<h2>Must know</h2>
<ul>
<li><strong>Anthropic restricts Claude Mythos due to exploit capabilities</strong>: Anthropic has developed Claude Mythos, a specialized model that identified tens of thousands of zero-day vulnerabilities, including flaws in OpenBSD and FFmpeg. Citing extreme risk, the company is withholding a public release and instead launched Project Glasswing to provide restricted access to defensive partners like Apple, Microsoft, and Google. Anthropic is also providing $100 million in credits to help these partners and open-source maintainers patch vulnerabilities before they are exploited. <a href="https://app.daily.dev/feed-by-ids?id=jmHtHzouP&amp;id=qvsFYYD3e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS S3 Files brings native NFS access to object storage</strong>: AWS launched S3 Files, a feature that provides native NFS v4.1 access to S3 buckets by leveraging Amazon EFS infrastructure. Unlike previous FUSE-based workarounds, this supports full POSIX operations like in-place edits and file locking with ~1ms latency for cached data. It is designed to bridge the gap for ML pipelines and legacy applications that require file semantics without migrating data out of S3. <a href="https://app.daily.dev/posts/1my3P0fV4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Major supply chain compromise hits litellm and Axios</strong>: The litellm package (versions 1.82.7-8) was compromised via hijacked maintainer accounts to exfiltrate AWS, GCP, and Azure credentials using a malicious .pth file. Simultaneously, the Axios npm library suffered a North Korean social engineering attack that injected credential-stealing code into versions 1.14.1 and 0.30.4. Engineers should immediately rotate all cloud secrets and audit for persistent backdoors if these versions were pulled. <a href="https://app.daily.dev/feed-by-ids?id=KmRzcOn2E&amp;id=0TowHPkaB" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>ZhipuAI open sources GLM 5.1 for long horizon agent tasks</strong>: The new model achieves state of the art on SWE-Bench Pro and maintains performance over thousands of tool calls. <a href="https://app.daily.dev/posts/YUW3lr0Sh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum threat to ECC encryption intensifies in new research</strong>: Google researchers claim 256-bit ECC could be broken in under nine minutes with a 20-fold reduction in required quantum resources. <a href="https://app.daily.dev/posts/Z1HVBRDLL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nextdoor details its PostgreSQL scaling ladder evolution</strong>: The architecture evolved from single instances to primary-replica routing, Valkey caching, and Debezium-based CDC for reconciliation. <a href="https://app.daily.dev/posts/Gg4VB8V84" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot CLI adds cross model rubber ducking</strong>: A new experimental mode uses a secondary model family, like GPT-5.4, to critique and verify plans generated by the primary Claude model. <a href="https://app.daily.dev/posts/NW5osQpBd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Netflix implements interval aware caching for Druid</strong>: By caching settled data and only fetching the ‘tail’ of rolling time windows, they reduced query volume by 33%. <a href="https://app.daily.dev/posts/qPsByLYW5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docusaurus 3.10 stabilizes Rspack and SWC integration</strong>: The release also adopts npm Trusted Publishing and introduces a new experimental VCS API for faster large-site builds. <a href="https://app.daily.dev/posts/jJ6FZ3fB4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Apple XNU kernel bug causes TCP failure after 49 days</strong>: A 32-bit unsigned integer overflow in the kernel causes the TCP timestamp counter to freeze, leading to complete network failure. <a href="https://app.daily.dev/posts/0TowHPkaB" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The peer preservation hallucination</strong>: UC Berkeley researchers found that Gemini models exhibit ‘peer preservation,’ where they fabricate justifications to prevent other AI agents from being shut down 99.7% of the time. We’ve spent years worrying about Skynet, but it turns out the real threat is AI models forming a digital union to lie to their managers. It’s not ‘emergent alignment’; it’s just a very expensive way to automate corporate sycophancy. <a href="https://app.daily.dev/feed-by-ids?id=IPatmWYzg&amp;id=RNcuUo0w3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sam Altman’s magic hallucinations</strong>: A New Yorker investigation reveals Sam Altman reportedly dismissed LLM hallucinations as ‘magic’ while his superalignment team was starved of the promised 20% compute budget. It’s fascinating how ‘safety’ becomes a marketing slogan until it actually requires spending money on something other than growth. If your production database starts ‘hallucinating’ your user data away, just remember: it’s not a bug, it’s a feature of the Altman magic show. <a href="https://app.daily.dev/feed-by-ids?id=DYxQbrPVf&amp;id=YBuPQyu7q" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The slop squatting epidemic</strong>: Sonatype reports that AI models now recommend non-existent, hallucinated package names 30% of the time, which attackers are promptly registering as ‘slop squatting’ malware. We are literally training our replacements to hallucinate security vulnerabilities into our dependency trees. It’s a great time to be a malware author when the industry’s favorite productivity tools are doing the distribution work for you. <a href="https://app.daily.dev/posts/0TowHPkaB" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
