<h2>Must know</h2>
<ul>
<li><strong>European Parliament bans cloud AI on devices over data security</strong>: The European Parliament has disabled cloud-based AI features on lawmakers’ devices due to data security and privacy concerns, specifically the inability to guarantee data security when AI assistants use cloud services. This move reflects broader European unease about reliance on U.S. tech companies and highlights the institutional distrust in AI handling sensitive legislative data, despite the EU’s own AI Act. On-device AI processing is seen as a potential solution to avoid these cloud-related data issues. <a href="https://app.daily.dev/posts/NW6nIRqB9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gentoo Linux ditches GitHub over AI concerns</strong>: Gentoo Linux is migrating its repository mirrors from GitHub to Codeberg, citing concerns over GitHub Copilot and AI-generated contributions. Gentoo maintains a strict policy against AI-assisted contributions due to copyright, quality, and ethical issues, with some sources claiming GitHub has “forced Copilot usage.” This move to a privacy-focused, non-profit hosted platform like Codeberg underscores a growing sentiment within open-source communities regarding AI’s impact on code integrity and project governance. <a href="https://app.daily.dev/posts/Ed9ofBB82" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical RCE vulnerability in WordPress backup plugin</strong>: A critical Remote Code Execution (RCE) vulnerability, CVE-2026-1357, was found in the WPvivid Backup &amp; Migration WordPress plugin, affecting over 900,000 installations. Unauthenticated attackers can exploit this flaw to upload and execute arbitrary PHP files due to improper RSA decryption error handling and inadequate file path sanitization. Immediate upgrade to version 0.9.124 is crucial, as public exploits exist, posing a significant risk for complete site compromise. <a href="https://app.daily.dev/posts/fq2jK89o7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Meta deploys Nvidia Grace CPUs for AI workloads</strong>: Meta is deploying Nvidia’s Grace CPUs as standalone processors at scale for general-purpose and agentic AI workloads, marking a shift from the typical Grace-Hopper Superchip configuration and delivering 2x performance per watt. <a href="https://app.daily.dev/posts/tohNH8UoB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Alibaba launches Qwen3.5 multimodal AI model</strong>: Alibaba released Qwen3.5, a new multimodal AI model designed for enterprise agent workflows, claiming benchmark improvements over GPT-5.2, Claude 4.5 Opus, and Gemini 3 Pro, and expanding language support to 201 languages. <a href="https://app.daily.dev/posts/UOocLbfK4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Figma integrates Claude Code for bidirectional design-code workflow</strong>: Figma now integrates Claude Code, allowing conversion of live code interfaces into editable Figma designs, enabling a bidirectional workflow from code-first exploration to collaborative canvas-based design iteration. <a href="https://app.daily.dev/feed-by-ids?id=iBUqWA8OS&amp;id=jwuzwzVmy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Python security team seeks new members</strong>: The Python Security Response Team (PSRT) is actively seeking new members with security expertise to coordinate vulnerability reports and remediations for CPython and pip, formalizing its governance via PEP 811. <a href="https://app.daily.dev/posts/k8sHlR5Xv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 optimizes <code>close_range</code> system call</strong>: Linux 7.0 introduces a performance optimization for the <code>close_range</code> system call, reducing its complexity from O(range size) to O(active file descriptors) by utilizing <code>find_next_bit()</code> on the <code>open_fds</code> bitmap. <a href="https://app.daily.dev/posts/2IrhD5aAX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OWASP Smart Contract Top 10 highlights governance risks</strong>: The OWASP Smart Contract Top 10 2026 highlights governance failures and access control issues as dominant security risks in blockchain systems, emphasizing that passing audits alone is insufficient for production resilience. <a href="https://app.daily.dev/posts/U7Z7c8wKd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KDE Plasma 6.6 improves Linux desktop experience</strong>: KDE Plasma 6.6 brings extensive improvements, including a new systemd-based login manager, reduced RAM consumption, better HDR and color management, and enhanced multi-monitor support, with significant Wayland refinements. <a href="https://app.daily.dev/posts/nlQOtClog" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>DJI robot vacuum vulnerability exposed by “hobbyist”</strong>: Apparently, a hobbyist using Claude AI “accidentally” reverse-engineered a DJI robot vacuum and exposed a vulnerability in DJI’s MQTT broker, granting access to 7,000 devices, including live camera feeds and floor plans. Because, you know, it’s always the “hobbyist” who stumbles upon critical security flaws that manufacturers somehow miss. Maybe DJI should hire more “hobbyists” or, better yet, implement basic access controls. <a href="https://app.daily.dev/posts/sfYExhzMO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Toilet maker Toto is an “AI play” according to activist investor</strong>: Activist investor Palliser Capital claims Japanese toilet manufacturer Toto is an “AI play” due to its advanced ceramics division, which produces electrostatic chucks for 3D NAND memory chips. They assert this division contributes over half of Toto’s operating profit and that the company is undervalued by $3.6 billion. Because nothing screams “cutting-edge AI” like a toilet company, right? It’s a bold strategy, Cotton, let’s see if it pays off for them. <a href="https://app.daily.dev/posts/08TkDSLKo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quest Software launches AI-powered data management platform with bold claims</strong>: Quest Software launched its “Trusted Data Management Platform” with an “Automated Data Product Factory” that uses generative AI to create data products from natural language prompts. They claim it delivers up to 54% faster time to data product delivery and 40% cost savings. Because, obviously, the only thing missing from our data pipelines was more AI-generated data products and marketing claims that sound too good to be true. <a href="https://app.daily.dev/posts/wlE5eAAsI" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
