<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google released an urgent update for Chrome (145.0.7632.75/76 for Windows/Mac and 144.0.7559.75 for Linux) to patch CVE-2026-2441, a high-severity use-after-free vulnerability in its CSS font feature parsing. This is Chrome’s first zero-day of the year, and Google confirmed it’s being actively exploited in the wild. The bug, written in C++, can lead to arbitrary code execution, highlighting the ongoing risks even in widely used software. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions</strong>: OX Security disclosed critical flaws in four popular VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—totaling 128 million installs. These vulnerabilities enable file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, three other maintainers never responded, leaving millions of developers exposed. This underscores the supply chain risks inherent in relying on third-party tools, even within trusted IDEs. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot chat security flaw exposed confidential emails</strong>: Microsoft confirmed a security bug (CW1226324) in Copilot Chat that allowed the AI to bypass confidentiality labels and Data Loss Prevention (DLP) policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. The flaw was active since late January, affecting Microsoft 365 business customers. This incident, reported by BleepingComputer, adds to growing concerns about AI tools accessing sensitive corporate data and highlights the challenges of securing AI in enterprise environments. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Asahi Linux makes progress on Apple M3</strong>: Asahi Linux is making significant strides on Apple M3 hardware, with core peripherals like keyboard, touchpad, WiFi, NVMe, and USB3 now functional, though a general release is delayed until quality matches M1/M2 support. <a href="https://app.daily.dev/posts/9Q140qigi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale launches peer relays for improved performance</strong>: Tailscale announced the general availability of Peer Relays, allowing users to deploy high-throughput relay nodes on any Tailscale device to improve network connectivity and performance, including support for static endpoints in restrictive cloud environments. <a href="https://app.daily.dev/posts/Q0uzlfbeJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Red Hat releases digital sovereignty assessment tool</strong>: Red Hat launched an open-source Digital Sovereignty Readiness Assessment tool to help organizations evaluate their posture across seven domains, offering a vendor-neutral self-service web application that can be self-hosted or used via a Red Hat-branded version. <a href="https://app.daily.dev/posts/BbCX80GL5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New developer tools for cloud deployment and streaming</strong>: Deno Deploy introduced <code>deno sandbox</code> for instant Linux microVM provisioning, TinyIce offers a lightweight Icecast2-compatible audio streaming server, and Konta brings GitOps workflows to Docker Compose on low-resource VPS environments. <a href="https://app.daily.dev/feed-by-ids?id=7Ar3LQ3uM&amp;id=BHwbWnzAf&amp;id=QRFLXVuPF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KDE Plasma 6.6 released with new features</strong>: KDE Plasma 6.6 is out, bringing OCR to the Spectacle screenshot tool, a new Plasma Keyboard, a first-run setup wizard, and smoother animations on high-refresh-rate displays. <a href="https://app.daily.dev/posts/klCS43HPr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AsteroidOS 2.0 smartwatch OS released</strong>: AsteroidOS 2.0, a Linux-based open-source smartwatch OS, was released after 8 years, featuring always-on display, tilt-to-wake, heart rate monitoring, and support for 15 new watch models. <a href="https://app.daily.dev/posts/o1EHa9rLg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Datadog launches APM recommendations</strong>: Datadog launched APM Recommendations, a new feature that analyzes telemetry to identify performance and reliability issues like N+1 queries and aggressive retries, providing priority scores and integration with existing workflows. <a href="https://app.daily.dev/feed-by-ids?id=0FmYqKdzI&amp;id=DKt3wvmEv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI productivity gains remain elusive for executives</strong>: A survey of nearly 6,000 executives found over 80% reported no measurable impact from AI on productivity or employment over the past three years. Despite 69% of businesses using some form of AI, the anticipated 1.4% productivity gains and 1.75 million job eliminations by 2028 are still just projections. So, all that AI hype? Turns out it’s mostly just that: hype, with no actual numbers to back it up yet, according to NBER. <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google launches Lyria 3 AI music generation in Gemini</strong>: Google launched Lyria 3, an AI music generation model, integrated into Gemini, allowing users to create 30-second songs with lyrics from text, photos, or videos. Google claims it avoids mimicking specific artists and includes copyright filters, but let’s be real, it’s probably just more AI-generated ‘musical slop’ for the masses. DeepMind developed this beta, so get ready for an influx of generic tunes with SynthID watermarks. <a href="https://app.daily.dev/posts/eN6VW0Hvt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mistral AI acquires Koyeb, aims for full-stack AI infrastructure</strong>: Mistral AI acquired cloud startup Koyeb, signaling a strategic shift towards full-stack AI infrastructure to target enterprise customers in regulated sectors. Analysts are already cautioning that Mistral’s smaller capital and narrower ecosystem limit its ability to compete with US hyperscalers like Microsoft, Google, and AWS. So, they’re trying to be a ‘sovereign European alternative,’ which sounds a lot like ‘we’re going to spend a lot of money trying to catch up to the big boys.’ <a href="https://app.daily.dev/posts/s077dNRb2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
