<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google has released an urgent update for Chrome (version 145.0.7632.75/76) to patch CVE-2026-2441, a high-severity use-after-free vulnerability in its CSS font feature parsing that is actively being exploited in the wild. This marks Chrome’s first zero-day of the year, highlighting the continuous threat landscape even for widely used software. The bug allows for arbitrary code execution within the browser sandbox, making immediate updates critical for all users. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot chat security flaw exposed confidential emails</strong>: Microsoft confirmed a security bug (CW1226324) in Copilot Chat that allowed the AI to bypass confidentiality labels and Data Loss Prevention (DLP) policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. This flaw, active since late January, underscores the significant enterprise anxiety around AI tools accessing sensitive corporate data, especially in regulated environments. A fix is rolling out, but the incident highlights the ongoing challenges of securing AI integrations. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions</strong>: OX Security disclosed critical vulnerabilities in four popular VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—totaling 128 million installs. These flaws enable file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, three other maintainers never responded, leaving millions of developers exposed to risks from untrusted files and web pages. Developers are advised to update Live Preview and disable unused extensions. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agent development, security, and governance accelerate</strong>: Enterprises are rapidly adopting and developing agentic AI, focusing on autonomous AI agents for various tasks, with new tools and frameworks emerging for security, evaluation, and data integration. <a href="https://app.daily.dev/feed-by-ids?id=2UmMyMAEf&amp;id=32FCqrqN0&amp;id=4fmmBjp20&amp;id=Ck3BiV0To&amp;id=bbSNghGeS&amp;id=fvUXvxfty&amp;id=hYwz99Mp8&amp;id=i8naoDZlv&amp;id=nicRNl9Cx&amp;id=pJKpsRETp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI model performance, cost, and sovereign AI initiatives</strong>: Anthropic’s new Claude Sonnet 4.6 is marketed as cheaper and improved, but independent benchmarks suggest it’s a ‘token muncher,’ while India and Japan push for sovereign AI with NVIDIA’s help. <a href="https://app.daily.dev/feed-by-ids?id=i4O6sQBIw&amp;id=j12nF8mSg&amp;id=jj2Kauaop&amp;id=lUz1VvbAr&amp;id=y0N7mzotz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s impact on software development and engineering roles</strong>: Spotify’s CEO claims senior developers haven’t written code since December 2025, supervising AI instead, while others warn AI accelerates both good and bad practices, making TDD and ‘Outcome Engineering’ critical. <a href="https://app.daily.dev/feed-by-ids?id=7hHra6Ai0&amp;id=WUJRo6v7h&amp;id=enHqyOYiB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-assisted coding tools and agentic development trends</strong>: New tools like DiffPrism are emerging for reviewing AI-generated code, while experts debate frameworks for improving coding agents and the shift from fragmented tools to integrated custom runtimes. <a href="https://app.daily.dev/feed-by-ids?id=XVyPsqBUP&amp;id=qulPHX7Sg&amp;id=zU6J5TUqH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s dual impact: workforce disruption and skill development</strong>: Many executives are cutting headcount in anticipation of AI, but actual productivity gains are scarce, while OpenAI partners with Indian universities to embed AI skills, highlighting a global push for AI literacy. <a href="https://app.daily.dev/feed-by-ids?id=FtPdxfWs5&amp;id=GcBedQWU0&amp;id=XYiUFiLYo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KDE Plasma 6.6 released with OCR and new keyboard</strong>: KDE Plasma 6.6 is out, bringing OCR functionality to its screenshot tool, a new on-screen keyboard, a first-run setup wizard, and smoother animations on high-refresh-rate displays. <a href="https://app.daily.dev/posts/klCS43HPr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale peer relays general availability</strong>: Tailscale announced the general availability of Peer Relays, allowing users to deploy high-throughput relay nodes on any Tailscale device to improve network connectivity and performance, even in restrictive cloud environments. <a href="https://app.daily.dev/posts/Q0uzlfbeJ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic’s misleading C compiler claims</strong>: Anthropic released a marketing video claiming Claude built a C compiler ‘from scratch’ with ‘no human intervention’ that could compile Linux. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t even boot Linux. But hey, 16 AI agents running for two weeks to produce a 100,000-line compiler is still pretty neat, if only they didn’t feel the need to lie about it. <a href="https://app.daily.dev/posts/0csgEkRMy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Executives report no AI productivity gains</strong>: A survey of nearly 6,000 executives found over 80% reported no measurable impact from AI on productivity or employment over the past three years. Yet, they anticipate AI will eliminate 1.75 million jobs by 2028. So, AI isn’t making things better, but it’s definitely going to get rid of people. Sounds like a solid business plan, right? <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mandatory AI tooling metrics</strong>: A developer is critiquing their company’s new internal metric mandating 80% of epics use AI tooling, arguing it measures tool usage rather than actual business outcomes. Because nothing says ‘innovation’ like forcing developers to use AI, regardless of whether it actually helps or just adds another layer of bureaucracy. It’s almost like some people care more about checking a box than delivering value. <a href="https://app.daily.dev/posts/8WhnSQAtX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
