<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day vulnerability under active exploitation</strong>: Google just dropped an urgent Chrome update (145.0.7632.75/76) to patch CVE-2026-2441, a high-severity use-after-free bug in its CSS font feature parsing that’s already being actively exploited. This is Chrome’s first zero-day of 2026, and it could lead to arbitrary code execution inside the browser sandbox. Update your Chrome now, unless you enjoy living dangerously. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot Chat security flaw exposes confidential emails</strong>: Microsoft confirmed a bug in Copilot Chat (CW1226324) that allowed the AI to bypass confidentiality labels and DLP policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. The flaw, active since late January, highlights the ongoing enterprise anxiety about AI tools accessing sensitive corporate data, especially after previous Copilot security concerns and the European Parliament blocking built-in AI features on work devices. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions disclosed</strong>: OX Security found critical flaws in four popular VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—totaling 128 million installs. These vulnerabilities could allow file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, three other maintainers haven’t responded, leaving millions of developers exposed. Time to audit those extensions, folks. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic Sonnet 4.6 release: performance claims vs actual cost concerns</strong>: Anthropic released Claude Sonnet 4.6, claiming it matches or exceeds Opus 4.6 performance on enterprise benchmarks at a significantly lower per-token price. However, independent analysis suggests Sonnet 4.6 uses over 4x more tokens than its predecessor, potentially negating its cost advantage in practice. <a href="https://app.daily.dev/feed-by-ids?id=3TzVcx3Vs&amp;id=i4O6sQBIw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mistral AI acquires Koyeb, expands compute ambitions</strong>: Mistral AI acquired cloud startup Koyeb, integrating its serverless platform into Mistral Compute, signaling a strategic shift towards full-stack AI infrastructure and aiming to be a sovereign European alternative to US hyperscalers. <a href="https://app.daily.dev/posts/s077dNRb2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot expands AI model and Windows support</strong>: GitHub Copilot now integrates Claude Opus 4.6 across various IDEs and platforms, and its autonomous coding agent finally supports Windows development environments, expanding its reach for enterprise users. <a href="https://app.daily.dev/feed-by-ids?id=49jCLhThU&amp;id=xntn7IAsM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Asahi Linux progress on Apple M3 and Apple Silicon support</strong>: Asahi Linux continues to make strides, with key peripherals like keyboard, touchpad, and WiFi now working on Apple M3 hardware, and DisplayPort Alt Mode via USB-C progressing in experimental branches. <a href="https://app.daily.dev/posts/9Q140qigi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy introduces instant Linux microVMs with <code>deno sandbox</code></strong>: Deno Deploy launched <code>deno sandbox</code>, a new subcommand that provisions cloud-hosted Linux microVMs and SSH-connects in under a second, complete with a secrets mechanism for secure outbound requests. <a href="https://app.daily.dev/posts/7Ar3LQ3uM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KDE Plasma 6.6 release features</strong>: KDE Plasma 6.6 is out, bringing new features like OCR in the Spectacle screenshot tool, a new Plasma Keyboard, a first-run wizard, and smoother animations for high-refresh-rate displays. <a href="https://app.daily.dev/posts/klCS43HPr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TanStack Hotkeys library release</strong>: TanStack Hotkeys, a new type-safe, cross-platform keyboard shortcut library, has been released, offering sequence detection, key state tracking, and framework adapters for React and others. <a href="https://app.daily.dev/posts/Kv2uzcMrl" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI productivity impact: executives report no measurable gains</strong>: A survey of nearly 6,000 executives by NBER found over 80% reported no measurable impact from AI on productivity or employment, with 89% seeing no gains in the past three years. Despite 69% of businesses using some form of AI, the hype continues to outpace actual business outcomes. But don’t worry, they still anticipate AI will eliminate 1.75 million jobs by 2028. Priorities, right? <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s C compiler: a masterclass in misleading marketing</strong>: Anthropic claimed Claude built a C compiler ‘from scratch’ with ‘no human intervention,’ capable of compiling Linux and Doom. Turns out, it used 37 years of GCC test suites, an online GCC oracle, required human restarts, cost $20,000 in API calls, and couldn’t even boot Linux. A genuine achievement overshadowed by what one article called ‘dishonest marketing language.’ Classic. <a href="https://app.daily.dev/posts/0csgEkRMy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents leverage structured knowledge and Google Cloud MCP</strong>: Organizations are building ‘agentic knowledge bases’ to give AI agents ‘institutional context’ for ‘reliable operation.’ Meanwhile, Google Cloud launched managed MCP servers for its databases, because apparently, AI agents can’t just read a manual. It’s all about reducing ‘tribal knowledge’ and enabling ‘traceable, consistent agent behavior.’ Or, you know, just writing clear documentation that humans can read. <a href="https://app.daily.dev/feed-by-ids?id=l5kVESwg0&amp;id=qBKhvArRq&amp;id=wLx806hAH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
