<h2>Must know</h2>
<ul>
<li><strong>North Korean StegaBin campaign targets developer environments</strong>: The North Korean threat actor Famous Chollima, linked to the Lazarus Group, has published 26 malicious npm packages that typosquat popular libraries. According to security researchers, the ‘StegaBin’ campaign uses Pastebin steganography to hide command-and-control infrastructure and deploys a nine-module infostealer. The toolkit specifically targets SSH keys, git credentials, and VSCode configurations across Linux, Windows, and macOS, with a heavy focus on Web3 developers. <a href="https://app.daily.dev/posts/QDsiIqiel" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Unity Asset Store to delist all Greater China publishers</strong>: Starting March 31, 2026, Unity will remove thousands of assets from publishers based in Greater China from its global store. This schism is largely attributed to the divergence of ‘Unity China,’ a forked engine that has moved away from the main codebase since the 2022 LTS release. Impacted users will lose access to updates and support, though a community-built GitHub script has already surfaced to help developers identify and refund affected purchases. <a href="https://app.daily.dev/posts/HcJsvKbOc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Chrome shifts to aggressive fortnightly release cycle</strong>: Beginning September 8, 2026, Google Chrome will move from a four-week to a two-week release schedule for desktop and mobile versions. This accelerated cadence is widely seen as a response to the rise of ‘agentic’ AI browsers like ChatGPT Atlas and Perplexity Comet that are challenging Chrome’s dominance. While enterprise users can stick to an eight-week cycle, Google is pushing the fortnightly stable channel as the primary choice for security-sensitive environments. <a href="https://app.daily.dev/posts/SAMWZskhL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Ubuntu Authd OIDC broker enables generic identity provider integration</strong>: Canonical’s new broker allows Ubuntu to authenticate against any OIDC-compliant provider, including self-hosted Keycloak instances. <a href="https://app.daily.dev/posts/XfBKmtHHp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open VSX Registry adds security scanning and hybrid architecture</strong>: The Eclipse Foundation is implementing malicious pattern scanning and multi-region data residency to bolster the open-source VS Code extension alternative. <a href="https://app.daily.dev/posts/d88kFbWYp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Helm 4 adopts WebAssembly for plugin isolation and portability</strong>: The new Wasm-based system replaces the legacy Helm 3 model, offering sandboxed execution and a 40% reduction in latency. <a href="https://app.daily.dev/posts/W9pY3Qv5R" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust iterator abstraction causes 60x performance hit in Turbopuffer</strong>: A deep dive revealed that recursive next() calls prevented compiler vectorization, requiring a shift to batched iterators for optimal SIMD usage. <a href="https://app.daily.dev/posts/U3pwVYd72" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ataraxy Labs releases Weave for semantic Git merging</strong>: Using tree-sitter, Weave parses code into entities like classes and functions to resolve conflicts that traditional line-based diffing misses. <a href="https://app.daily.dev/posts/1urLsGkzn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apple M5 chips focus on AI performance amidst RAM shortages</strong>: The new MacBook lineup features a ‘Fusion Architecture’ and up to 4x faster AI task performance, though prices have increased by up to $400. <a href="https://app.daily.dev/posts/FGAdSpUhd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google patches critical SSRF and header injection in Angular</strong>: The vulnerabilities in Angular’s Server-Side Rendering logic could allow attackers to steal authorization headers or access internal services. <a href="https://app.daily.dev/posts/uyb72ug6C" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The two tier valuation shell game for AI unicorns</strong>: Startups like Aaru and Serval are using ‘headline’ valuations of $1B to lure talent while lead VCs actually buy in at less than half that price. It’s a desperate attempt to maintain the illusion of unicorn status in a tightening market, creating a massive ‘down round’ time bomb for the next funding cycle. If you’re joining for the equity, make sure you’re looking at the blended price, not the press release. <a href="https://app.daily.dev/posts/cRCbCFvQ5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cognition Lab claims the death of the human DevOps engineer</strong>: With the release of a new version of Devin, Cognition Lab is boldly claiming that human DevOps engineers are now ‘the exception rather than the default.’ It’s a classic case of a founder high on their own supply, ignoring the fact that their agent is still mostly tuned for junior-level benchmarks. Expecting an AI to handle complex, messy infrastructure reality without a human to clean up the mess is peak Silicon Valley hubris. <a href="https://app.daily.dev/posts/LfBawqtwk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The AI information war and performative safety</strong>: Anthropic is being called out for its ‘safety’ stance, which apparently includes refusing Pentagon requests for ethical reasons while simultaneously supporting other military uses. Meanwhile, OpenAI’s reported $8bn loss suggests their financial projections are more creative writing than accounting. It’s a coordinated effort to keep the hype train moving with selective leaks and inconsistent metrics while the actual tech struggles with basic reliability. <a href="https://app.daily.dev/feed-by-ids?id=egxeYRWKg&amp;id=CiUt1uJYH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
