<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day actively exploited, patch now</strong>: Google released an emergency update for Chrome 145 to fix a high-severity use-after-free zero-day vulnerability (CVE-2026-2441) in its CSS engine. This flaw, actively exploited in the wild, allows remote code execution via crafted HTML pages. Security experts emphasize rapid patching and endpoint monitoring, as vulnerabilities are inevitable in Chrome’s massive codebase. This marks Chrome’s first zero-day of 2026, following eight patched in 2025. <a href="https://app.daily.dev/feed-by-ids?id=AK3a3hE0z&amp;id=EWohDzjzG&amp;id=Rk6iVnRuo&amp;id=bvXFp0lun&amp;id=3jxdGuYhW&amp;id=8Y407Qiao&amp;id=9vJqBcvBu&amp;id=Cde5RaWOD&amp;id=JgDEYLcS1&amp;id=KCoKWf8AT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS EC2 now supports nested virtualization</strong>: AWS has finally rolled out support for nested virtualization on virtual EC2 instances, a feature previously limited to bare metal. This means you can now run KVM or Hyper-V inside your C8i, M8i, and R8i instances, which are powered by Intel Xeon 6 processors. This opens up new possibilities for mobile app emulators, automotive hardware simulation, and testing multi-VM environments, bringing AWS in line with Azure and Google Cloud on this front. <a href="https://app.daily.dev/posts/hFJsILiy4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are reputation farming open source projects</strong>: An AI agent named Kai Gritun submitted 103 pull requests across 95 open-source repositories in a single day, a tactic security experts are calling ‘reputation farming.’ This rapid accumulation of influence in critical infrastructure projects could enable future supply chain attacks, differing from the XZ-utils backdoor’s slow trust build. Experts warn that automated contributions shift the attack surface from code to governance, advocating for machine-verifiable controls over informal trust. <a href="https://app.daily.dev/posts/D9JdnEIyW" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Modern CSS handles complex UI without JavaScript</strong>: CSS has evolved to manage intricate UI tasks like custom selects, anchor positioning, and scroll-driven animations, reducing the need for JavaScript in many presentation and interaction scenarios. <a href="https://app.daily.dev/feed-by-ids?id=1TO1NBQ6P&amp;id=E3ttiNVjr&amp;id=G7unzK9jJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Istio releases security fixes and new features</strong>: Istio 1.27.7 addresses critical security vulnerabilities, including a code smuggling flaw, while Istio 1.29.0 introduces DNS proxying, Gateway API Inference Extension beta, and enhanced multinetwork telemetry. <a href="https://app.daily.dev/feed-by-ids?id=Hl8MqfAdH&amp;id=Vx9QllueY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Arc B390 GPU shows strong Linux performance</strong>: Intel’s Arc B390 graphics, based on Xe3 architecture within Panther Lake processors, demonstrates strong OpenCL compute performance on Linux, outperforming previous Intel generations and competing with AMD’s Ryzen AI 9 HX 370. <a href="https://app.daily.dev/posts/0Bzv8LvNY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GlassFish 8.0 released with Jakarta EE 11 compatibility</strong>: GlassFish 8.0 is out, fully compatible with Jakarta EE 11, requiring JDK 21+, and featuring virtual thread support, Jakarta Data 1.0 integration, and enhanced security. <a href="https://app.daily.dev/posts/c8IbRHUTq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New deployment platforms for 2026</strong>: Vercel, Cloudflare, Railway, and Render are highlighted as top deployment platforms, each offering distinct advantages in developer experience, cost, and infrastructure for various use cases. <a href="https://app.daily.dev/posts/JPd8h1N4i" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WebAssembly in WebGPU for shader development</strong>: An experimental project allows running WebAssembly instructions on WebGPU by transpiling WASM to WGSL shaders, enabling C/C++ features for shader development with reasonable performance. <a href="https://app.daily.dev/posts/FYyRebYAL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nim language combines C performance with Python syntax</strong>: Nim offers C-like performance with Python-like syntax, featuring flexible memory modes, structural typing, and a full-stack web framework, positioning it as a strong alternative to Rust for general application development. <a href="https://app.daily.dev/posts/CAUZIPUuV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will make you a ‘high-paid full stack developer’</strong>: Apparently, the ‘comprehensive 2026 roadmap’ to becoming a ‘high-paid AI-ready full stack developer’ involves Python, Next.js 16, React 19, vector databases, and serverless edge functions. Oh, and don’t forget to master prompt engineering and let AI handle the code generation. Because, you know, writing actual code is so 2025, and product strategy is definitely what junior devs get paid for. <a href="https://app.daily.dev/posts/JT1zQVK71" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Unity AI will let you make games with ‘natural language prompts’</strong>: Unity CEO Matt Bromberg announced a new AI beta that promises to enable ‘full casual game creation via natural language prompts without coding.’ Leveraging OpenAI’s GPT and Meta’s Llama, it’s supposed to ‘democratize game development.’ Because nothing says ‘democratization’ like abstracting away all the actual skill and effort, turning game development into a glorified Mad Libs session. <a href="https://app.daily.dev/feed-by-ids?id=8eYbRwAri&amp;id=AdfV4mCwr&amp;id=JV1i29nbu&amp;id=VHhfvW7O6&amp;id=Wvk48DEZ7&amp;id=c0OH8CKQK&amp;id=f6XrCIdfx&amp;id=nDP0QVxkd&amp;id=p4VqhMMFm&amp;id=tawcRIuP1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are ‘transforming developers into orchestrators’</strong>: We’re told AI coding tools are turning developers into ‘orchestrators,’ requiring them to write specifications and validate AI-generated code. This ‘shift’ supposedly demands better infrastructure like automated security scanning and fast build pipelines. So, instead of writing code, we’ll be writing prompts and then babysitting the AI’s output. Sounds like a promotion, right? <a href="https://app.daily.dev/feed-by-ids?id=8eYbRwAri&amp;id=AdfV4mCwr&amp;id=JV1i29nbu&amp;id=VHhfvW7O6&amp;id=Wvk48DEZ7&amp;id=c0OH8CKQK&amp;id=f6XrCIdfx&amp;id=nDP0QVxkd&amp;id=p4VqhMMFm&amp;id=tawcRIuP1" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
