<h2>Must know</h2>
<ul>
<li><strong>Anthropic accidentally leaks Claude Code source on npm</strong>: Anthropic published over 512,000 lines of Claude Code’s full source code to npm via a misconfigured debug artifact in version 2.1.88. Researchers extracted the code within 45 minutes, revealing unreleased features like a daemon mode called ‘Kairos’ and an ‘Undercover Mode’ that strips AI attribution. While the package was deleted, mirrors are already circulating on GitHub, posing a significant security risk for trojanized versions. <a href="https://app.daily.dev/feed-by-ids?id=OE4bYeiKg&amp;id=Z1lgOOmq0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fortinet issues emergency patch for critical 0-day</strong>: Fortinet has released an urgent fix for CVE-2026-35616, a critical improper access control flaw in FortiClient EMS with a CVSS score of 9.1. CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog following reports of opportunistic mass exploitation in the wild. Federal agencies have been given a strict Thursday deadline to patch the roughly 100 internet-exposed instances currently at risk. <a href="https://app.daily.dev/posts/eKG1HCM39" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Claude Code performance tanks following February update</strong>: Power users report a sharp 67-75% drop in Claude Code’s thinking depth following the rollout of Anthropic’s ‘thinking content redaction’ update. Data-driven analysis shows a collapse in convention adherence and a 12x increase in user interrupts, suggesting the model is thrashing on complex engineering tasks. This degradation paradoxically increases API costs as the model requires more retries and corrections to achieve useful output. <a href="https://app.daily.dev/posts/9difs6MOq" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Microsoft integrates Sysmon directly into Windows 11</strong>: The March 2026 update makes Sysmon an optional feature across all editions, enabling detailed system event logging without manual installation. <a href="https://app.daily.dev/posts/41V28SBNX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dragonfly adds P2P distribution for Hugging Face models</strong>: The CNCF project now supports native P2P downloading for AI models, reportedly reducing origin traffic by 99.5% for large-scale GPU cluster deployments. <a href="https://app.daily.dev/posts/8ZoQ9LlXc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel proposal targets malicious USB detection</strong>: A new driver, hid-omg-detect, uses keystroke timing entropy and fingerprinting to passively identify devices like <a href="http://O.MG" target="_blank" rel="noopener nofollow">O.MG</a> cables and BadUSB. <a href="https://app.daily.dev/posts/UQtxc2ghg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Smithy-Java reaches general availability</strong>: The framework uses Java 21 virtual threads and binary decision diagrams to generate high-performance, type-safe clients from Smithy models. <a href="https://app.daily.dev/posts/08k8pNrZM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ETH Zurich researchers simplify Transformer architecture</strong>: New research shows residual connections and certain projection matrices can be removed without degrading training efficiency for language models. <a href="https://app.daily.dev/posts/EMCYPpJXu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel AI Gateway adds zero data retention controls</strong>: Developers can now enforce global no-prompt-training and data retention policies across providers like Anthropic, OpenAI, and Google. <a href="https://app.daily.dev/posts/3C6GdoYpU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The 13kB rule for TCP slow start</strong>: A deep dive into TCP fundamentals confirms that the first 13kB of data is what arrives in the initial round trip, setting a strict budget for critical CSS. <a href="https://app.daily.dev/posts/cugkb3C8r" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Microsoft Copilot is for entertainment purposes only</strong>: Despite aggressive marketing to the enterprise as a productivity revolution, Microsoft’s legal terms still state Copilot is ‘for entertainment purposes only.’ This classic legal arse-covering highlights the massive gap between what the sales team promises and what the lawyers are willing to defend in court. A spokesperson claims the language is ‘outdated,’ which is corporate-speak for ‘we forgot to hide the truth.’ <a href="https://app.daily.dev/posts/MNlAJya5k" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The comprehension debt of AI generated spaghetti</strong>: A developer used GLM-5 to generate 5,000 lines of code in 12 minutes, only to spend 10 hours debugging and rewriting it into a maintainable 1,200-line codebase. We are rapidly entering an era of ‘comprehension debt’ where the speed of code production far outpaces any human’s ability to actually understand or audit it. AI labs are essentially subsidizing the creation of unmaintainable legacy systems while profiting from every token of garbage they output. <a href="https://app.daily.dev/feed-by-ids?id=AYoTQUpQO&amp;id=2VZlNj5Lr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Soft skills are the new technical debt</strong>: Opinion pieces are now claiming that office politics and ‘likability’ are more important for your career than actual technical ability. While being a decent human helps, framing ‘anticipating management’s needs’ as a primary skill is just a fancy way of telling engineers to stop worrying about code quality and start focusing on sycophancy. It’s the ultimate ‘T-shaped’ developer model where the vertical bar of technical depth is replaced by a horizontal bar of corporate survivalism. <a href="https://app.daily.dev/feed-by-ids?id=4Xrlz5HXV&amp;id=OiVkP6feX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
