<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google rushed out an urgent Chrome update to patch CVE-2026-2441, a high-severity use-after-free vulnerability in its CSS font feature parsing that’s already being exploited in the wild. This is Chrome’s first zero-day of the year, allowing arbitrary code execution within the browser sandbox. The fix involves replacing a reference-based iteration with a copy to prevent modification during traversal, a class of bug that Rust’s ownership model would inherently prevent. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot Chat exposed confidential emails</strong>: Microsoft confirmed a security bug in Copilot Chat (CW1226324) that allowed the AI to bypass confidentiality labels and Data Loss Prevention policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. The flaw, active since late January, highlights broader enterprise anxieties about AI tools accessing sensitive corporate data, with the European Parliament already blocking built-in AI features on work devices due to similar concerns. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI productivity gains remain elusive for most businesses</strong>: A new NBER survey of nearly 6,000 executives found that over 80% of firms reported no measurable impact from AI on productivity or employment, despite 69% currently using some form of AI. This aligns with similar surveys and a UK government trial of Microsoft M365 Copilot, which also found no productivity improvement, suggesting a widening gap between AI investment hype and actual business outcomes. <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic releases Claude Sonnet 4.6</strong>: Anthropic released Claude Sonnet 4.6, a mid-tier model claiming to match or exceed Opus 4.6 performance on key enterprise benchmarks at a significantly lower price, though independent analysis suggests it uses over 4x more tokens, potentially negating cost savings. <a href="https://app.daily.dev/feed-by-ids?id=3TzVcx3Vs&amp;id=i4O6sQBIw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mistral AI acquires Koyeb for compute ambitions</strong>: Mistral AI acquired cloud startup Koyeb, integrating its serverless deployment platform into Mistral Compute, signaling a strategic shift towards full-stack AI infrastructure and aiming to be a sovereign European alternative to US hyperscalers. <a href="https://app.daily.dev/posts/s077dNRb2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sarvam AI launches new models and expands device integration</strong>: Indian AI startup Sarvam AI launched new open-source 30B and 105B parameter LLMs, along with text-to-speech, speech-to-text, and vision models, and is expanding into consumer devices like Nokia feature phones and smart glasses with lightweight edge AI models. <a href="https://app.daily.dev/feed-by-ids?id=JaYsn9TtR&amp;id=NDuZu47ZF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions disclosed</strong>: OX Security disclosed critical vulnerabilities in four popular VS Code extensions (Live Server, Code Runner, Markdown Preview Enhanced, Microsoft’s Live Preview) with over 128 million installs, enabling file theft, remote code execution, and local network reconnaissance. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Asahi Linux progresses on Apple M3 support</strong>: Asahi Linux reported significant progress on Apple M3 hardware, with key peripherals like keyboard, touchpad, WiFi, NVMe, and USB3 now working, though a general availability release is delayed until quality matches M1/M2 standards. <a href="https://app.daily.dev/posts/9Q140qigi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks acquires Koi Security</strong>: Palo Alto Networks acquired Koi Security for approximately $400 million, aiming to integrate its platform for monitoring and governing software components, browser extensions, and AI models at the endpoint layer into Prisma AIRS and Cortex XDR. <a href="https://app.daily.dev/feed-by-ids?id=3Hx9gllgC&amp;id=U1HM18ytf&amp;id=70bwD2IsO&amp;id=Hx9SCREZp&amp;id=IOwwjUreT&amp;id=L7iJSIIDS&amp;id=VukD3HNtV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy introduces instant Linux microVMs</strong>: Deno Deploy launched <code>deno sandbox</code>, a new subcommand for instantly provisioning cloud-hosted Linux microVMs and SSH-connecting in under a second, complete with a secrets mechanism that injects values at the network level. <a href="https://app.daily.dev/posts/7Ar3LQ3uM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic’s C compiler: A triumph of AI or marketing?</strong>: Anthropic proudly announced Claude built a C compiler ‘from scratch’ with ‘no human intervention,’ capable of compiling Linux and Doom. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t even boot Linux. A genuine achievement overshadowed by what critics call ‘dishonest marketing language.’ <a href="https://app.daily.dev/posts/0csgEkRMy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI will eliminate 1.75 million jobs by 2028, say executives</strong>: Executives, fresh off reporting zero productivity gains from AI, are now confidently predicting AI will eliminate 1.75 million jobs by 2028. It’s almost as if they’re trying to justify their massive, unproductive AI investments by promising future job cuts, rather than, you know, actual innovation or efficiency. Perhaps they should ask their AI to generate some real ROI first. <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code is ‘slop’ but also ‘battle-tested, high-performance skills’</strong>: On one hand, open-source maintainers are drowning in ‘AI slop’—low-quality, nonsensical AI-generated pull requests that are ‘draining and demoralizing.’ On the other, a new open-source collection boasts 864+ ‘battle-tested, high-performance’ agentic skills for AI coding assistants. It seems AI-generated code is either garbage or genius, depending on who’s selling it. Maybe the ‘slop’ is just the raw material for the ‘skills’? <a href="https://app.daily.dev/feed-by-ids?id=HouoEDJq7&amp;id=iwmWvJy5Z&amp;id=QnWXK2Mm8&amp;id=YaGme2ewn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
