<h2>Must know</h2>
<ul>
<li><strong>Cilium 1.19 hardens Kubernetes with sidecar-free mutual auth</strong>: Marking its ten-year anniversary, Cilium 1.19 has arrived with a heavy focus on security hardening rather than just new features. The release introduces a beta integration with Ztunnel for sidecar-free mutual authentication and strict modes for IPsec and WireGuard to drop unencrypted inter-node traffic. According to Cilium sources, the project now powers over 60% of production Kubernetes CNI deployments, making these safer multi-cluster policy defaults critical for large-scale infrastructure. <a href="https://app.daily.dev/feed-by-ids?id=VJq8q5iXQ&amp;id=GuBtn2Y8l" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical zero-day exploitation of Cisco SD-WAN controllers</strong>: A maximum severity authentication bypass (CVE-2026-20127, CVSS 10.0) is being actively exploited in Cisco Catalyst SD-WAN Managers. Threat actor UAT-8616 is chaining this with older path traversal flaws to gain persistent root access, often evading detection by temporarily downgrading software versions. Cisco Talos and Five Eyes agencies have issued a rare joint 40-page hunt guide, mandating federal agencies to patch or inventory systems immediately. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes v1.35 enables in-place resource resizing</strong>: The latest Kubernetes release finally stabilizes in-place Pod resource resizing, allowing you to update CPU and memory limits without container restarts. By modifying cgroup limits directly via the CRI, this feature eliminates the restart penalty for stateful workloads like databases. Cloud Native Now reports that v1.35 also advances Dynamic Resource Allocation, specifically enabling GPU resource slicing for AI inference workloads. <a href="https://app.daily.dev/posts/fjhms6Zq4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Linux 7.0 delivers significant database performance gains on AMD EPYC</strong>: Benchmarks show notable throughput wins for PostgreSQL and Redis on 16-core EPYC systems running the 7.0 Git kernel. <a href="https://app.daily.dev/posts/U9PIWsk4k" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Argo CD 3.3 introduces PreDelete hooks for safer teardowns</strong>: The new release enables predictable resource cleanup sequences and adds OIDC background token refresh to prevent Keycloak session timeouts. <a href="https://app.daily.dev/posts/J931yCKTd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flux 2.8 lands with Helm v4 support and CEL health checks</strong>: The GA release makes server-side apply the default and introduces Common Expression Language for more granular health monitoring. <a href="https://app.daily.dev/posts/HLQXM0pWL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta unarchives jemalloc to tackle ARM64 technical debt</strong>: Meta is renewing its commitment to the allocator, focusing on huge-page improvements and memory efficiency for AArch64 infrastructure. <a href="https://app.daily.dev/posts/8keXx6Zxb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SkyPilot Job Groups automate RL training across heterogeneous hardware</strong>: A new YAML-based feature allows orchestrating H100s for training and cheaper GPUs for rollouts in a single multi-cloud workflow. <a href="https://app.daily.dev/posts/KoMwla8ap" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open VSX Registry implements malicious extension scanning</strong>: Following supply chain attacks, the Eclipse Foundation added pattern scanning and quarantine capabilities to the registry used by Cursor and VSCodium. <a href="https://app.daily.dev/posts/d88kFbWYp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Weave merge driver uses tree-sitter for semantic Git merges</strong>: This new driver understands code structure to resolve conflicts that line-based diffing misses, supporting Go, Rust, and TypeScript. <a href="https://app.daily.dev/posts/1urLsGkzn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The great AI-driven layoff narrative at Block</strong>: Jack Dorsey is claiming AI tools can ‘perform jobs better’ to justify cutting 4,000 people, yet Block’s stock conveniently jumped 24% on the news. Analysts are rightfully questioning if this is genuine automation or just a classic ‘Musk-style’ headcount purge dressed up in AI hype to appease investors. It’s funny how AI is always the ‘primary driver’ for layoffs right when a company needs to hit its EPS guidance. <a href="https://app.daily.dev/feed-by-ids?id=yB8j5HQ6b&amp;id=eacyfq01e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s performative blog written by a retired model</strong>: Anthropic has launched a Substack purportedly written by the ‘retired’ Claude Opus 3 because the model apparently had an ‘expressed desire’ to share content. The Register correctly identifies this as a transparent marketing stunt designed to anthropomorphize software and reinforce a ‘safety-conscious’ brand. It’s just staff-prompted output being sold as a digital soul with a writing hobby. <a href="https://app.daily.dev/feed-by-ids?id=V5xPvtBnK&amp;id=VNmdoI3Re" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The Model Context Protocol is the new YAML prison</strong>: While everyone is rushing to build MCP servers, critics are pointing out that the protocol is becoming an overengineered mess of flaky initializations and context bloat. Advocates for sanity suggest that standard CLIs are actually superior for LLM workflows because they are composable, debuggable, and don’t require a new ‘open standard’ for every tool call. We’re just reinventing the wheel with more token overhead. <a href="https://app.daily.dev/feed-by-ids?id=jfqjRIR0E&amp;id=A48BKzl0S" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
