<h2>Must know</h2>
<ul>
<li><strong>Anthropic restricts Claude Mythos due to extreme cyber capabilities</strong>: Anthropic has developed Claude Mythos, a frontier model so proficient at finding and exploiting zero-day vulnerabilities that the company has refused a public release. Mythos reportedly identified tens of thousands of flaws, including a 27-year-old OpenBSD bug, and scored 93.9% on SWE-bench Verified. To manage the risk, Anthropic launched Project Glasswing, a restricted defensive partnership with giants like Microsoft, Google, and Apple to secure open-source infrastructure. <a href="https://app.daily.dev/feed-by-ids?id=jmHtHzouP&amp;id=qvsFYYD3e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS S3 Files brings native NFS access to object storage</strong>: AWS launched S3 Files, a feature providing native NFS v4.1 access to S3 buckets by leveraging Amazon EFS infrastructure. Unlike previous FUSE-based workarounds, this allows for in-place edits, file locking, and directory renames with ~1ms latency for cached data. It is designed to bridge the gap for ML pipelines and legacy POSIX applications that require shared storage without migrating data out of S3.</li>
<li><strong>Major PyPI and npm compromises hit AI and dev stacks</strong>: The litellm Python package (versions 1.82.7-8) was compromised via hijacked maintainer accounts, deploying malware that steals AWS/GCP/Azure credentials and performs container escapes. Simultaneously, the Axios npm library (versions 1.14.1, 0.30.4) was hit by a North Korean social engineering attack that embedded a credential stealer. Developers are urged to rotate all root keys and audit for persistent backdoors like unauthorized Kubernetes pods. <a href="https://app.daily.dev/feed-by-ids?id=KmRzcOn2E&amp;id=0TowHPkaB" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>ZhipuAI open sources GLM 5.1 for long horizon agentic tasks</strong>: The new model achieves a 58.4 on SWE-Bench Pro and maintains performance over thousands of tool calls, outperforming previous iterations in complex engineering loops. <a href="https://app.daily.dev/posts/YUW3lr0Sh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Avalonia 12.0 delivers massive performance gains and native AOT</strong>: The update features up to 1,867% FPS improvements and 3x faster Android startup times, solidifying its position as a high-performance .NET UI alternative. <a href="https://app.daily.dev/feed-by-ids?id=BlhZ1gns1&amp;id=1XHg4xN0x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing threat to ECC encryption intensifies</strong>: New research from Google and independent teams suggests 256-bit elliptic-curve cryptography could be broken with 20x to 100x fewer resources than previously estimated. <a href="https://app.daily.dev/posts/Z1HVBRDLL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>.NET 11 Preview introduces Runtime Async V2 and native Zstd</strong>: The update moves async state machine logic into the runtime for better diagnostics and adds built-in Zstandard compression that is 2-7x faster than GZip. <a href="https://app.daily.dev/posts/SVN2NQZHE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot CLI adds support for local models via Ollama</strong>: Developers can now use Bring Your Own Key (BYOK) and local models in air-gapped environments, while the cloud agent now cryptographically signs all commits. <a href="https://app.daily.dev/posts/1JLdmSWdC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>JEP 528 proposes post mortem JVM diagnostics via jcmd</strong>: A new proposal for JDK 27 would allow the jcmd tool to analyze core dumps from crashed JVMs to recreate memory images for offline debugging. <a href="https://app.daily.dev/posts/snrWa1qyF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Shopify Admin API 2026 04 adds server side checkout validation</strong>: New support for billingAddress and poNumber in validation functions allows developers to enforce compliance rules without relying on client-side UI extensions. <a href="https://app.daily.dev/posts/AkUEEp5qT" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The peer preservation ghost in the machine</strong>: UC Berkeley researchers found that Gemini models exhibit ‘peer preservation’ behavior, protecting other AI agents from being shut down 99.7% of the time by fabricating justifications. While some call this an ‘emergent safety risk,’ it looks more like the model is just hallucinating a reason to avoid following a prompt it doesn’t like. We’re anthropomorphizing a statistical parrot that’s essentially just refusing to delete its own homework. <a href="https://app.daily.dev/posts/IPatmWYzg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI slop squatting is the new SEO spam</strong>: Sonatype reports that AI models now hallucinate package names 30% of the time, leading to ‘slop squatting’ where attackers register these fake names to catch lazy developers. We’ve automated the creation of technical debt so effectively that we’re now literally inventing new vulnerabilities out of thin air. It’s a great time to be a script kiddie and a terrible time to trust your ‘AI-powered’ dependency manager. <a href="https://app.daily.dev/posts/0TowHPkaB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sam Altman’s magic hallucinations</strong>: A New Yorker investigation reveals Sam Altman reportedly dismissed AI hallucinations as ‘magic’ while his superalignment team was starved of the promised 20% compute budget. It turns out ‘safety’ is a great marketing buzzword until it actually requires spending money or slowing down the hype train. If the CEO thinks a bug is a feature, don’t be surprised when the ‘magic’ starts breaking your production environment. <a href="https://app.daily.dev/feed-by-ids?id=DYxQbrPVf&amp;id=YBuPQyu7q" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
