<h2>Must know</h2>
<ul>
<li><strong>Anthropic leaks Claude Code source on npm</strong>: In a massive configuration blunder, Anthropic accidentally published over 512,000 lines of Claude Code’s source code to the npm registry via a debug artifact. The leak, reported by security researchers, exposed unreleased features like a daemon mode and an ‘Undercover Mode’ that strips AI attribution from generated code. While the package was quickly deleted, mirrors are already circulating, raising concerns about trojanized versions appearing on GitHub. <a href="https://app.daily.dev/feed-by-ids?id=OE4bYeiKg&amp;id=Z1lgOOmq0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fortinet 0-day hits mass exploitation phase</strong>: Fortinet has issued an emergency patch for CVE-2026-35616, a critical remote code execution flaw in FortiClient EMS with a CVSS score of 9.1. What began as ‘low and slow’ targeted attacks on March 31st has escalated into opportunistic mass exploitation, prompting CISA to add it to the Known Exploited Vulnerabilities catalog. Federal agencies have been given a strict Thursday deadline to secure approximately 100 remaining internet-exposed instances. <a href="https://app.daily.dev/posts/eKG1HCM39" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dragonfly brings P2P distribution to Hugging Face models</strong>: The CNCF-graduated Dragonfly project now natively supports P2P distribution for AI models using <code>hf://</code> and <code>modelscope://</code> protocols. By utilizing a Rust-based mesh network, the system can reduce origin traffic by up to 99.5%, allowing a 130 GB model to be deployed across 200 GPU nodes while only fetching the data once from the hub. This is a significant win for large-scale cluster deployments and air-gapped environments. <a href="https://app.daily.dev/posts/8ZoQ9LlXc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Linux kernel driver proposed to sniff out malicious USB cables</strong>: The <code>hid-omg-detect</code> patch uses keystroke timing entropy and fingerprinting to identify passive <a href="http://O.MG" target="_blank" rel="noopener nofollow">O.MG</a> or BadUSB devices. <a href="https://app.daily.dev/posts/UQtxc2ghg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft bakes Sysmon directly into Windows 11</strong>: The March 2026 update makes the advanced Sysinternals monitoring tool an optional built-in feature for Home and Pro editions. <a href="https://app.daily.dev/posts/41V28SBNX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ETH Zurich researchers prove transformers don’t need residual connections</strong>: By constraining self-attention initialization and using parallel sub-blocks, the team successfully simplified the architecture without losing performance. <a href="https://app.daily.dev/posts/EMCYPpJXu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Smithy-Java hits GA with virtual thread support</strong>: The framework generates type-safe clients using Java 21 virtual threads, prioritizing a blocking-style API for simplicity over async complexity. <a href="https://app.daily.dev/posts/08k8pNrZM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fyrox game engine offers production-ready Rust 3D tooling</strong>: The engine formerly known as rg3d features a full scene editor and an official book for developers avoiding C++ heavyweights. <a href="https://app.daily.dev/posts/ro1gFGhul" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Contrapunk brings real-time MIDI harmony to Rust</strong>: This open-source tool uses a Rust core and WebAssembly to provide sub-10ms latency for guitar-to-MIDI conversion with classical counterpoint rules. <a href="https://app.daily.dev/posts/uNrsyeXCk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel AI Gateway adds zero data retention controls</strong>: Developers can now enforce ZDR and prompt training opt-outs globally across providers like Anthropic and OpenAI via the dashboard. <a href="https://app.daily.dev/posts/3C6GdoYpU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The comprehension debt of AI-generated spaghetti</strong>: We’re currently celebrating ‘productivity’ gains while drowning in what researchers call ‘comprehension debt’—the gap between code volume and human understanding. One developer bragged about generating 5,000 lines of code in 12 minutes, only to spend 10 hours debugging and rewriting it into a maintainable 1,200-line codebase. It turns out that paying AI labs to generate tokens you don’t understand is just a high-interest loan on your future technical debt. <a href="https://app.daily.dev/feed-by-ids?id=AYoTQUpQO&amp;id=2VZlNj5Lr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s Copilot is legally just for entertainment</strong>: Despite Microsoft’s aggressive marketing of Copilot as the future of enterprise productivity, their legal terms of use still claim it is ‘for entertainment purposes only.’ This classic ‘trust us in the ads, sue us and lose’ legal maneuver highlights the massive gap between marketing hype and actual reliability. If your mission-critical code breaks, Microsoft’s lawyers will remind you that you were just playing a very expensive game of pretend. <a href="https://app.daily.dev/posts/MNlAJya5k" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The 13kB first-fold performance myth</strong>: While developers obsess over fitting critical CSS into the first 13kB to beat TCP slow start, the reality is that modern web bloat makes this a drop in the ocean. We’re fine-tuning the first round trip of a 5MB page laden with tracking scripts and ‘AI-powered’ chat widgets that negate any fundamental networking optimization. It’s like optimizing the aerodynamics of a brick—technically interesting, but the brick is still a brick. <a href="https://app.daily.dev/posts/cugkb3C8r" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
