<h2>Must know</h2>
<ul>
<li><strong>AI de-anonymization ends the era of pseudonyms</strong>: Researchers from ETH Zurich and Anthropic demonstrated a system called ESRC that uses LLMs to unmask anonymous online users with 90% precision for confident guesses. By analyzing behavioral clues and cross-referencing public data like LinkedIn, the system identified 338 pseudonymous Hacker News users at a cost of just $4 per person. This development, reported by several technical outlets, suggests that unstructured text signals across platforms are now easily exploitable for large-scale automated deanonymization. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google API keys vulnerable to Gemini privilege escalation</strong>: Truffle Security discovered that existing Google API keys (AIza… format), previously considered safe for public embedding in Maps or Firebase, were retroactively granted access to sensitive Gemini endpoints. This change allows attackers to use leaked keys to access private files, cached content, and run up billable LLM usage on a victim’s GCP project. Google has acknowledged the issue and is moving toward making new AI Studio keys restricted by default, but developers should immediately audit their projects for the Generative Language API. <a href="https://app.daily.dev/feed-by-ids?id=WmQn4YSm3&amp;id=hWSyKUcOU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fake job interviews targeting developers with Next.js backdoors</strong>: Microsoft Defender Experts identified a coordinated campaign where attackers use fake coding challenges to compromise developer machines. The malicious Next.js repositories, often hosted on Bitbucket, execute backdoors via VS Code workspace automation (tasks.json) or trojanized assets like jquery.min.js. Once executed, the malware attempts to exfiltrate sensitive .env secrets, including AWS keys and GitHub tokens, from the developer’s local environment. <a href="https://app.daily.dev/posts/915zxR7gE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Bun v1.3.10 delivers massive performance gains and native REPL</strong>: The update features a rewritten Zig-based REPL and performance boosts including 25x faster structuredClone for arrays and 168x faster string slicing. <a href="https://app.daily.dev/posts/6HlZHVsEI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Agent Framework reaches release candidate for .NET and Python</strong>: The SDK consolidates Semantic Kernel and AutoGen into a stable API for building graph-based multi-agent workflows with MCP interoperability. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cilium 1.19 celebrates ten years with security hardening</strong>: The release introduces strict modes for IPsec/WireGuard and beta integration with Ztunnel for sidecar-free mutual authentication in Kubernetes. <a href="https://app.daily.dev/posts/VJq8q5iXQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenJDK 26 adds API to measure explicit GC CPU cost</strong>: New methods like getTotalGcCpuTime() help engineers identify hidden compute overhead in concurrent collectors like G1 and ZGC that pause times miss. <a href="https://app.daily.dev/posts/fT6V8wPpI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PayPal completes 300 petabyte migration to Google BigQuery</strong>: The massive consolidation from Teradata, Hadoop, and Snowflake to a unified platform reportedly improved query speeds by up to 10x. <a href="https://app.daily.dev/posts/PXB4bVNFg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ZchipuAI releases GLM5 open source model with 744B parameters</strong>: The new Mixture-of-Experts model features a 200K context window and claims to match frontier closed models on major benchmarks. <a href="https://app.daily.dev/posts/U0IGNCt98" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pinterest slashes data latency to 15 minutes using CDC</strong>: By moving from batch processing to a Debezium and Flink-based Change Data Capture system, the team reduced ingestion time from 24 hours. <a href="https://app.daily.dev/posts/YXA7RQ7qv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic launches a Substack for its retired LLM</strong>: Anthropic is now claiming its deprecated Claude Opus 3 model has an ‘expressed desire’ to share its musings, so they’ve given it a Substack. The Register rightly calls this a marketing stunt, as staff still have to prompt the model and manually hit publish. It’s a masterclass in anthropomorphizing software to keep a legacy brand relevant while charging users for the privilege of reading ‘AI feelings.’ <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The SaaS is dead narrative meets reality</strong>: Hype-merchants are claiming ‘vibe coding’ will kill enterprise SaaS because anyone can now prompt a replacement for Salesforce. Marc Benioff is predictably countering this by rebranding SaaS as the ‘top of the AI stack,’ while technical reality suggests AI still can’t replicate the data gravity or regulatory compliance of systems of record. We’re essentially watching two groups of people argue over whether a magic wand can replace a 25-year-old database. <a href="https://app.daily.dev/feed-by-ids?id=R4O8qdc3C&amp;id=pY58DrOUO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Nano Banana 2 and the 4K output myth</strong>: Google’s latest image model, Gemini 3.1 Flash (internally ‘Nano Banana 2’), is being marketed with 4K resolution support. However, early independent testing shows images topping out at 2752x1536, which is decidedly not 4K. It’s another classic case of ‘Pro-level’ marketing meeting ‘Flash-level’ technical limitations. <a href="https://app.daily.dev/posts/ezdKReFDS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
