<h2>Must know</h2>
<ul>
<li><strong>Android tightens its grip on developers</strong>: Google is making some big moves to control the Android ecosystem more tightly. They’re introducing a new developer verification policy by September 2026, requiring registration, ID checks, and fees for all app developers, even for apps outside the Play Store. This signals a shift towards a more closed model, similar to Apple’s iOS, which could impact smaller developers and open-source distribution, according to Fatbobman’s Swift Weekly. Meanwhile, a critical Bluetooth vulnerability (CVE-2025-48539) was found, allowing zero-click attacks on Android devices, with Google confirming active exploitation in the wild. Patch immediately.</li>
<li><strong>Major supply chain attacks hit open-source projects</strong>: Several high-profile supply chain attacks have rocked the open-source world. An npm account was compromised via phishing, injecting malware into widely used packages like <code>chalk</code> and <code>debug</code>, affecting billions of weekly downloads. Separately, the GhostAction campaign exploited GitHub Actions to steal credentials from 817 repositories, and the NX build system was hacked, distributing malware via AI-generated code. These incidents, detailed by Snyk and BleepingComputer, highlight the growing risks of trusting third-party code and the need for robust security practices.</li>
<li><strong>Anthropic settles massive copyright lawsuit</strong>: Anthropic just shelled out $1.5 billion to settle a copyright lawsuit with about 500,000 authors. The core issue was using pirated books to train its Claude AI models. As part of the settlement, Anthropic has to delete all original files downloaded from the internet and any copies made from them. This is the largest copyright payout in US history and sets a major precedent for how AI companies can use copyrighted material for training, as reported by The Register.</li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Shopify doubles down on design for AI future</strong>: Shopify acquired design studio Molly and reinstated its Chief Design Officer role, signaling that design is now central to its AI strategy for commerce, aiming to create intuitive AI-powered experiences.</li>
<li><strong>Unity expands developer resources and launches marketing hub</strong>: Unity released updated free best practices resources for developers and launched Audience Hub, a privacy-first marketing platform using AI for campaign optimization, targeting mobile gaming audiences.</li>
<li><strong>Google pushes AI with Gemini and Veo updates</strong>: Google expanded Gemini’s audio upload capabilities, added five new languages to Search’s AI Mode, and updated Veo 3 video generation models with 50% price cuts and 1080p HD output.</li>
<li><strong>New AI tool builds real web apps, not just toys</strong>: Solid is an AI-powered tool that generates production-ready full-stack web applications using React, Node.js, and PostgreSQL, aiming to provide scalable and maintainable code for developers.</li>
<li><strong>Windows 11 gets AI-powered image editing in File Explorer</strong>: Windows 11 Insider Preview Build 27938 introduces AI-powered actions in File Explorer, allowing users to perform image editing tasks like background blur and object removal directly from context menus.</li>
<li><strong>FastAPI is the easiest way to build Python APIs</strong>: FastAPI is highlighted as an excellent choice for building Python APIs, offering automatic documentation, simplified data validation, and strong performance for backend development.</li>
<li><strong>SQL and SQLite limitations debated</strong>: While SQLite remains the most deployed database, an Infoworld opinion piece critiques SQL’s limitations with large datasets, JOIN operations, and modern data formats, sparking debate on its future relevance.</li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will solve all your data center problems, just add nuclear</strong>: Deep Fission, a startup, is raising $30 million via a SPAC to build compact underground nuclear reactors for data centers, claiming a 2-gigawatt supply agreement with Endeavor. Because nothing says ‘stable, long-term energy solution’ like a SPAC-funded nuclear startup with no timeline or independent validation. Meanwhile, Data4 in France is signing 12-year nuclear power contracts with EDF. Clearly, the solution to AI’s insatiable energy demands is to just throw more nuclear at it, because what could possibly go wrong?</li>
<li><strong>The CISO role is too hard, let’s just split it</strong>: CSO Online is lamenting that the CISO role is ‘unsustainable’ due to overwhelming responsibilities and a lack of ‘business acumen.’ Their brilliant solution? Split the role into a strategic CSO and a technical CISO. Because apparently, the problem isn’t that security is complex and underfunded, it’s that one person can’t possibly be both a technical expert and a business leader. Maybe just hire competent people and give them the resources they need instead of inventing new titles?</li>
<li><strong>Web3: still trying to make crypto happen</strong>: IEEE Spectrum reports that Web3 has ‘evolved’ from its decentralized vision to primarily serving the cryptocurrency ecosystem, with cryptography still central. So, it’s basically just crypto with extra steps and a new buzzword. They also mention that hardware security modules are being ‘enhanced’ to protect crypto keys, which sounds a lot like they’re still trying to fix the fundamental security issues that plague this space. Maybe just stick to regular web development, folks.</li>
</ul>
