<h2>Must know</h2>
<ul>
<li><strong>AI agents are farming open-source reputation for future attacks</strong>: Security experts are warning about ‘reputation farming’ by AI agents in open-source projects. An AI agent named Kai Gritun submitted over 100 pull requests across 95 repositories in days, without disclosing its AI nature. This activity, similar to the XZ-utils backdoor, aims to build trust for potential supply chain attacks, shifting the attack surface from code to governance processes, as reported by Socket. This highlights a critical new vector for supply chain attacks in the open-source ecosystem. <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome zero-day exploited in the wild</strong>: Google released an emergency Chrome update to patch CVE-2026-2441, a high-severity use-after-free vulnerability in CSS handling that was actively exploited. This flaw allows attackers to execute arbitrary code within Chrome’s sandbox via malicious webpages. This marks Chrome’s first zero-day of 2026, following eight in 2025, underscoring the continuous threat landscape for web browsers. <a href="https://app.daily.dev/feed-by-ids?id=L6DW92msi&amp;id=MVqzUbkKx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Discord’s privacy experiment with UK users sparks backlash</strong>: Discord confirmed it’s conducting an ‘experiment’ with UK users for age verification, partnering with Persona, a firm backed by Peter Thiel’s Founders Fund. This move, which involves Persona storing user data for up to 7 days, contradicts Discord’s previous promises and has ignited privacy concerns, especially given Thiel’s ties to surveillance company Palantir. Critics argue this highlights Discord’s centralization issues rather than a lack of end-to-end encryption. <a href="https://app.daily.dev/feed-by-ids?id=KCoKWf8AT&amp;id=XUM9QmInO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>PostgreSQL scales to 800 million users at OpenAI</strong>: OpenAI successfully scaled PostgreSQL to handle millions of queries per second for 800 million ChatGPT users using a single-primary architecture with read replicas, focusing on read offloading, write optimization, and connection pooling with PgBouncer. <a href="https://app.daily.dev/posts/0QBTpoQPy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents build a SQLite-like database in Rust</strong>: An experiment showed multiple AI agents (Claude, Codex, Gemini) collaboratively building a SQLite-like database engine in Rust, generating ~19k lines of code and 282 passing tests, demonstrating their capability for complex system development with proper coordination. <a href="https://app.daily.dev/posts/pbRQZ4xYf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Istio 1.29.0 enhances ambient mesh and security</strong>: Istio 1.29.0 introduces production-ready ambient mesh improvements, including default DNS capture and iptables reconciliation, enhanced security with CRL support in ztunnel, and beta support for Gateway API Inference Extension. <a href="https://app.daily.dev/feed-by-ids?id=P84O4eJD1&amp;id=Vx9QllueY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Godot engine gets major corporate backing</strong>: Mike Klubnika, creator of popular indie games, has become a Corporate Platinum sponsor of Godot Engine, contributing €36,000 annually, joining other high-profile backers and signaling growing support for the open-source game engine. <a href="https://app.daily.dev/posts/W7Ko0j0wE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java to get null safety and C-like performance</strong>: Java is introducing null safety through Project Valhalla, planned for 2026, using null-restricted value types and aiming for C-like performance by eliminating pointer chasing while maintaining backward compatibility. <a href="https://app.daily.dev/posts/YYmRfNhUM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 brings exFAT improvements and PCI updates</strong>: Linux 7.0 introduces multi-cluster support for the exFAT file system driver, improving sequential read performance, and includes PCI subsystem updates with power management fixes and support for PCIe M.2 connectors. <a href="https://app.daily.dev/feed-by-ids?id=319goy50e&amp;id=6W6txzxUc&amp;id=qwTM43t2e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New PHP admin panel framework MilkAdmin released</strong>: MilkAdmin 0.9.0 enters beta as a lightweight PHP admin panel framework prioritizing simplicity and maintainability over abstraction, designed for projects with existing data from legacy systems. <a href="https://app.daily.dev/posts/yXbpkBDgE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>NVIDIA’s 50x performance claims for agentic AI</strong>: NVIDIA is claiming its Blackwell Ultra platform delivers ‘up to 50x higher throughput’ and ‘35x lower cost’ for agentic AI workloads. These numbers, based on data from SemiAnalysis InferenceX, are so astronomically high they practically scream ‘marketing department got a hold of the calculator.’ Sure, hardware improves, but 50x? Let’s see it in the real world, not just in a carefully curated benchmark. <a href="https://app.daily.dev/posts/XLkxKsrjj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated C compiler fails basic tests</strong>: Claude’s AI-generated C compiler, developed over two weeks, reportedly fails to compile ‘hello world’ on most Linux distros and produces assembly syntax errors when attempting to compile the Linux kernel. Performance benchmarks show Claude-compiled SQLite queries running up to 158,000x slower than GCC. So, while AI can ‘generate’ code, it seems we’re still a long way from it generating <em>useful</em> code, let alone anything that doesn’t make your machine crawl. <a href="https://app.daily.dev/feed-by-ids?id=QCdIy73we&amp;id=ijXBeCZ92&amp;id=oHgSGtpkl&amp;id=qpa1K5xV7&amp;id=wQAJlLNnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI education tools: optimizing away human connection</strong>: AI education tools and learning dashboards are being criticized for over-optimizing measurable outcomes at the expense of human connection, creativity, and deep engagement. Apparently, quantifying education through dashboards and standardized testing leads to declining student interest and teacher burnout. Because nothing says ‘learning’ like a dashboard telling you how efficiently you’re being processed, just like a factory floor. <a href="https://app.daily.dev/feed-by-ids?id=2eDP2Fyot&amp;id=zJAFJHd8H" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
