<h2>Must know</h2>
<ul>
<li><strong>Microsoft’s February patch Tuesday addresses zero-days and AI vulnerabilities</strong>: Microsoft dropped its February 2026 Patch Tuesday, fixing 59 vulnerabilities, including six actively exploited zero-days. What’s spicy is that three of these zero-days were publicly disclosed with PoCs floating around. Even more interesting, critical remote code execution flaws in GitHub Copilot and multiple IDEs (VS Code, Visual Studio, JetBrains) were patched, stemming from AI prompt injection vulnerabilities. This highlights a growing attack surface in our AI-infused dev tools, as reported by Krebs on Security. <a href="https://app.daily.dev/feed-by-ids?id=zk4Rm0PBv&amp;id=BOPPPXswR&amp;id=uxvhPzT2r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are changing software development, for better or worse</strong>: AI agents are rapidly integrating into software development, promising efficiency gains but also introducing significant challenges. Google Cloud launched its GEAR program for building and deploying AI agents, while Microsoft Foundry evolved into an end-to-end enterprise AI agent platform. However, a Harvard Business Review study found AI leads to longer hours, increased cognitive fatigue, and burnout for tech workers, even if it initially boosts productivity. This suggests we’re trading one set of problems for another, as highlighted by HBR. <a href="https://app.daily.dev/feed-by-ids?id=mEvZkBSFL&amp;id=9C4SjPZli&amp;id=gwxHevbDX&amp;id=o13HbD6JR&amp;id=r88T1MoRe&amp;id=vS730ONZY&amp;id=dz3njIXXE&amp;id=it7NMfnEb&amp;id=laJOXndNn&amp;id=tEzN0YnW4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open source sustainability is in crisis</strong>: The open-source software ecosystem is facing a sustainability crisis, with companies profiting from the unpaid labor of maintainers who are experiencing burnout and a lack of support. High-profile incidents like Heartbleed and XZ Utils expose critical dependencies maintained by overworked individuals. Lotte Pitcher at NDC London 2026 emphasized that consumers need to reframe support for OSS as risk reduction, not charity, by sponsoring projects and contributing time. <a href="https://app.daily.dev/posts/aIx715a23" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Pandas 3.0.0 introduces breaking changes and CoW semantics</strong>: Pandas 3.0.0 is out, bringing breaking changes like a dedicated string dtype and formal Copy-on-Write (CoW) semantics to finally clear up view/copy ambiguity, requiring Python 3.11+. <a href="https://app.daily.dev/posts/Bf1dK14FP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks launches Lakeflow for unified data engineering</strong>: Databricks unveiled Lakeflow on Azure Databricks, a new unified data engineering solution for ingestion, transformation, orchestration, and governance, complete with AI-powered debugging. <a href="https://app.daily.dev/posts/DckO36Vaq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Erlang/OTP 29.0-rc1 released with native records</strong>: Erlang/OTP 29.0-rc1 is here, introducing native records (EEP-79), multi-valued comprehensions, and quantum-resistant key exchange defaults for SSH. <a href="https://app.daily.dev/posts/fTCktIrzF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ESLint 10.0.0 drops .eslintrc support for flat config</strong>: ESLint 10.0.0 is ditching the old <code>.eslintrc</code> files, making flat config the only option, which should improve config resolution for monorepos and fix JSX reference tracking. <a href="https://app.daily.dev/posts/eQ0JUyyzE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon OpenSearch Serverless gets collection groups</strong>: Amazon OpenSearch Serverless now has Collection Groups, letting you share compute resources across multiple collections for cost reduction while maintaining security isolation. <a href="https://app.daily.dev/posts/5AicsK9Gn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Aurora Global Database automates minor version upgrades</strong>: AWS Aurora Global Database now automates minor version upgrades across all clusters simultaneously, reducing operational overhead for PostgreSQL-compatible engines. <a href="https://app.daily.dev/posts/TgP4nKY4S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React Native 0.84 defaults to Hermes V1 for performance</strong>: React Native 0.84 makes Hermes V1 the default JavaScript engine, promising automatic performance boosts and lower memory usage, while also requiring Node.js 22.11 minimum. <a href="https://app.daily.dev/posts/oBV7ttAiR" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong><a href="http://Z.ai" target="_blank" rel="noopener nofollow">Z.ai</a> releases GLM-5, claims to match proprietary models</strong>: <a href="http://Z.ai" target="_blank" rel="noopener nofollow">Z.ai</a> just dropped GLM-5, an open-source language model with 744B parameters, claiming it matches proprietary giants like Claude Opus 4.6 and GPT 5.3 Codex for long-horizon coding tasks. And guess what? Modal is offering free access via an OpenAI-compatible API. Because nothing says ‘we’re as good as the big guys’ like giving it away for free and using their API standard. <a href="https://app.daily.dev/posts/bOspGaOnW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI will eliminate 50% of white-collar jobs in 1-5 years, says unnamed industry leader</strong>: An unnamed “industry leader” is predicting that 50% of entry-level white-collar jobs will be gone in 1-5 years thanks to AI models like GPT-5.3 Codex and Claude Opus 4.6. They’re urging everyone to immediately adopt paid AI tools and experiment daily. Sounds like a great way to sell some subscriptions while simultaneously fear-mongering about the inevitable AI apocalypse. <a href="https://app.daily.dev/posts/lGyFb7XTB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WebMCP standard to end ‘AI agents clicking buttons’</strong>: Chrome is pushing WebMCP, a new web standard that supposedly ends the era of “AI agents clicking buttons” by letting websites expose structured tools directly to in-browser AI. It’s in Canary, requires a flag, and promises to replace brittle DOM scraping. Because, you know, AI agents were just too busy clicking buttons instead of doing actual work, and this will totally fix everything. <a href="https://app.daily.dev/feed-by-ids?id=Ib422mkez&amp;id=NpNZ22j1b&amp;id=R0k8YNGTx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
