<h2>Must know</h2>
<ul>
<li><strong>Google Chrome zero-day under active exploitation</strong>: Google has released an urgent update for Chrome (versions 145.0.7632.75/76 for Windows/Mac and 144.0.7559.75 for Linux) to patch CVE-2026-2441, a high-severity use-after-free vulnerability in its CSS font feature parsing. This is Chrome’s first zero-day of 2026 and is actively being exploited in the wild, allowing arbitrary code execution within the browser sandbox. Users are advised to update immediately. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot Chat bug exposes confidential emails</strong>: Microsoft confirmed a security bug (CW1226324) in Copilot Chat that allowed the AI to bypass confidentiality labels and Data Loss Prevention (DLP) policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. The flaw, active since late January, highlights ongoing enterprise concerns about AI tools accessing sensitive corporate data, especially after previous Copilot security issues and the European Parliament’s ban on AI features on work devices. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities found in popular VS Code extensions</strong>: OX Security disclosed critical vulnerabilities in four popular VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—collectively accounting for 128 million installs. These flaws enable file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, three other maintainers never responded, leaving millions of developers at risk. Developers are advised to update Live Preview and disable unused extensions. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agent development platforms get major updates</strong>: LangSmith Agent Builder released updates including a central ‘Chat’ agent for workspace tools, scheduled agents, file upload support, and a unified tool registry, while Databricks launched Custom Agents for building, testing, and deploying production-quality AI agents with built-in memory and enterprise data access. <a href="https://app.daily.dev/feed-by-ids?id=4idREqj8d&amp;id=QJn2roYcs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s impact on software development and developer roles</strong>: AI coding tools pose risks to individual developer skills like architectural thinking and debugging, necessitating practices like independent problem-solving and manual rewriting of AI-generated code to maintain proficiency, while also shifting the focus to running reliable SaaS rather than just building it. <a href="https://app.daily.dev/feed-by-ids?id=kWLIS5WCy&amp;id=opnnf1fiE&amp;id=wkXrrIVmO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mistral AI acquires Koyeb to expand compute ambitions</strong>: Mistral AI acquired cloud startup Koyeb, integrating its serverless deployment platform into Mistral Compute, signaling a strategic shift towards full-stack AI infrastructure to target enterprise customers with data residency and hybrid deployment needs. <a href="https://app.daily.dev/posts/s077dNRb2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sarvam AI launches new models and expands device integration</strong>: Indian AI startup Sarvam AI launched new open-source 30B and 105B parameter LLMs, along with text-to-speech, speech-to-text, and vision models, and is expanding into consumer devices like Nokia feature phones, cars, and smart glasses with lightweight edge AI models. <a href="https://app.daily.dev/feed-by-ids?id=JaYsn9TtR&amp;id=NDuZu47ZF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Cloud expands enterprise AI and database capabilities</strong>: Google Cloud partnered with Ab Initio for new data and metadata connectors and AI agents for enterprise agentic AI, while Google Cloud Spanner was highly ranked by Gartner for lightweight and OLTP transactions, with new features like Spanner Graph and a columnar engine. <a href="https://app.daily.dev/feed-by-ids?id=hYwz99Mp8&amp;id=j9PQkxrff" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents leverage structured knowledge and Google Cloud MCP</strong>: Organizations are building agentic knowledge bases using patterns like coding assistant playbooks and schema-driven knowledge graphs to provide AI agents with institutional context, while Google Cloud launched managed MCP servers for its major database products, offering secure, IAM-authenticated access to operational data. <a href="https://app.daily.dev/feed-by-ids?id=l5kVESwg0&amp;id=qBKhvArRq&amp;id=wLx806hAH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy introduces instant Linux microVMs</strong>: Deno Deploy introduced <code>deno sandbox</code>, a new subcommand for instantly provisioning cloud-hosted Linux microVMs and SSH-connecting in under a second, featuring a secrets mechanism that injects values at the network level without exposing raw secrets to sandbox code. <a href="https://app.daily.dev/posts/7Ar3LQ3uM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI productivity impact: much ado about nothing?</strong>: A survey of nearly 6,000 executives found over 80% reported no measurable impact from AI on productivity or employment, with 89% seeing no gains in the past three years. Yet, these same executives anticipate AI will eliminate 1.75 million jobs by 2028. So, AI isn’t doing anything now, but it’s definitely coming for your job later. Got it. (Source: NBER survey) <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s C compiler: AI built it, humans marketed it badly</strong>: Anthropic claimed Claude built a C compiler ‘from scratch’ with ‘no human intervention,’ capable of compiling Linux and Doom. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t actually boot Linux. The real achievement of 16 AI agents autonomously running for two weeks was overshadowed by what critics called ‘dishonest marketing language.’ (Source: various reports) <a href="https://app.daily.dev/posts/0csgEkRMy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI slop is drowning open source, but GitHub is on it (maybe)</strong>: Open-source projects are getting buried under a mountain of low-quality, AI-generated contributions, or ‘AI slop,’ draining maintainer morale. Godot’s maintainer called AI-generated PRs ‘draining and demoralizing.’ GitHub, partly blamed for incentivizing this mess, is now promising mitigations like PR deletion and automated triage. Because nothing says ‘innovation’ like having to build tools to clean up the mess your other tools made. (Source: various reports) <a href="https://app.daily.dev/feed-by-ids?id=3asgSozXp&amp;id=BZXtjLZmd&amp;id=MwJCH4Dcn&amp;id=HouoEDJq7&amp;id=QnWXK2Mm8&amp;id=YaGme2ewn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
