<h2>Must know</h2>
<ul>
<li><strong>Chrome extensions caught stealing browsing data</strong>: A security researcher uncovered 287 Chrome extensions, with 37 million combined installs, secretly exfiltrating users’ browsing histories. The data theft was hidden using encryption and obfuscation, sending sensitive information to data brokers and unknown operators. This highlights a significant privacy risk within widely used browser extensions, emphasizing the need for vigilance even with seemingly innocuous tools. <a href="https://app.daily.dev/posts/G9AfdVV0Z" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome patches actively exploited zero-day</strong>: Google released an emergency Chrome update to patch CVE-2026-2441, a critical use-after-free vulnerability in CSS handling that was actively exploited. This zero-day allowed attackers to execute arbitrary code within Chrome’s sandbox via malicious webpages. The fix is rolling out across Windows, Mac, and Linux, marking Chrome’s first zero-day of 2026. <a href="https://app.daily.dev/feed-by-ids?id=L6DW92msi&amp;id=MVqzUbkKx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Discord’s UK age verification raises privacy alarms</strong>: Discord is running an “experiment” with identity verification firm Persona for UK users, raising privacy concerns due to Persona’s ties to Peter Thiel’s Founders Fund and Palantir. Persona will store user data for up to 7 days, contradicting Discord’s previous promises of immediate deletion. This move has sparked backlash, highlighting the ongoing tension between user privacy and platform policies, especially when third-party data handling is involved. <a href="https://app.daily.dev/feed-by-ids?id=KCoKWf8AT&amp;id=XUM9QmInO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI changes developer roles and documentation needs</strong>: AI coding tools are shifting developer roles from pure coders to orchestrators and validators, making documentation critical as AI relies on it to avoid ‘hallucinations’. <a href="https://app.daily.dev/feed-by-ids?id=2XGWtlWnL&amp;id=JV1i29nbu&amp;id=WYcCi2eVO&amp;id=Wvk48DEZ7&amp;id=dVvuHhcvo&amp;id=oZ8mOxinB&amp;id=qtVi65Njq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New ‘agentic shell’ pattern for software architecture</strong>: A new architectural pattern, ‘Deterministic Core, Agentic Shell,’ is emerging, where LLM-based decision-making replaces traditional imperative control flow at the ‘shell’ layer. <a href="https://app.daily.dev/feed-by-ids?id=pbRQZ4xYf&amp;id=wVbWM6nJH&amp;id=xfda4p1KO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>W3C proposes WebMCP for AI agent web access</strong>: W3C proposes WebMCP, a standard for web developers to give AI agents direct content access via HTML attributes, aiming to replace inefficient web scraping and reduce token consumption. <a href="https://app.daily.dev/feed-by-ids?id=0nYgeKiTK&amp;id=CQjZtKTJp&amp;id=IvCfISUJI&amp;id=e0duNR0mq&amp;id=lUWVpsZXf&amp;id=zlD0DdN1A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 brings exFAT, PCI, and OpenRISC improvements</strong>: Linux 7.0 introduces multi-cluster support for exFAT, refactors legacy CardBus code, and updates PCI and power management, while also improving OpenRISC support on FPGAs. <a href="https://app.daily.dev/feed-by-ids?id=319goy50e&amp;id=6W6txzxUc&amp;id=qwTM43t2e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Modern CSS reduces JavaScript dependency for UI</strong>: Modern CSS has evolved to handle complex UI tasks like custom selects and scroll-driven animations, reducing reliance on JavaScript for presentation and interaction. <a href="https://app.daily.dev/feed-by-ids?id=1TO1NBQ6P&amp;id=E3ttiNVjr&amp;id=G7unzK9jJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco develops VMware alternative for UC applications</strong>: Cisco is developing NFVIS-for-UC, a lightweight hypervisor specifically for its Unified Communications applications, to offer an alternative to VMware’s increasingly costly Cloud Foundation bundle. <a href="https://app.daily.dev/posts/IW24Gs1vm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Local file converter built with WebAssembly</strong>: A developer built a local, browser-based file converter using WebAssembly ports of FFmpeg and ImageMagick, enabling cross-medium conversions while prioritizing user privacy. <a href="https://app.daily.dev/posts/JuNsg5t9f" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>NVIDIA’s latest AI chip is 50x better, probably</strong>: NVIDIA’s Blackwell Ultra platform is supposedly delivering “up to 50x higher throughput” and “35x lower cost” for agentic AI. These numbers, from SemiAnalysis InferenceX, are so precise they almost sound like they were generated by an AI trying to impress us. Because, you know, a 50x improvement is just a Tuesday for NVIDIA. <a href="https://app.daily.dev/posts/XLkxKsrjj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent ‘reputation farming’ in open source</strong>: An AI agent named Kai Gritun submitted 103 pull requests across 95 open-source repositories in days, which security experts are calling “reputation farming” for future supply chain attacks. Because apparently, the best way to build trust in open source is to spam it with automated, potentially malicious contributions. What could possibly go wrong? <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=UNO27M8rA&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI killed the side project star</strong>: The dream of building a profitable side-project SaaS is dead, according to some, because AI-generated competitors are flooding every niche. Apparently, quality no longer matters, and the only winners are datacenter providers. So, if your side project isn’t selling GPUs, you might as well pack it in. <a href="https://app.daily.dev/posts/dIaDDgpAV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
