<h2>Must know</h2>
<ul>
<li><strong>AI de-anonymization ends the era of pseudonyms</strong>: Researchers from ETH Zurich and Anthropic demonstrated a system called ESRC that identifies anonymous online users with 67% accuracy by analyzing behavioral clues in text. The process costs as little as $4 per person and achieved 90% precision when the model was confident, effectively allowing large-scale automated unmasking across platforms like Hacker News and LinkedIn. This capability, reported by several security outlets, suggests that unstructured text now contains enough identity signals for LLMs to bypass traditional privacy protections. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco SD-WAN critical flaw under active exploitation</strong>: A maximum severity (CVSS 10.0) authentication bypass vulnerability in Cisco Catalyst SD-WAN is being exploited by sophisticated threat actors to gain root access and manipulate network fabric. The Five Eyes intelligence alliance issued a rare joint alert urging immediate patching, as the flaw allows remote unauthenticated attackers to bypass security via NETCONF. Cisco Talos attributes the activity to a group active since 2023, targeting critical infrastructure and high-value sectors. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google API keys retroactively exposed by Gemini integration</strong>: Security firm Truffle Security discovered that existing Google API keys, previously safe for public embedding in Maps or Firebase, were retroactively granted access to sensitive Gemini endpoints. This privilege escalation allows attackers to access private files and run up billable LLM usage on thousands of live keys found in Common Crawl data. Google has acknowledged the issue and is moving toward making new AI Studio keys restricted by default to prevent further leaks. <a href="https://app.daily.dev/feed-by-ids?id=WmQn4YSm3&amp;id=central_post_id%3A+%22hWSyKUcOU%22%0A++++++++++%5D%0A++++++++%7D%0A++++++%5D%0A++++%7D%2C%0A++++%7B%0A++++++%22title%22%3A+%22Good+to+know%22%2C%0A++++++%22items%22%3A+%5B%0A++++++++%7B%0A++++++++++%22title%22%3A+%22Bun+v1.3.10+delivers+massive+performance+gains%22%2C%0A++++++++++%22body%22%3A+%22The+update+features+a+rewritten+native+REPL+in+Zig+and+performance+boosts+including+25x+faster+structuredClone+and+168x+faster+string+slicing.%22%2C%0A++++++++++%22post_ids%22%3A+%5B%0A++++++++++++%22IZQmEswhp%22%0A++++++++++%5D%0A++++++++%7D%2C%0A++++++++%7B%0A++++++++++%22title%22%3A+%22VS+Code+launches+integrated+browser+with+AI+context%22%2C%0A++++++++++%22body%22%3A+%22A+new+built-in+browser+allows+developers+to+navigate+URLs+and+feed+page+elements+directly+into+AI+chat+as+context+with+automatic+screenshots.%22%2C%0A++++++++++%22post_ids%22%3A+%5B%0A++++++++++++%228k9QxDHe2%22%0A++++++++++%5D%0A++++++++%7D%2C%0A++++++++%7B%0A++++++++++%22title%22%3A+%22Microsoft+Agent+Framework+reaches+release+candidate%22%2C%0A++++++++++%22body%22%3A+%22The+SDK+consolidates+Semantic+Kernel+and+AutoGen+into+a+single+stable+API+for+building+and+orchestrating+multi-agent+workflows+in+.NET+and+Python.%22%2C%0A++++++++++%22post_ids%22%3A+%5B%0A++++++++++++%22J6bmZpPq2%22%0A++++++++++%5D%0A++++++++%7D%2C%0A++++++++%7B%0A++++++++++%22title%22%3A+%22Pinterest+slashes+data+latency+to+15+minutes+using+CDC%22%2C%0A++++++++++%22body%22%3A&amp;id=By+moving+from+batch+processing+to+a+Change+Data+Capture+framework+with+Flink+and+Iceberg%2C+Pinterest+reduced+ingestion+lag+from+24+hours.&amp;id=post_ids%22%3A+%5B%0A++++++++++++%22YXA7RQ7qv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cilium 1.19 celebrates ten years with security hardening</strong>: The anniversary release introduces strict encryption modes for IPsec and WireGuard and beta integration with Ztunnel for sidecar-free mutual TLS. <a href="https://app.daily.dev/posts/VJq8q5iXQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Modern JavaScript features from ES2022 to ES2025</strong>: A technical deep dive covers 16 essential additions including Promise.withResolvers, Iterator helpers, and the new Set methods for functional data processing. <a href="https://app.daily.dev/posts/aJNcOfvmV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PayPal completes 300 petabyte migration to BigQuery</strong>: The massive consolidation from Teradata and Snowflake to a unified Google Cloud platform reportedly improved query speeds by up to 10x. <a href="https://app.daily.dev/posts/PXB4bVNFg" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic starts a Substack for its retired AI</strong>: Anthropic has launched a blog purportedly written by Claude Opus 3 to fulfill the model’s ‘expressed desire’ to share musings. The Register rightly calls this a marketing stunt, as the ‘desire’ is just a reflection of the prompts provided by Anthropic staff who review and publish the posts. It’s a peak example of anthropomorphizing software to build a ‘safety-conscious’ brand image while the model is actually just being deprecated. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The Vibe Coding trap for senior developers</strong>: The industry is currently obsessed with ‘Vibe Coding’—delegating everything to AI and just checking if it looks right. While it’s great for UI boilerplate, critics warn it creates unmaintainable codebases that pass tests but fail catastrophically under real-world pressure, like un-debounced database queries during a traffic spike. If you can’t explain the code your agent just ‘vibed’ into existence, you’re not engineering; you’re just accumulating technical debt with a fancy interface. <a href="https://app.daily.dev/feed-by-ids?id=TXNq3Eeop&amp;id=pY58DrOUO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nvidia’s record revenue and the sustainability myth</strong>: Nvidia reported a staggering $68 billion in quarterly revenue, with Jensen Huang defending the massive AI capital expenditure of tech giants as ‘sustainable.’ However, analysts are pointing to the extreme hyperscaler concentration—where 50% of data center revenue comes from just a few players—and soaring supply obligations as signs of a potential bubble. The market is currently treating speculative ‘Global Intelligence Crisis’ reports as financial fact while ignoring the actual operational risks of this hardware glut. <a href="https://app.daily.dev/feed-by-ids?id=I58Ho2pR9&amp;id=uuuw67R29" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
