<h2>Must know</h2>
<ul>
<li><strong>Chrome zero-day under active exploitation</strong>: Google has released an urgent update for Chrome to patch CVE-2026-2441, a high-severity use-after-free vulnerability in its CSS font feature parsing that is actively being exploited in the wild. This is Chrome’s first zero-day of 2026, and a successful exploit could lead to arbitrary code execution within the browser sandbox. Users are advised to update immediately to version 145.0.7632.75/76 for Windows/Mac or 144.0.7559.75 for Linux, as reported by They Hacked CSS. <a href="https://app.daily.dev/posts/ISqaRw1RF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Copilot Chat exposes confidential emails</strong>: Microsoft confirmed a security bug in Copilot Chat (CW1226324) that allowed the AI to bypass confidentiality labels and Data Loss Prevention policies, summarizing emails from users’ Sent Items and Drafts folders without authorization. The flaw, active since late January, highlights broader enterprise anxieties about AI tools accessing sensitive corporate data, with a fix rolling out in early February, according to BleepingComputer. <a href="https://app.daily.dev/posts/jSmIdhAQU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities in popular VS Code extensions</strong>: OX Security disclosed critical vulnerabilities in four popular VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft’s Live Preview—collectively accounting for 128 million installs. These flaws enable file theft, remote code execution, and local network reconnaissance, with Microsoft silently patching its Live Preview extension without notifying OX Security. Developers are advised to update Live Preview and disable unused extensions. <a href="https://app.daily.dev/posts/IuDICegHN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic Sonnet 4.6 released with performance claims</strong>: Anthropic released Claude Sonnet 4.6, claiming it matches or exceeds Opus 4.6 performance on key enterprise benchmarks at a significantly lower price, featuring a 1M token context window in beta. <a href="https://app.daily.dev/feed-by-ids?id=3TzVcx3Vs&amp;id=i4O6sQBIw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot expands AI model and Windows support</strong>: Claude Opus 4.6 is now generally available within GitHub Copilot across various IDEs, and the Copilot coding agent now supports Windows development environments, previously limited to Linux. <a href="https://app.daily.dev/feed-by-ids?id=49jCLhThU&amp;id=xntn7IAsM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent security and development challenges</strong>: Traditional identity systems are inadequate for autonomous AI agents, leading to new solutions like StrongDM ID, while monday Service implemented an ‘evals-driven development’ framework for their LangGraph-based ReAct AI service agents. <a href="https://app.daily.dev/feed-by-ids?id=32FCqrqN0&amp;id=Ck3BiV0To&amp;id=DkoJdmMIy&amp;id=fvUXvxfty&amp;id=pa28ZgTOL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s impact on software development and developer roles</strong>: AI coding tools pose risks to individual developer skills, requiring intentional practice to maintain architectural thinking and debugging proficiency, while emphasizing the need for immutable, machine-readable requirements in AI-assisted coding. <a href="https://app.daily.dev/feed-by-ids?id=kWLIS5WCy&amp;id=opnnf1fiE&amp;id=wkXrrIVmO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mistral AI acquires Koyeb, expands compute ambitions</strong>: Mistral AI acquired cloud startup Koyeb, integrating its serverless deployment platform into Mistral Compute, signaling a strategic shift towards full-stack AI infrastructure and targeting enterprise customers. <a href="https://app.daily.dev/posts/s077dNRb2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sarvam AI launches new models and expands device integration</strong>: Indian AI startup Sarvam launched new open-source 30B and 105B parameter LLMs, along with text-to-speech, speech-to-text, and vision models, expanding into consumer devices like Nokia feature phones and smart glasses with lightweight edge AI models. <a href="https://app.daily.dev/feed-by-ids?id=JaYsn9TtR&amp;id=NDuZu47ZF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent development platforms receive major updates</strong>: LangSmith Agent Builder released updates including a central ‘Chat’ agent for workspace tools and a unified tool registry, while Databricks launched Custom Agents for building, testing, and deploying production-quality AI agents on serverless compute. <a href="https://app.daily.dev/feed-by-ids?id=4idREqj8d&amp;id=QJn2roYcs" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI productivity impact remains elusive for executives</strong>: An NBER survey of nearly 6,000 executives found over 80% reported no measurable impact from AI on productivity or employment, despite 69% of businesses using some form of AI. Executives anticipate AI will eliminate 1.75 million jobs by 2028, but actual gains are still a distant dream. So much for the AI revolution, I guess. <a href="https://app.daily.dev/posts/rfmYnNc4e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s C compiler claims debunked</strong>: Anthropic released a marketing video claiming Claude built a C compiler ‘from scratch’ with ‘no human intervention,’ but a critical breakdown reveals it used 37 years of GCC test suites, an online GCC oracle, and required human restarts. It cost $20,000 in API calls and couldn’t even boot Linux. ‘From scratch’ apparently means ‘with a lot of help and a huge bill.’ <a href="https://app.daily.dev/feed-by-ids?id=0csgEkRMy&amp;id=6spQIGtcM&amp;id=dhghGjegM&amp;id=kcB1LfSD2&amp;id=poO8tUjKL&amp;id=rsFWrvtAL&amp;id=v3dp2qPCw&amp;id=z9Rc6eFF4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code is ‘slop’ and ‘draining’ for open source</strong>: Open source projects are facing a surge in low-quality, AI-generated contributions, termed ‘AI slop,’ burdening maintainers like Godot engine’s Rémi Verschelde, who called them ‘draining and demoralizing.’ GitHub, partly blamed for incentivizing this behavior, is now scrambling to implement mitigations. It seems AI is great at generating code, not so great at generating <em>good</em> code, or at least, not without human oversight. <a href="https://app.daily.dev/feed-by-ids?id=8WhnSQAtX&amp;id=HouoEDJq7&amp;id=QnWXK2Mm8&amp;id=YaGme2ewn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
