<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google has released an urgent update for Chrome (version 145.0.7632.75/76) to patch a high-severity zero-day vulnerability, CVE-2026-2441, which is already being actively exploited. This use-after-free bug in Chrome’s CSS font feature parsing could lead to arbitrary code execution, making immediate updates critical for all users. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions</strong>: OX Security disclosed critical flaws in four widely used VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—totaling 128 million installs. These vulnerabilities enable file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, most maintainers never responded, leaving millions at risk. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot chat security flaw exposed confidential emails</strong>: Microsoft confirmed a security bug (CW1226324) in Copilot Chat that allowed the AI to bypass confidentiality labels and Data Loss Prevention policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. This flaw, active since late January, highlights ongoing enterprise anxiety about AI tools accessing sensitive corporate data, with a fix rolling out in early February. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI model performance and cost considerations</strong>: Anthropic’s new Claude Sonnet 4.6, while marketed as cheaper, uses significantly more tokens due to ‘adaptive thinking,’ potentially negating per-token cost savings for heavy use cases, according to independent benchmarks. <a href="https://app.daily.dev/feed-by-ids?id=i4O6sQBIw&amp;id=j12nF8mSg&amp;id=jj2Kauaop&amp;id=lUz1VvbAr&amp;id=y0N7mzotz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent development, security, and governance accelerate</strong>: Enterprises are rapidly adopting agentic AI, leading to new identity providers for AI agents, security gateways for LLM traffic, and frameworks for evaluating agent performance, with major players like Google, Amazon, and Infosys investing heavily. <a href="https://app.daily.dev/feed-by-ids?id=2UmMyMAEf&amp;id=32FCqrqN0&amp;id=4fmmBjp20&amp;id=Ck3BiV0To&amp;id=bbSNghGeS&amp;id=fvUXvxfty&amp;id=hYwz99Mp8&amp;id=i8naoDZlv&amp;id=nicRNl9Cx&amp;id=pJKpsRETp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s impact on software development and engineering roles</strong>: Spotify’s CEO claims senior developers haven’t written code since December 2025, supervising AI instead, while others note AI fatigue from reviewing generated code and the need for developers to shift from ‘bricklayer’ to ‘system designer’ roles. <a href="https://app.daily.dev/feed-by-ids?id=7hHra6Ai0&amp;id=WUJRo6v7h&amp;id=enHqyOYiB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale launches peer relays and security integrations</strong>: Tailscale introduced Peer Relays for improved network performance and announced integrations with Huntress EDR and Fleet MDM to automate access policy enforcement based on device security posture. <a href="https://app.daily.dev/feed-by-ids?id=Q0uzlfbeJ&amp;id=L7iJSIIDS&amp;id=VukD3HNtV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks launches custom agents and predictive optimization</strong>: Databricks released Custom Agents for building and deploying production-quality AI agents on serverless compute, alongside new Predictive Optimization features in Unity Catalog for automated data management. <a href="https://app.daily.dev/feed-by-ids?id=QJn2roYcs&amp;id=09R2Vnrah&amp;id=A7SckdVlt&amp;id=GSuspp2K8&amp;id=IMEzjWlYo&amp;id=IrDaO6UXd&amp;id=KRKcko407" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New developer tools for cloud deployment and streaming</strong>: Deno Deploy introduced <code>deno sandbox</code> for instant Linux microVM provisioning, TinyIce offers a lightweight Icecast2-compatible audio streaming server, and Konta brings GitOps workflows to Docker Compose on VPS environments. <a href="https://app.daily.dev/feed-by-ids?id=7Ar3LQ3uM&amp;id=BHwbWnzAf&amp;id=QRFLXVuPF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Red Hat releases enterprise Podman desktop and digital sovereignty tool</strong>: Red Hat launched an enterprise-supported build of Podman Desktop for container development and a self-service Digital Sovereignty Readiness Assessment tool to help organizations evaluate their posture. <a href="https://app.daily.dev/feed-by-ids?id=iEOJ6oeIq&amp;id=BbCX80GL5" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI productivity impact: much ado about nothing?</strong>: A survey of nearly 6,000 executives found over 80% reported no measurable impact from AI on productivity or employment over the past three years. Yet, they still anticipate AI will eliminate 1.75 million jobs by 2028. So, AI isn’t helping now, but it’s definitely coming for your job later. Got it. <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s C compiler: a triumph of AI or marketing?</strong>: Anthropic’s marketing video claims Claude built a C compiler ‘from scratch’ with ‘no human intervention’ that could compile Linux. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t even boot Linux. But hey, 16 AI agents autonomously running for two weeks to produce a 100,000-line functional compiler is still pretty neat, if you ignore the ‘dishonest marketing language.’ <a href="https://app.daily.dev/feed-by-ids?id=0csgEkRMy&amp;id=1CyjIJfh9&amp;id=6spQIGtcM&amp;id=dhghGjegM&amp;id=poO8tUjKL&amp;id=v3dp2qPCw&amp;id=vTvxCCQVI&amp;id=z9Rc6eFF4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated music: Google’s latest masterpiece or ‘musical slop’?</strong>: Google launched Lyria 3, an AI music generation model integrated into Gemini, allowing users to create 30-second songs from text prompts. Google claims it avoids mimicking specific artists and includes copyright filters, but one article’s title calls it ‘musical slop.’ So, get ready for an endless stream of AI-generated elevator music, complete with SynthID watermarks, because who needs human creativity when you have algorithms? <a href="https://app.daily.dev/posts/eN6VW0Hvt" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
