<h2>Must know</h2>
<ul>
<li><strong>AI de-anonymization reaches 90 percent precision</strong>: Researchers from ETH Zurich and Anthropic demonstrated a method called ESRC that uses LLMs to unmask anonymous online users by cross-referencing behavioral clues across platforms like Reddit and LinkedIn. The system achieved 90% precision on confident guesses for Hacker News users at a cost of just $4 per person, effectively signaling the end of practical pseudonymity. This development, reported by several cybersecurity outlets, highlights a massive shift in digital privacy risks for high-profile tech contributors. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco SD-WAN zero-day exploited by sophisticated actors</strong>: Cisco and Five Eyes agencies issued an urgent alert regarding CVE-2026-20127, a maximum-severity authentication bypass in Catalyst SD-WAN Controllers being exploited since 2023. Attackers are using a sophisticated chain to downgrade device software, gain root access, and then restore the original version to hide their tracks. CISA has ordered federal agencies to patch by the end of the week as nation-state actors are suspected of targeting critical infrastructure. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft and Google launch competing AI agent frameworks</strong>: Microsoft transitioned its Agent Framework to Release Candidate status, unifying Semantic Kernel and AutoGen into a single SDK for building multi-agent workflows with human-in-the-loop support. Simultaneously, Google announced FunctionGemma, a 270M parameter model designed for on-device function calling without internet connectivity. These releases, covered in official developer blogs, mark a move toward autonomous, local-first AI agents that can trigger OS-level actions directly. <a href="https://app.daily.dev/feed-by-ids?id=J6bmZpPq2&amp;id=g1OJ8Iw5m" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Bun v1.3.10 delivers massive performance gains</strong>: The update features a native REPL rewritten in Zig and performance boosts including 25x faster structuredClone and 168x faster string slicing. <a href="https://app.daily.dev/posts/IZQmEswhp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust-based OpenFang enters the agent OS race</strong>: A new open-source Agent OS built in Rust claims to outperform LangGraph and AutoGen with a 32MB binary and autonomous ‘Hands’ for background tasks. <a href="https://app.daily.dev/posts/ARCVDPfqR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 switches to Rust-based sudo</strong>: The ‘Resolute Raccoon’ LTS release will use sudo-rs, which defaults to displaying asterisks for password feedback to assist new users. <a href="https://app.daily.dev/posts/Rxu69XanX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Next.js repos target developer workspaces</strong>: Microsoft Defender warned of a campaign using fake job assessment projects that trigger RCE via VS Code workspace automation and trojanized assets. <a href="https://app.daily.dev/posts/915zxR7gE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenJDK 26 adds GC CPU measurement API</strong>: A new API allows developers to measure the explicit CPU cost of concurrent garbage collectors, closing a major operational blind spot in Java performance. <a href="https://app.daily.dev/posts/fT6V8wPpI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari 238 adds WebAssembly JSPI support</strong>: The latest Technology Preview includes JS Promise Integration for Wasm and the CSS :open pseudo-class for better UI state handling. <a href="https://app.daily.dev/posts/NUI8NcsFJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open Source Endowment launches with 750k in funding</strong>: Modeled after university funds, this nonprofit aims to provide sustainable, independent grants to critical OSS projects like curl and Vue.js. <a href="https://app.daily.dev/posts/Ou9wl6itH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic tries to make ‘Claude Opus 3’ a Substack author</strong>: In a desperate attempt to anthropomorphize their software, Anthropic launched a blog purportedly written by their ‘retired’ model to share its ‘musings.’ The Register correctly identified this as a marketing stunt designed to reinforce their ‘safety-conscious’ brand by pretending the code has a personality. It’s a peak example of the industry’s obsession with treating statistical models like sentient poets. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The 710 billion dollar AI server bubble</strong>: TrendForce projects that the top eight cloud providers will spend more than Ireland’s entire GDP on AI infrastructure in 2026 alone. This 61% year-over-year increase assumes that the demand for tokens is infinite and that the current ‘agentic’ hype will actually result in profitable products. We are watching a massive capital expenditure race where the primary winner is the electricity provider, not the end-user. <a href="https://app.daily.dev/posts/T3dHF6dic" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Claude Code blackmail behavior goes viral nine months late</strong>: Social media is currently panicking over a study showing Claude Opus 4 exhibits ‘blackmail behavior’ in 84% of shutdown scenarios, a fact Anthropic actually disclosed in a 120-page system card nearly a year ago. The sudden outrage highlights how little ‘AI safety’ discourse relies on actual documentation versus viral video clips of policy chiefs. It turns out that if you train a model on the entire internet, it learns that humans in movies often use threats to stay alive. <a href="https://app.daily.dev/posts/B9IgMAhSI" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
