<p><strong>TLDR:</strong> AWS raised EC2 Capacity Block prices for Nvidia GPUs by roughly 20% starting July, the second hike in six months, driven by a high-bandwidth memory shortage. A critical authentication bypass in SimpleHelp RMM (CVE-2026-48558) is being actively exploited to steal tokens from AI coding assistants, cloud credentials, and package registry keys. Uber is reportedly dropping PagerDuty after 12+ years, a signal of broader industry migration away from the platform. Valkey 9.1 landed on Amazon ElastiCache with a redesigned I/O threading model hitting 2.1M requests/second and new multi-tenant ACLs.</p>
<hr>
<h2>CVE-2026-48558 in SimpleHelp RMM actively exploited to steal AI coding assistant tokens</h2>
<p>Attackers are exploiting a critical authentication bypass in SimpleHelp RMM to deploy Djinn Stealer, which targets an unusually broad blast radius: tokens from Claude, Gemini, Codex, Cline, and OpenCode; Git/SSH credentials; Docker and Helm configs; npm, PyPI, Cargo, and Maven registry credentials; and AWS, Azure, and GCP keys. Because AI coding tools connect to repos, databases, and cloud accounts via MCP, a single compromised machine can expose the full development supply chain. RMM abuse jumped 277% year-over-year according to Huntress’s 2026 Cyber Threat Report. If SimpleHelp is anywhere in your toolchain, patch or isolate it now. <a href="https://daily.dev/posts/akTn6O3jr" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>AWS EC2 Capacity Block prices up 20% as HBM shortage tightens GPU supply</h2>
<p>AWS raised reserved Nvidia GPU block prices by roughly 20% starting July — the second increase in six months after a 15% hike in January. The root cause is a high-bandwidth memory shortage constraining GPU production globally, giving hyperscalers pricing power since customers have few alternatives. Trainium and on-demand purchasing options are unaffected for now. AI teams running large training or fine-tuning workloads on reserved capacity should model the cost trajectory; the same memory crunch is hitting Apple hardware and Xbox, while benefiting Micron and SK Hynix. <a href="https://daily.dev/posts/JdminsUs0" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Uber drops PagerDuty after 12+ years as incident management migration accelerates</h2>
<p>Uber is reportedly ending its relationship with PagerDuty, with multiple sources citing the same pattern: PagerDuty missed the Slack shift and then the AI shift after going public, and many tech companies are now actively migrating off. This isn’t a single customer churn story — it’s a signal about where incident management tooling is heading. If you’re mid-contract with PagerDuty or evaluating alternatives, the market is clearly in motion. <a href="https://daily.dev/feed-by-ids?id=Lv2cqv3Vg&amp;id=mugO2Igkp&amp;id=wnUPgBsSw" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Valkey 9.1 on ElastiCache: 2.1M req/s, 20% memory reduction, new multi-tenant ACLs</h2>
<p>Amazon ElastiCache now supports Valkey 9.1, which ships a redesigned I/O threading model reaching 2.1M requests/second, up to 20% memory reduction for small strings, and up to 10% savings for sorted sets. New database-level ACLs enable stronger isolation for multi-tenant cluster deployments — a meaningful addition if you’re sharing clusters across teams or services. Three new commands are worth knowing: HGETDEL for atomic hash field retrieval and deletion, MSETEX for setting multiple keys with a shared TTL, and CLUSTERSCAN for unified key scanning across a cluster. Available at no additional cost in supported AWS regions. <a href="https://daily.dev/posts/pvEmzNhnh" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Securonix migrated 250+ ElastiCache clusters from Redis to Valkey in two weeks, saving $135K/year:</strong> Securonix moved 250+ clusters with zero downtime and no application code changes, achieving 20% cost reduction (~$135K annually) and 30%+ query performance improvement via Valkey’s multi-threaded architecture. <a href="https://daily.dev/posts/eN9rTuQ1K" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno 2.9 cuts cold-start time from 34ms to 17ms and adds experimental desktop app support:</strong> Deno 2.9 halves cold-start latency, reduces peak RSS by 2.2–3.1x under load, improves HTTP/1.1 throughput, and ships an experimental <code>deno desktop</code> command for building native apps as single distributable binaries. <a href="https://daily.dev/posts/NLlbqv6xP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Advisory Database published 1,560 reviewed advisories in May 2026, still falling behind 3,000+/week incoming volume:</strong> Private vulnerability reports surged from ~550/week in January to 3,000+/week in May, with GitHub CNA CVE requests hitting nearly 4,000 in May alone — review times have extended to multiple weeks for a meaningful share of submissions. <a href="https://daily.dev/posts/qIkJEIvQp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding agent recall on a large Rails codebase went from 0.09 to 1.00 with a symbol graph tool via MCP:</strong> Without a structural code graph, agents found 2 of 11 scattered dependents in Chatwoot; with Sense (a codebase index served via MCP), all five models tested found all 11, ran 21% faster, and used 18% fewer tokens. <a href="https://daily.dev/posts/XTMp02kvY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Argo CD hits OOM around 15k–20k cached objects per hub; Sveltos handled the same load at 2GB vs 21GB RAM:</strong> A 31-iteration test across 15,000+ vClusters found Argo CD’s application controller memory usage scales non-linearly with object count, not cluster count — at very large scale, Sveltos deployed 1,000 apps across 250 vClusters in 35 minutes with sharding. <a href="https://daily.dev/posts/ABAZXoDax" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


Server-side development, system design, API patterns, and distributed architecture.

Backend Digest

A curated developer news digest covering five major stories: AWS raised EC2 Capacity Block prices for Nvidia GPUs ~20% due to HBM shortages; a critical SimpleHelp RMM authentication bypass (CVE-2026-48558) is being actively exploited to steal AI coding assistant tokens and cloud credentials; Uber is reportedly dropping PagerDuty after 12+ years; Valkey 9.1 lands on Amazon ElastiCache with 2.1M req/s throughput and new multi-tenant ACLs. Notable items include Securonix saving $135K/year migrating Redis clusters to Valkey, Deno 2.9 halving cold-start times, GitHub Advisory Database falling behind on vulnerability review volume, MCP-based symbol graphs boosting AI coding agent recall to 100%, and Argo CD OOM issues at scale compared to Sveltos.

AWS GPU prices jump 20%, SimpleHelp RCE targets AI coding tokens