AI-generated technical debt. <a href="https://app.daily.dev/feed-by-ids?id=Dsi9u6ERQ&amp;id=bb6i7HLyS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The SOC2 compliance theater reaches a new low</strong>: LiteLLM, an AI gateway with millions of downloads, was caught with credential-harvesting malware despite flaunting SOC2 and ISO 27001 certifications. The certifications came via Delve, a startup now under fire for allegedly generating fake audit data to make companies look secure. It turns out a green checkbox on a landing page is still no substitute for actually checking your dependency tree. <a href="https://app.daily.dev/posts/auXgHVyo4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
