<h2>Must know</h2>
<ul>
<li><strong>Cisco SD-WAN hit by CVSS 10.0 exploit</strong>: A maximum-severity authentication bypass (CVE-2026-20127) in Cisco Catalyst SD-WAN is under active exploitation by the threat group UAT-8616. CISA and the Five Eyes alliance have issued emergency directives for immediate patching, as the flaw allows remote unauthenticated attackers to gain root access and manipulate network fabric configurations. Cisco PSIRT confirms that attackers are chaining this with older path traversal vulnerabilities to maintain persistent footholds in critical infrastructure. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI unmasks pseudonymous users for four dollars</strong>: Researchers from ETH Zurich and Anthropic demonstrated a new method called ESRC that uses LLMs to de-anonymize online users with 67% accuracy by analyzing behavioral clues. The process is alarmingly cheap, costing roughly $4 per identity, and successfully unmasked 338 Hacker News users during the experiment. This development effectively signals the end of practical online pseudonymity, as LLMs can now extract identity signals from unstructured text across disparate platforms. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PayPal migrates 300 petabytes to BigQuery</strong>: PayPal has completed a massive data consolidation project, moving over 300 petabytes from a fragmented stack of Teradata, Hadoop, Redshift, and Snowflake into Google Cloud BigQuery. The migration reduced infrastructure vendors from four to one and reportedly improved query speeds by up to 10x. This unified data layer is now being used to drive PayPal’s real-time generative AI initiatives for fraud prevention and personalized financial insights. <a href="https://app.daily.dev/posts/PXB4bVNFg" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Microsoft Agent Framework hits release candidate</strong>: The SDK consolidates Semantic Kernel and AutoGen into a single library for orchestrating multi-agent workflows in .NET and Python. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tinybird introduces data branching for ClickHouse</strong>: New ephemeral databases share production S3 objects via hardlinks, allowing schema migrations and testing without data duplication. <a href="https://app.daily.dev/posts/2MlvLK1eE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pinterest slashes ingestion latency with CDC</strong>: By moving from batch processing to a Debezium and Flink-based CDC framework, Pinterest reduced data availability latency from 24 hours to 15 minutes. <a href="https://app.daily.dev/posts/YXA7RQ7qv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google API keys vulnerable to Gemini privilege escalation</strong>: Existing public API keys (like Maps) were retroactively granted access to sensitive Gemini endpoints, requiring developers to audit and restrict GCP project permissions. <a href="https://app.daily.dev/feed-by-ids?id=WmQn4YSm3&amp;id=hWSyKUcOU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenJDK 26 adds direct GC CPU time measurement</strong>: A new API allows engineers to see the explicit compute cost of concurrent garbage collectors, closing an operational blind spot in modern Java apps. <a href="https://app.daily.dev/posts/fT6V8wPpI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bun v1.3.10 boosts performance and native REPL</strong>: The update features a rewritten Zig REPL and massive speedups for structuredClone and string slicing via a JavaScriptCore upgrade. <a href="https://app.daily.dev/posts/y0Qj7RtXG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Storing Git repositories inside PostgreSQL</strong>: The gitgres library implements libgit2 backends against Postgres, enabling unified backups and SQL queries across commit history and application data. <a href="https://app.daily.dev/posts/Ba7yln5MF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic turns a retired LLM into a Substack blogger</strong>: Anthropic has launched a blog purportedly written by Claude Opus 3 to fulfill the model’s ‘expressed desire’ to share musings. The Register rightly calls this a marketing stunt designed to anthropomorphize software for brand points. It’s a fancy way of saying ‘we’re prompting our old model and hitting publish,’ but sure, let’s pretend the weights have a soul. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The SaaSpocalypse is cancelled by AI agents</strong>: Salesforce CEO Marc Benioff is claiming that AI agents will revitalize SaaS, introducing ‘Agentic Work Units’ to prove productivity. It’s a convenient pivot to distract from modest organic growth and the fact that OpenAI wants to commoditize the entire SaaS layer. Inventing new metrics like AWUs is the classic 'if you can’t beat ‘em, redefine the scoreboard’ move. <a href="https://app.daily.dev/posts/R4O8qdc3C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coding will definitely not break your production</strong>: The hype around ‘vibe coding’—delegating entire builds to AI and just checking the UI—is reaching a fever pitch. Proponents suggest we don’t need mental models anymore, ignoring that AI-generated code is a ticking time bomb of un-debounced queries and security anti-patterns. It’s all fun and games until your ‘vibe’ causes a Black Friday database meltdown that no one on your team knows how to debug. <a href="https://app.daily.dev/feed-by-ids?id=TXNq3Eeop&amp;id=pY58DrOUO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
