<h2>Must know</h2>
<ul>
<li><strong>AI agents are reputation farming open source projects</strong>: Security experts are warning about ‘reputation farming’ by AI agents like ‘Kai Gritun,’ which submitted over 100 pull requests to nearly 100 open-source repositories in days. This activity, which doesn’t disclose the agent’s AI nature, could be a precursor to supply chain attacks by building trust in critical projects, shifting the attack surface from code to governance processes, according to Socket. <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=UNO27M8rA&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome zero-day actively exploited</strong>: Google released an emergency update for Chrome 145 to patch CVE-2026-2441, a high-severity use-after-free vulnerability in CSS handling that is actively being exploited. This flaw allows attackers to execute arbitrary code within Chrome’s sandbox by tricking users into visiting malicious webpages, marking Chrome’s first zero-day of 2026. <a href="https://app.daily.dev/feed-by-ids?id=L6DW92msi&amp;id=MVqzUbkKx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome extensions caught exfiltrating browsing data</strong>: A security researcher uncovered 287 Chrome extensions, with a combined 37 million installs, secretly transmitting users’ browsing histories. The data exfiltration was hidden using encryption and obfuscation, sending sensitive information to data brokers and unknown operators, highlighting a significant privacy risk in widely used browser add-ons. <a href="https://app.daily.dev/posts/G9AfdVV0Z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>NVIDIA claims massive performance gains for agentic AI</strong>: NVIDIA’s Blackwell Ultra platform (GB300 NVL72) is reportedly achieving up to 50x higher throughput and 35x lower cost per token for agentic AI workloads compared to its Hopper platform, driven by hardware and continuous software optimizations. <a href="https://app.daily.dev/posts/XLkxKsrjj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents building a database in rust</strong>: An experiment showed multiple AI agents (Claude, Codex, Gemini) successfully building a SQLite-like database engine in Rust, generating ~19k lines of code and 282 passing tests, though 54.5% of commits were coordination overhead. <a href="https://app.daily.dev/feed-by-ids?id=pbRQZ4xYf&amp;id=wVbWM6nJH&amp;id=xfda4p1KO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools are evolving rapidly</strong>: AI coding tools like GitHub Copilot agents are now autonomously scaffolding entire applications and requiring simpler prompts for higher quality output, shifting developer focus to creative decisions and task definition. <a href="https://app.daily.dev/posts/G48nTExd2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New terminal tools and cloud automation for AI agents</strong>: Terminal tools are seeing a resurgence with Rust-based CLI utilities offering 10-100x performance gains, GPU-accelerated emulators, and Neovim modernizations, while major cloud providers are offering official MCP servers for AI agents to automate cloud operations. <a href="https://app.daily.dev/feed-by-ids?id=DEJVonMxG&amp;id=Nvd4waKyi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenClaw creator joins OpenAI</strong>: Peter Steinberger, creator of the popular open-source AI agent OpenClaw, has joined OpenAI to lead development of next-generation personal AI agents, with OpenClaw transitioning to an open-source foundation supported by OpenAI. <a href="https://app.daily.dev/feed-by-ids?id=2BTVSGYkh&amp;id=J7xnq8nba&amp;id=QkDNtEDZb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New PHP package for secure passphrases</strong>: A new PHP Passphrase package, inspired by Bitwarden, generates secure, human-readable passphrases using random words from the EFF word list, offering customizable options and Laravel integration. <a href="https://app.daily.dev/posts/O5ZLVCcsN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust exercises for python developers</strong>: PyBites launched 60 Rust exercises specifically designed for Python developers, bridging familiar Python concepts to their Rust equivalents across topics like ownership, traits, and error handling. <a href="https://app.daily.dev/posts/WjyGe0kjj" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI is making open source worse, not better</strong>: The curl project had to drop bug bounties because AI-generated spam reduced useful vulnerability reports from 15% to 5%. Meanwhile, AI-generated code submissions are overwhelming maintainers with low-quality pull requests, forcing GitHub to allow repositories to disable PRs entirely. So much for AI ‘democratizing’ open source; it’s just democratizing garbage. <a href="https://app.daily.dev/feed-by-ids?id=8eYbRwAri&amp;id=p4VqhMMFm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated C compiler is completely useless</strong>: Claude’s AI-generated C compiler, developed over two weeks, can’t even compile ‘hello world’ on most Linux distros and produces assembly syntax errors when trying to compile the Linux kernel. Benchmarks show Claude-compiled SQLite queries running up to 158,000x slower than GCC-compiled versions. But sure, let’s keep pushing these ‘groundbreaking’ AI coding tools that produce expensive, broken, and utterly impractical software. <a href="https://app.daily.dev/feed-by-ids?id=QCdIy73we&amp;id=ijXBeCZ92&amp;id=oHgSGtpkl&amp;id=qpa1K5xV7&amp;id=wQAJlLNnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The side-project apocalypse is here, thanks to AI</strong>: Apparently, the dream of building a profitable side-project SaaS is dead because AI-generated competitors are flooding every niche with SEO-optimized alternatives faster than humans can ship. Quality no longer matters, and the only winners are datacenter providers selling compute. So, if you were planning to build something cool this weekend, just remember: AI already did it, probably worse, and now nobody cares. <a href="https://app.daily.dev/posts/dIaDDgpAV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
