<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google just dropped an urgent Chrome update (145.0.7632.75/76) to patch CVE-2026-2441, a high-severity use-after-free bug in its CSS font feature parsing. This is Chrome’s first zero-day of the year and is already being actively exploited in the wild, allowing arbitrary code execution within the browser sandbox. Update your Chrome now, unless you enjoy living dangerously. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot Chat leaks confidential emails</strong>: Microsoft confirmed a security bug (CW1226324) in Copilot Chat that allowed the AI to bypass confidentiality labels and Data Loss Prevention (DLP) policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. This flaw, active since late January, highlights the ongoing enterprise anxiety about AI tools accessing sensitive corporate data, especially after the European Parliament already blocked built-in AI features on work devices due to similar concerns. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions</strong>: OX Security disclosed critical vulnerabilities in four popular VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—collectively accounting for 128 million installs. These flaws enable file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, three other maintainers never responded, leaving millions of developers exposed. Time to audit those extensions, folks. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic Sonnet 4.6 released with performance claims</strong>: Anthropic released Claude Sonnet 4.6, claiming it matches or exceeds Opus 4.6 performance on enterprise benchmarks at a significantly lower price, though independent analysis suggests it uses over 4x more tokens, potentially negating cost savings. <a href="https://app.daily.dev/feed-by-ids?id=3TzVcx3Vs&amp;id=i4O6sQBIw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mistral AI acquires Koyeb for compute expansion</strong>: Mistral AI acquired cloud startup Koyeb, integrating its serverless platform into Mistral Compute, signaling a strategic shift towards full-stack AI infrastructure and aiming to be a sovereign European alternative to US hyperscalers. <a href="https://app.daily.dev/posts/s077dNRb2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sarvam AI launches new models and expands device integration</strong>: Indian AI startup Sarvam launched new open-source 30B and 105B parameter LLMs, along with text-to-speech, speech-to-text, and vision models, and is expanding into consumer devices like Nokia phones and smart glasses with lightweight edge AI. <a href="https://app.daily.dev/feed-by-ids?id=JaYsn9TtR&amp;id=NDuZu47ZF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks acquires Koi Security for AI agent governance</strong>: Palo Alto Networks acquired Koi Security for $400 million to monitor and govern software components, browser extensions, and AI models at the endpoint layer, addressing security risks from AI agents in corporate environments. <a href="https://app.daily.dev/feed-by-ids?id=3Hx9gllgC&amp;id=U1HM18ytf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot expands AI model and Windows support</strong>: GitHub Copilot now integrates Claude Opus 4.6 across various IDEs and platforms, and its autonomous coding agent now supports Windows development environments, expanding its reach for AI-assisted coding. <a href="https://app.daily.dev/feed-by-ids?id=49jCLhThU&amp;id=xntn7IAsM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy introduces instant Linux microVMs</strong>: Deno Deploy launched <code>deno sandbox</code>, a new subcommand for instantly provisioning cloud-hosted Linux microVMs and SSH-connecting in under a second, complete with a secrets mechanism for secure outbound requests. <a href="https://app.daily.dev/posts/7Ar3LQ3uM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Asahi Linux progresses on Apple M3 and Apple Silicon</strong>: Asahi Linux continues to make strides in supporting Apple M3 hardware, with key peripherals like keyboard, touchpad, WiFi, and USB3 now functional, though a general availability release for M3 is delayed until quality matches M1/M2 standards. <a href="https://app.daily.dev/posts/9Q140qigi" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI productivity impact: much ado about nothing?</strong>: An NBER survey of nearly 6,000 executives found over 80% reported no measurable impact from AI on productivity or employment, with 89% seeing no gains in the last three years. Yet, these same executives anticipate AI will eliminate 1.75 million jobs by 2028. So, AI isn’t doing anything now, but it’s definitely coming for your job later. Got it. (Source: NBER) <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s C compiler: a tale of marketing vs. reality</strong>: Anthropic proudly announced Claude built a C compiler ‘from scratch’ with ‘no human intervention,’ capable of compiling Linux and Doom. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t actually boot Linux. It’s almost like ‘from scratch’ and ‘no human intervention’ mean something entirely different in AI marketing-speak. (Source: Anthropic, various breakdowns) <a href="https://app.daily.dev/posts/0csgEkRMy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI slop is the new open-source contribution</strong>: Open-source projects are drowning in ‘AI slop’—low-quality, AI-generated pull requests that look professional but are often nonsensical, draining maintainers’ morale and capacity. GitHub, which incentivizes this behavior, is now scrambling to implement mitigations. It’s a classic case of ‘move fast and break things,’ except now ‘things’ include the very foundations of collaborative software development. (Source: Godot Engine maintainer, GitHub) <a href="https://app.daily.dev/feed-by-ids?id=HouoEDJq7&amp;id=QnWXK2Mm8&amp;id=YaGme2ewn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
