<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google has released an urgent update for Chrome (version 145.0.7632.75/76) to patch CVE-2026-2441, a high-severity use-after-free vulnerability in its CSS font feature parsing that is actively being exploited in the wild. This marks Chrome’s first zero-day of the year, allowing for potential arbitrary code execution within the browser sandbox. The fix involves preventing modification of the underlying map during traversal, highlighting the critical need for immediate updates. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions</strong>: OX Security has disclosed critical vulnerabilities in four widely used VS Code extensions, including Live Server (72M downloads) and Code Runner (37M), totaling 128 million installs. These flaws enable file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched its Live Preview extension, most maintainers never responded to disclosure notices, leaving millions of developers exposed to risks from untrusted files and web pages. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot chat security flaw exposes confidential emails</strong>: Microsoft confirmed a security bug (CW1226324) in Copilot Chat that allowed the AI to bypass confidentiality labels and Data Loss Prevention (DLP) policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. The flaw, active since late January, highlights ongoing enterprise anxiety about AI tools accessing sensitive corporate data, especially after previous Copilot security concerns and the European Parliament’s decision to block built-in AI features on work devices. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI model performance and cost trade-offs</strong>: Anthropic’s new Claude Sonnet 4.6, marketed as 40% cheaper, has been identified by independent benchmarks as a ‘token muncher,’ using significantly more tokens for ‘adaptive thinking,’ potentially negating its per-token price advantage for heavy use cases. <a href="https://app.daily.dev/feed-by-ids?id=i4O6sQBIw&amp;id=j12nF8mSg&amp;id=jj2Kauaop&amp;id=lUz1VvbAr&amp;id=y0N7mzotz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s impact on software development and engineering roles</strong>: Spotify’s CEO claims senior developers haven’t written code since December 2025, instead supervising AI-generated code, while others note AI fatigue from reviewing large amounts of generated code and the need for developers to shift from ‘bricklayer’ to ‘entrepreneurial’ mindsets focused on system design. <a href="https://app.daily.dev/feed-by-ids?id=7hHra6Ai0&amp;id=WUJRo6v7h&amp;id=enHqyOYiB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale launches peer relays and security integrations</strong>: Tailscale has made Peer Relays generally available for high-throughput, customer-deployed relay nodes and integrated with Huntress EDR and Fleet MDM to automate device posture enforcement in access policies, enhancing security and reducing lateral movement risk. <a href="https://app.daily.dev/feed-by-ids?id=Q0uzlfbeJ&amp;id=L7iJSIIDS&amp;id=VukD3HNtV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 performance regressions on Intel Panther Lake</strong>: Early benchmarks indicate performance regressions for Linux 7.0 on Intel Core Ultra Series 3 ‘Panther Lake’ hardware, affecting both CPU and iGPU performance, despite expected improvements for Intel Xe graphics. <a href="https://app.daily.dev/posts/5CIXyHDbR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Red Hat launches enterprise Podman Desktop and digital sovereignty tool</strong>: Red Hat released an enterprise-supported build of Podman Desktop, addressing demand from regulated industries for vendor-backed open-source container tooling, and also launched an open-source Digital Sovereignty Readiness Assessment tool to help organizations evaluate their posture. <a href="https://app.daily.dev/feed-by-ids?id=iEOJ6oeIq&amp;id=BbCX80GL5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks launches custom agents and predictive optimization</strong>: Databricks introduced Custom Agents (formerly Agent Framework) for building, testing, and deploying production-quality AI agents on serverless compute, alongside making Predictive Optimization the default for new Unity Catalog tables to automate data management. <a href="https://app.daily.dev/feed-by-ids?id=QJn2roYcs&amp;id=IMEzjWlYo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New developer tools for cloud deployment and streaming</strong>: Deno Deploy introduced <code>deno sandbox</code> for instant Linux microVM provisioning, TinyIce offers a lightweight, Icecast2-compatible audio streaming server, and Konta brings GitOps workflows to Docker Compose on low-resource VPS environments. <a href="https://app.daily.dev/feed-by-ids?id=7Ar3LQ3uM&amp;id=BHwbWnzAf&amp;id=QRFLXVuPF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI productivity paradox: more code, less shipping</strong>: Stack Overflow’s 2025 survey shows AI tool usage at 84% but developer trust dropped to 29%, while CircleCI’s report indicates AI-driven code generation is creating delivery bottlenecks, with main branch success rates at a five-year low. So, we’re generating more code than ever, but actually shipping less. Progress! <a href="https://app.daily.dev/feed-by-ids?id=alUW9sJXE&amp;id=guYQJk0m5&amp;id=okTNHJRhB&amp;id=sc19eWuhU&amp;id=vbdTHZjVN&amp;id=xQwTKeb7K&amp;id=ySpIGlBP7&amp;id=ygeEuk5Vz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Executives cut jobs based on AI hype, not results</strong>: A Harvard Business Review survey found 60% of executives reduced headcount anticipating AI’s impact, yet only 2% reported measurable results from actual AI implementations. Meanwhile, Oxford Economics notes many ‘AI layoffs’ are just old-fashioned cost-cutting rebranded as innovation. Apparently, the ‘AI revolution’ is mostly happening in PowerPoint presentations and HR departments. <a href="https://app.daily.dev/feed-by-ids?id=FtPdxfWs5&amp;id=GcBedQWU0&amp;id=XYiUFiLYo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s C compiler: a triumph of marketing over reality</strong>: Anthropic released a marketing video claiming Claude built a C compiler ‘from scratch’ with ‘no human intervention’ that could compile Linux. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t even boot Linux. But hey, 16 AI agents autonomously running for two weeks to produce a 100,000-line functional compiler is still pretty neat, if you ignore the ‘dishonest marketing language.’ <a href="https://app.daily.dev/feed-by-ids?id=0csgEkRMy&amp;id=1CyjIJfh9&amp;id=6spQIGtcM&amp;id=dhghNjegM&amp;id=poO8tUjKL&amp;id=v3dp2qPCw&amp;id=vTvxCCQVI&amp;id=z9Rc6eFF4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
