<h2>Must know</h2>
<ul>
<li><strong>Apple M5 chips arrive with a side of RAM inflation</strong>: Apple has unveiled the M5 MacBook lineup, claiming up to 4x faster AI performance for Pro models thanks to a new ‘Fusion Architecture’ that merges two dies. However, analysts note a price hike of up to $400 on some configurations, attributed to a global RAM shortage fueled by the AI infrastructure gold rush. While the hardware supports Wi-Fi 7 and Bluetooth 6, Asahi Linux developers warn that native Linux support for these new chips is likely years away. <a href="https://app.daily.dev/posts/FGAdSpUhd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>North Korean StegaBin campaign targets developer credentials</strong>: The Lazarus-linked group Famous Chollima is using a sophisticated supply chain attack dubbed ‘StegaBin’ to infect developer environments via 26 malicious npm packages. These packages use Pastebin steganography to hide command-and-control infrastructure and deploy a multi-stage infostealer targeting SSH keys, VS Code configs, and crypto wallets. Security researchers emphasize that Web3 and cryptocurrency developers are the primary targets of this evolving operation. <a href="https://app.daily.dev/posts/QDsiIqiel" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Chrome shifts to fortnightly release cycle</strong>: Starting September 2026 with version 153, Google Chrome will move from a four-week to a two-week stable release cadence to ship features and security fixes faster. This move is widely seen as a response to the rise of ‘agentic’ AI browsers like ChatGPT Atlas and Perplexity Comet that are challenging Chrome’s dominance. While enterprise users can stick to an eight-week extended cycle, Chromium-based browsers like Edge and Brave are expected to follow this accelerated pace. <a href="https://app.daily.dev/posts/SAMWZskhL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Postman adds AI-native Git-based workflows</strong>: A major platform update introduces ‘Agent Mode’ for automating debugging and test generation directly within Git repositories. <a href="https://app.daily.dev/posts/uVCb38dOT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google launches Gemini 3.1 Flash-Lite for high-volume tasks</strong>: The new model is optimized for data processing speed (363 tokens/sec) rather than agentic orchestration, priced at $0.25 per million input tokens. <a href="https://app.daily.dev/posts/z8znwLLdC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust iterator abstraction causes 60x performance hit</strong>: Turbopuffer engineers discovered that ‘zero-cost’ recursive next() calls prevented vectorization, requiring a shift to batched iterators for a 60x speedup. <a href="https://app.daily.dev/posts/U3pwVYd72" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Helm 4 adopts WebAssembly for plugin isolation</strong>: The new Wasm-based system replaces the legacy Helm 3 model, offering better portability and up to 40% lower latency for Kubernetes extensions. <a href="https://app.daily.dev/posts/W9pY3Qv5R" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Cloud API and CLI reach general availability</strong>: Developers can now programmatically manage deployments and infrastructure, enabling AI agents to provision databases or scale resources via REST. <a href="https://app.daily.dev/posts/BrFOlId9r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical SSRF vulnerabilities patched in Angular SSR</strong>: Google has released urgent patches for flaws in URL reconstruction logic that could allow attackers to steal authorization headers or session cookies. <a href="https://app.daily.dev/posts/uyb72ug6C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ataraxy-Labs releases Weave semantic Git merge driver</strong>: Using tree-sitter, Weave performs entity-level merging for languages like Rust and Go, resolving conflicts that traditional line-based diffing misses. <a href="https://app.daily.dev/posts/1urLsGkzn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The two-tier valuation shell game</strong>: AI startups like Aaru and Serval are reportedly using ‘headline’ valuations to claim unicorn status while lead VCs actually buy in at less than half that price. It’s a classic vanity metric designed to trick talent into joining and customers into buying, but it sets a lethal trap for the next funding round. If you can’t beat your fake $1B valuation in 18 months, enjoy the punitive down-round that wipes out your employees’ equity. <a href="https://app.daily.dev/posts/cRCbCFvQ5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DevOps is dead according to the people selling the coffin</strong>: Cognition Lab is claiming that human DevOps engineers are now ‘the exception’ because their Devin AI agent is supposedly embedded in thousands of teams. It’s a bold marketing pivot for a tool that still struggles with basic context degradation, but ‘DevOps is Dead’ makes for a much better clickbait headline than ‘We built a slightly better Jenkins wrapper.’ If DevOps were truly dead, we wouldn’t need 90% of the security patches mentioned in this very briefing. <a href="https://app.daily.dev/posts/LfBawqtwk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-assisted kernel drivers and hallucinated tools</strong>: AMD recently submitted a Linux kernel driver for Ryzen handhelds that was so obviously ‘AI-assisted’ it included hallucinated tool names and garbage code quality. The kernel maintainers, who actually have to read the code, were less than impressed by the ‘efficiency’ of submitting LLM slop to the most critical software project on earth. It turns out that ‘writing code 10x faster’ doesn’t help much when the result is a security liability that needs a total rewrite. <a href="https://app.daily.dev/posts/mccLSn0xk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
