<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day vulnerability under active exploitation</strong>: Google has released an urgent update for Chrome (version 145.0.7632.75/76) to patch CVE-2026-2441, a high-severity use-after-free bug in its CSS font feature value map parsing. This is Chrome’s first zero-day of 2026 and is actively being exploited in the wild. The vulnerability allows arbitrary code execution within the browser sandbox, making immediate updates critical for all users. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions disclosed</strong>: OX Security has revealed critical vulnerabilities in four widely used VS Code extensions: Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview, collectively impacting over 128 million installs. These flaws could lead to file theft, remote code execution, and local network reconnaissance. While Microsoft silently patched Live Preview, many maintainers have not responded, urging developers to update extensions and exercise caution. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Interop 2026 aims to standardize web features</strong>: Major browser vendors including Google, Apple, Microsoft, and Mozilla have announced Interop 2026, a collaborative effort to improve cross-browser compatibility for 15 new web platform features. This initiative targets key areas like CSS <code>attr()</code>, container style queries, and <code>contrast-color()</code>, aiming to reduce developer headaches caused by inconsistent browser implementations. The annual report highlights progress and remaining bottlenecks, pushing for a more unified web development experience. <a href="https://app.daily.dev/feed-by-ids?id=RoxLCkIyX&amp;id=wpmh0wCvn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Laravel releases new Svelte starter kit</strong>: Laravel now offers an official Svelte starter kit for Laravel 12, joining React, Vue, and Livewire, featuring Inertia.js, Svelte 5, TypeScript, Tailwind CSS, and shadcn-svelte components. <a href="https://app.daily.dev/posts/J0baIl5WX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TanStack hotkeys library released</strong>: TanStack Hotkeys, a new type-safe, cross-platform keyboard shortcut library, offers sequence detection, key state tracking, and framework adapters for React, with smart handling for input fields and DOM scoping. <a href="https://app.daily.dev/posts/Kv2uzcMrl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>VectorNest offers browser-based SVG editing</strong>: VectorNest is a free, MIT-licensed, browser-based SVG editor designed for front-end developers, streamlining web icon creation and outputting optimized SVG code without post-processing. <a href="https://app.daily.dev/posts/KjiWOFqgs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailwind CSS component vs utility distinction clarified</strong>: The distinction between ‘components’ and ‘utilities’ in Tailwind CSS is more semantic than practical, with a cleaner approach suggesting defining component-like styles using <code>@utility</code> and overriding with <code>!important</code> directly in HTML. <a href="https://app.daily.dev/posts/KjiWOFqgs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft releases Python environments extension for VS Code</strong>: Microsoft’s Python Environments extension for VS Code is now generally available, unifying management of various Python environments (venv, conda, pyenv) and integrating with <code>uv</code> for faster operations. <a href="https://app.daily.dev/posts/8eMAsrXbx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno deploy introduces instant linux microVMs</strong>: Deno Deploy now features <code>deno sandbox</code>, a new subcommand for provisioning cloud-hosted Linux microVMs and SSH-connecting in under a second, complete with a secrets mechanism for secure outbound requests. <a href="https://app.daily.dev/posts/7Ar3LQ3uM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MongoExplain helps identify slow MongoDB queries in Ruby/Rails</strong>: MongoExplain is a Ruby/Rails gem that monitors MongoDB operations and surfaces explain plans in real-time via a Rails Engine overlay or console logs, helping developers identify expensive or unindexed queries. <a href="https://app.daily.dev/feed-by-ids?id=EIQLjesbE&amp;id=Yq8Rmi5fX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will make you an ‘AI-ready full stack developer’</strong>: A developer shared their 3-year journey to becoming a ‘Fullstack AI Engineer,’ emphasizing discipline, building projects, and leveraging AI tools. Apparently, the secret sauce involves multiple internships, failed startups, and dozens of rejections, all while AI magically transforms you into an ‘AI-ready’ expert. Because, you know, AI just hands out dream jobs now. <a href="https://app.daily.dev/posts/FtPdxfWs5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding assistants are ‘overhyped’ but secretly useful</strong>: The articles claim AI coding assistants are ‘overhyped’ in 2026, yet the author ‘secretly’ uses them for boilerplate, debugging, and automating release workflows. So, it’s overhyped if you’re talking about it, but perfectly fine if you’re quietly getting your grunt work done. Sounds like someone wants to keep their AI advantage a secret. <a href="https://app.daily.dev/posts/alUW9sJXE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI democratizes online presence for small businesses</strong>: Indian ‘vibe-coding’ platform Emergent hit $100M revenue by letting non-technical users build apps with natural language, while <a href="http://WordPress.com" target="_blank" rel="noopener nofollow">WordPress.com</a> launched an AI Assistant for website modifications. Because, apparently, the biggest barrier to small business success was the inability to ‘vibe-code’ a CRM, and not, say, actual business acumen or market demand. <a href="https://app.daily.dev/posts/cyEsB6IQv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
