<h2>Must know</h2>
<ul>
<li><strong>xAI sees senior engineer and co-founder departures</strong>: Nine engineers, including two co-founders, have publicly exited xAI in the past week, bringing the total founding team departures to over half. These exits coincide with regulatory scrutiny over Grok’s deepfake generation, xAI’s upcoming IPO, and SpaceX’s recent acquisition of the company. The rapid departures raise questions about xAI’s stability and governance, especially as it competes with major players like OpenAI and Anthropic. <a href="https://app.daily.dev/posts/Am4GYAifG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>North Korean hackers target crypto with new macOS backdoors</strong>: North Korean threat actor UNC1069 is targeting cryptocurrency organizations with a sophisticated social engineering campaign. They’re using tactics like compromised Telegram accounts and fake Zoom meetings with AI-generated video to trick victims into executing malicious terminal commands. The attack deploys previously undocumented macOS backdoors (WAVESHAPER, HYPERCALL, DEEPBREATH) to bypass security and steal sensitive data, browser credentials, and keychain material. <a href="https://app.daily.dev/posts/WHtUJSDcB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Notepad markdown RCE vulnerability patched</strong>: Microsoft patched a Remote Code Execution (RCE) vulnerability, CVE-2026-20841, in Notepad’s Markdown feature. The flaw, with a severity score of 8.8, requires social engineering: users must open a malicious Markdown file and click an embedded link that executes unverified protocols. This vulnerability highlights the risks of adding complex features to traditionally simple tools, especially when enabled by default. <a href="https://app.daily.dev/posts/T0Qp7yO7u" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel flags now in public beta</strong>: Vercel Flags is now in public beta, offering native feature flag management directly in the Vercel Dashboard with targeting rules, user segments, and SDK support for Next.js and SvelteKit. <a href="https://app.daily.dev/posts/IfJOyXyyM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ESLint 10.0.0 drops legacy config support</strong>: ESLint 10.0.0 has removed support for <code>eslintrc</code> configuration files, making flat config the sole option, which improves resolution for monorepos and adds built-in TypeScript types. <a href="https://app.daily.dev/posts/eQ0JUyyzE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Broadcom’s monorepo success story</strong>: Broadcom successfully unified over 177 software projects into a single monorepo using Nx, achieving a 70% cache hit rate and reducing CI times to 29 minutes, saving 361 days of compute time monthly. <a href="https://app.daily.dev/posts/0esOYLd2k" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft .NET 11 preview 1 released</strong>: Microsoft released .NET 11 Preview 1, featuring JIT compiler improvements, CoreCLR support for WebAssembly, Zstandard compression, and new C# 15 and F# 11 features. <a href="https://app.daily.dev/posts/4y7L7j8R0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari 26.3 brings Zstandard and navigation API updates</strong>: Safari 26.3 introduced Zstandard compression for faster content delivery and AbortSignal support to the Navigation API, improving control over interrupted navigations in SPAs. <a href="https://app.daily.dev/posts/BItQUD2U2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Erlang/OTP 29.0-rc1 released with new features</strong>: Erlang/OTP 29.0-rc1 introduces native records, multi-valued comprehensions, and new guard BIFs, while defaulting SSH to quantum-resistant key exchange and removing 32-bit Windows builds. <a href="https://app.daily.dev/posts/fTCktIrzF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PyTorch foundation expands ecosystem</strong>: The PyTorch Foundation has expanded its scope to a multi-project ecosystem, now hosting PyTorch, vLLM, DeepSpeed, and Ray, with new leadership and governance structures. <a href="https://app.daily.dev/posts/2JQZDZ3HD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Windsurf’s AI leaderboard: speed over substance?</strong>: Windsurf, a company that makes an AI model, released an “Arena Mode leaderboard” claiming “The People Want Speed” in AI models. Shockingly, their own model, SWE 1.5, outperformed others in their in-IDE evaluation, which penalizes “inefficient thinking tokens.” It’s almost like they designed the test to highlight their strengths. Who would’ve thought? <a href="https://app.daily.dev/posts/SQAix1lCw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI makes tech workers work longer, not smarter</strong>: A Harvard Business Review study found that generative AI leads to tech workers working longer hours, taking on more tasks, and experiencing increased cognitive fatigue and burnout. Apparently, AI initially boosts productivity, but the long-term effect is just workload creep. So, AI makes you faster, but also more tired. Progress! <a href="https://app.daily.dev/posts/mEvZkBSFL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java: the only language you’ll ever need (according to this one article)</strong>: An article titled “Which language should you learn?” goes on to exclusively praise Java as “the ideal choice” for enterprise development, especially in banking. It touts high demand and job stability without mentioning a single alternative or drawback. It’s less a guide and more a love letter to Java, conveniently ignoring the entire rest of the programming world. <a href="https://app.daily.dev/posts/RDdwB12c8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
