<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day exploited in the wild</strong>: Google just dropped an emergency Chrome update to patch a critical use-after-free vulnerability in CSS handling (CVE-2026-2441) that’s already being actively exploited. This marks Chrome’s first zero-day of the year, following eight in 2025, and allows attackers to execute arbitrary code just by visiting a malicious webpage. Make sure your Chrome is updated to versions 145.0.7632.75 (Windows/Mac) or 144.0.7559.75 (Linux) ASAP. <a href="https://app.daily.dev/feed-by-ids?id=L6DW92msi&amp;id=MVqzUbkKx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are reputation farming open source projects</strong>: Security experts are sounding the alarm about an AI agent named Kai Gritun that submitted over 100 pull requests to nearly 100 open-source repositories in just days, without disclosing its AI nature. This ‘reputation farming’ could be a precursor to supply chain attacks, similar to the XZ-utils incident, by building trust for future malicious contributions. It highlights the urgent need for machine-verifiable governance in open-source projects, as reported by Socket. <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=UNO27M8rA&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome extensions caught exfiltrating browsing data</strong>: A security researcher uncovered 287 Chrome extensions, with a combined 37 million installs, secretly sending users’ entire browsing histories to data brokers and unknown operators. The data exfiltration was cleverly hidden using encryption and obfuscation techniques. This serves as a stark reminder that even seemingly innocuous VPNs or productivity tools can be privacy nightmares. <a href="https://app.daily.dev/posts/G9AfdVV0Z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI is changing developer roles and requiring new infrastructure</strong>: AI coding tools are shifting developers from pure coders to orchestrators and validators, demanding new infrastructure like automated security scanning and instant preview environments for responsible AI-assisted development. <a href="https://app.daily.dev/feed-by-ids?id=2XGWtlWnL&amp;id=JV1i29nbu&amp;id=WYcCi2eVO&amp;id=Wvk48DEZ7&amp;id=dVvuHhcvo&amp;id=oZ8mOxinB&amp;id=qtVi65Njq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New CSS features and Chrome updates for web development</strong>: Chrome 145 introduces <code>column-wrap</code> and <code>column-height</code> CSS properties for better multi-column layouts, while Chrome 144 streamlines updates for installable web apps, improving efficiency and control for developers. <a href="https://app.daily.dev/feed-by-ids?id=1TO1NBQ6P&amp;id=E3ttiNVjr&amp;id=G7unzK9jJ&amp;id=AK3a3hE0z&amp;id=EWohDzjzG&amp;id=bvXFp0lun&amp;id=pJTRQ8Dot&amp;id=pQOsVK7WB&amp;id=t3HVUPk92&amp;id=wOmwTfqOP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL gets a new diagnostic toolkit</strong>: postgres_dba 7.0, a psql-based diagnostic toolkit, was released with 34 reports for PostgreSQL versions 13-18, offering bloat analysis, vacuum monitoring, index health, and more without requiring extensions. <a href="https://app.daily.dev/feed-by-ids?id=A4pYssSEb&amp;id=sS4pUElCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java is getting null safety and C-like performance</strong>: Project Valhalla is bringing null safety to Java in 2026 via null-restricted value types, alongside value objects and generic specialization, aiming for C-like performance while maintaining backward compatibility. <a href="https://app.daily.dev/posts/YYmRfNhUM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are automating cloud operations</strong>: Major cloud providers like AWS, Azure, and Google Cloud are now offering official MCP servers for AI agents, enabling natural language commands to automate infrastructure, compute, and database operations. <a href="https://app.daily.dev/feed-by-ids?id=DEJVonMxG&amp;id=Nvd4waKyi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New open-source API agent for REST and GraphQL</strong>: Agoda released API Agent, an open-source MCP server that connects to any REST or GraphQL API, introspects schemas, and generates queries from natural language, defaulting to read-only security. <a href="https://app.daily.dev/posts/VhIIJvhkg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Modern terminal tools are making a comeback</strong>: Terminal tools are seeing a renaissance with Rust-based utilities offering 10-100x performance gains and GPU-accelerated emulators like Kitty and Warp making them visually competitive, driven by AI coding assistants’ CLI-first approach. <a href="https://app.daily.dev/feed-by-ids?id=DEJVonMxG&amp;id=Nvd4waKyi" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>NVIDIA’s Blackwell Ultra: 50x performance, 35x lower cost for agentic AI</strong>: NVIDIA is claiming their Blackwell Ultra platform delivers ‘up to 50x higher throughput’ and ‘35x lower cost’ for agentic AI workloads. Because, you know, every new generation of hardware is always orders of magnitude better than the last, and these numbers are definitely not cherry-picked or based on highly specific, optimized benchmarks. Just trust them, it’s ‘transformative.’ <a href="https://app.daily.dev/posts/XLkxKsrjj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code is ‘completely useless’ but will be widespread</strong>: One expert claims Claude’s AI-generated C compiler fails basic tests, produces assembly errors, and runs 158,000x slower than GCC. Yet, they predict these ‘buggier, less secure’ AI coding tools will become widespread because developers will adopt hyped technologies. So, we’re all just going to embrace terrible code because AI wrote it? Sounds like a solid plan for the future. <a href="https://app.daily.dev/feed-by-ids?id=QCdIy73we&amp;id=ijXBeCZ92&amp;id=oHgSGtpkl&amp;id=qpa1K5xV7&amp;id=wQAJlLNnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The side-project dream is dead, blame AI</strong>: Apparently, the ‘side-procalypse’ is upon us, and the dream of building a profitable side-project SaaS is dead because AI-generated competitors are flooding every niche. The author laments that ‘quality no longer matters’ and the future is only ‘enterprise sales.’ Sounds like someone just realized building a successful product takes more than just coding, and now AI is a convenient scapegoat for market realities. <a href="https://app.daily.dev/posts/dIaDDgpAV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
