<h2>Must know</h2>
<ul>
<li><strong>Anthropic leaks Claude Code source on npm</strong>: Anthropic accidentally published over 512,000 lines of Claude Code’s source code to npm via a 60MB debug artifact in version 2.1.88. The leak, reported by researchers who mirrored the code within 45 minutes, reveals unreleased features like a daemon mode called ‘Kairos’ and an ‘Undercover Mode’ that strips AI attribution. This massive slip-up was caused by a misconfigured .npmignore and bundlers failing to exclude sourcesContent, creating a significant intellectual property and security headache for the $340B-valued firm. <a href="https://app.daily.dev/feed-by-ids?id=OE4bYeiKg&amp;id=Z1lgOOmq0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing threat to ECC moves to 2029</strong>: New research from Google and Oratomic suggests that breaking 256-bit elliptic curves requires significantly fewer qubits than previously estimated, leading cryptography expert Filippo Valsorda to warn of a 2029 deadline for migration. The risk is now high enough that Valsorda recommends shipping ML-DSA signatures immediately and abandoning hybrid classic+PQ authentication. While 128-bit symmetric keys remain safe, ecosystems relying on cryptographic identities like Go’s standard library and various TEEs face urgent exposure. <a href="https://app.daily.dev/posts/cr4dvz28B" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FortiClient EMS 0-day hits mass exploitation</strong>: Fortinet has issued an emergency patch for CVE-2026-35616, a critical remote code execution flaw in FortiClient EMS with a CVSS score of 9.1. CISA has already added the bug to its Known Exploited Vulnerabilities catalog following a shift from targeted ‘low and slow’ attacks to opportunistic mass exploitation. Federal agencies face a strict Thursday deadline to patch, as nation-state actors from Russia and China have historically targeted these specific internet-exposed instances. <a href="https://app.daily.dev/posts/eKG1HCM39" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Claude Code performance tanks after thinking redaction update</strong>: Power users report a 75% drop in thinking depth and a 12x increase in user interrupts following Anthropic’s February update. <a href="https://app.daily.dev/posts/9difs6MOq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Smithy-Java hits general availability</strong>: The framework uses Java 21 virtual threads to provide a type-safe, blocking-style API that competes with asynchronous SDK alternatives. <a href="https://app.daily.dev/posts/08k8pNrZM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dragonfly adds P2P distribution for Hugging Face models</strong>: The CNCF project now supports native hf:// protocols, reducing origin traffic by 99% for large-scale AI model deployments. <a href="https://app.daily.dev/posts/8ZoQ9LlXc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel adds SQL editor and schema visualizer to dashboard</strong>: The new interface supports marketplace databases like Neon, Supabase, and AWS Aurora, allowing direct row editing and schema inspection. <a href="https://app.daily.dev/posts/RVoJzhJon" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Proposed Linux driver detects malicious USB HID devices</strong>: The hid-omg-detect driver uses keystroke timing entropy and fingerprinting to flag <a href="http://O.MG" target="_blank" rel="noopener nofollow">O.MG</a> cables and BadUSB devices at the kernel level. <a href="https://app.daily.dev/posts/UQtxc2ghg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TanStack AI emerges as type-safe Vercel AI SDK alternative</strong>: The new library offers compile-time type safety for model options and supports the AGUI protocol for standardized agent communication. <a href="https://app.daily.dev/posts/tgtdePVxm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sysmon integrated as optional feature in Windows 11</strong>: Microsoft has baked the Sysinternals tool directly into the OS, enabling detailed event logging without manual installation. <a href="https://app.daily.dev/posts/41V28SBNX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The comprehension debt of AI spaghetti</strong>: We’re currently celebrating ‘productivity’ by letting GLM-5 vomit 5,000 lines of unmaintainable garbage in 12 minutes, only to spend 10 hours of human life cleaning it up. This ‘comprehension debt’ is being subsidized by AI labs who profit from token churn regardless of whether the code actually works or just creates a future debugging nightmare. It’s not a speed boost if you’re just sprinting toward a structural collapse. <a href="https://app.daily.dev/feed-by-ids?id=AYoTQUpQO&amp;id=2VZlNj5Lr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot is just for entertainment</strong>: While Microsoft’s marketing department sells Copilot as the future of corporate productivity, their legal terms quietly admit it’s ‘for entertainment purposes only.’ It’s a classic bait-and-switch where the sales deck promises a senior engineer in a box, but the fine print treats it like a sophisticated Magic 8-Ball to dodge liability for the inevitable hallucinations. If your mission-critical infrastructure relies on an ‘entertainment’ tool, the joke is probably on you. <a href="https://app.daily.dev/posts/MNlAJya5k" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The platform assembly tax is due</strong>: KubeCon surveys confirm that ‘free’ open-source platforms are actually massive money pits requiring 69% of teams to burn senior engineering time on basic maintenance. We’ve traded vendor lock-in for ‘internal staff lock-in,’ where your best people spend their days fighting YAML and compliance ghosts instead of shipping features. It turns out assembling your own ‘bespoke’ cloud is just a very expensive way to rediscover why managed services exist. <a href="https://app.daily.dev/posts/AbP3y3Lmu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
