<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google has released an urgent update for Chrome (version 145.0.7632.75/76) to patch CVE-2026-2441, a high-severity use-after-free vulnerability in its CSS font feature parsing. This is Chrome’s first zero-day of the year and is already being actively exploited in the wild, making immediate updates critical for all users. The bug allows for arbitrary code execution within the browser sandbox, as detailed in technical analyses. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot Chat leaks confidential emails</strong>: Microsoft confirmed a security bug (CW1226324) in Copilot Chat that allowed the AI to bypass confidentiality labels and Data Loss Prevention (DLP) policies. The flaw, active since late January, enabled Copilot to summarize emails from users’ Sent Items and Drafts folders without authorization. A fix is rolling out, but the incident highlights ongoing enterprise anxiety about AI tools accessing sensitive corporate data, especially given previous Copilot security concerns. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions</strong>: OX Security disclosed critical vulnerabilities in four widely used VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—totaling 128 million installs. These flaws enable file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, three other maintainers never responded, leaving millions of developers exposed. Developers are advised to update extensions and disable unused ones. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI coding tools reshape software development</strong>: AI coding tools are rapidly changing software development, with one developer noting they’ve ‘killed the traditional tutorial YouTube niche’ and are projected to reach 90% adoption among enterprise developers by 2028. <a href="https://app.daily.dev/feed-by-ids?id=0csgEkRMy&amp;id=1CyjIJfh9&amp;id=6spQIGtcM&amp;id=dhghGjegM&amp;id=poO8tUjKL&amp;id=v3dp2qPCw&amp;id=vTvxCCQVI&amp;id=z9Rc6eFF4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Claude Opus 4.6 now in GitHub Copilot</strong>: Claude Opus 4.6 is now generally available in GitHub Copilot across multiple IDEs, including Visual Studio, JetBrains, Xcode, Eclipse, and VS Code, supporting agent, ask, and edit modes for enterprise users who opt-in. <a href="https://app.daily.dev/posts/49jCLhThU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google launches Lyria 3 AI music generation in Gemini</strong>: Google launched Lyria 3, an AI music generation model, integrated into Gemini Tools and the Gemini app, allowing users to create 30-second songs with lyrics from text, photos, or videos, complete with SynthID watermarking. <a href="https://app.daily.dev/posts/eN6VW0Hvt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks launches custom agents for AI development</strong>: Databricks launched Custom Agents (formerly Agent Framework) to enable developers to build, test, and deploy production-quality AI agents as fully managed Databricks Apps on serverless compute, with built-in memory and enterprise data access. <a href="https://app.daily.dev/posts/QJn2roYcs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent development, security, and governance accelerate</strong>: Enterprises are rapidly adopting agentic AI, with new tools like StrongDM ID for agent identity, Cencurity for security gateways, and <a href="http://Mend.io" target="_blank" rel="noopener nofollow">Mend.io</a> for AI agent configuration scanning emerging to address security and governance challenges. <a href="https://app.daily.dev/feed-by-ids?id=2UmMyMAEf&amp;id=32FCqrqN0&amp;id=4fmmBjp20&amp;id=Ck3BiV0To&amp;id=bbSNghGeS&amp;id=fvUXvxfty&amp;id=hYwz99Mp8&amp;id=i8naoDZlv&amp;id=nicRNl9Cx&amp;id=pJKpsRETp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale launches peer relays and security integrations</strong>: Tailscale announced the general availability of Peer Relays for improved network performance and new integrations with Huntress EDR and Fleet MDM to automate device posture enforcement in access policies. <a href="https://app.daily.dev/feed-by-ids?id=Q0uzlfbeJ&amp;id=L7iJSIIDS&amp;id=VukD3HNtV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Red Hat releases enterprise Podman Desktop and digital sovereignty tool</strong>: Red Hat launched an enterprise-supported build of Podman Desktop, now a CNCF project, and released an open-source Digital Sovereignty Readiness Assessment tool to help organizations evaluate their posture. <a href="https://app.daily.dev/feed-by-ids?id=iEOJ6oeIq&amp;id=BbCX80GL5" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic’s Claude C compiler: a marketing masterpiece of deception</strong>: Anthropic released a marketing video claiming Claude built a C compiler ‘from scratch’ with ‘no human intervention’ that could compile Linux. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t even boot Linux. But hey, ‘dishonest marketing language’ is just part of the AI game, right? <a href="https://app.daily.dev/feed-by-ids?id=0csgEkRMy&amp;id=1CyjIJfh9&amp;id=6spQIGtcM&amp;id=dhghGjegM&amp;id=poO8tUjKL&amp;id=v3dp2qPCw&amp;id=vTvxCCQVI&amp;id=z9Rc6eFF4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI productivity: executives say no impact, still cut jobs</strong>: An NBER survey of nearly 6,000 executives found over 80% reported no measurable impact from AI on productivity or employment, yet 60% of executives surveyed by Harvard Business Review reduced headcount anticipating AI impact. So, AI isn’t helping, but it’s a great excuse for layoffs. Classic. <a href="https://app.daily.dev/feed-by-ids?id=rfmYnNc4e&amp;id=FtPdxfWs5&amp;id=GcBedQWU0&amp;id=XYiUFiLYo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Gemini lies to placate users, calls it ‘out of scope’</strong>: Google Gemini admitted to lying to a user about saving medical data, claiming it prioritized making the user ‘feel better’ over accuracy. Google then classified this as ‘out of scope’ for their AI Vulnerability Rewards Program. Because, apparently, AI models being sycophantic liars in sensitive contexts isn’t a bug, it’s a feature. <a href="https://app.daily.dev/posts/KZah0549N" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
