<h2>Must know</h2>
<ul>
<li><strong>Cisco SD-WAN zero day exploited by sophisticated actors</strong>: Cisco Talos and Five Eyes agencies issued an emergency alert regarding CVE-2026-20127, a maximum-severity authentication bypass in Catalyst SD-WAN controllers. Attackers are chaining this with an older path traversal flaw to gain root access and manipulate network fabric configurations while leaving minimal forensic evidence. CISA has ordered federal agencies to patch by the end of the week as nation-state actors are suspected of targeting critical infrastructure. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google launches Gemini 3.1 Flash Image model</strong>: Internally dubbed Nano Banana 2, this new model aims to deliver Pro-level image quality at double the speed of previous iterations. It introduces native support for character consistency across storyboards, 4K upscaling, and real-time web data grounding for infographics. The model is now the default engine for Gemini apps and Google Search AI mode, featuring SynthID watermarking for all generated assets. <a href="https://app.daily.dev/posts/ezdKReFDS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Agent Framework hits release candidate status</strong>: Microsoft has consolidated its Semantic Kernel and AutoGen efforts into a single, stable SDK for building and orchestrating AI agents. The framework, now in RC for .NET and Python, supports graph-based multi-agent workflows, human-in-the-loop checkpoints, and native Model Context Protocol interoperability. This move signals a shift toward production-ready agentic engineering over experimental ‘vibe coding’ scripts. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Zustand migration slashes Cumulative Layout Shift by 80 percent</strong>: Trendyol Tech reported a 20% reduction in interaction latency after moving from React Context to Zustand to eliminate cascading re-renders. <a href="https://app.daily.dev/posts/ienS0UzWs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google AI Edge Gallery adds on-device function calling</strong>: The new FunctionGemma model allows 270M parameter AI agents to trigger OS-level actions like calendar events without an internet connection. <a href="https://app.daily.dev/posts/g1OJ8Iw5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React-admin update adds Shadcn UI template support</strong>: Versions 5.12-5.14 introduce a Shadcn Admin Kit and a TanStack Router adapter to modernize the framework’s headless logic. <a href="https://app.daily.dev/posts/FrhM2AuqR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bun v1.3.10 optimizes array cloning by 25x</strong>: The latest release features a native REPL rewritten in Zig and significant performance gains for structuredClone and path parsing. <a href="https://app.daily.dev/posts/IZQmEswhp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Android 17 Beta 2 introduces system-level EyeDropper API</strong>: The update allows color picking without screen capture permissions and adds a Handoff API for cross-device task continuity. <a href="https://app.daily.dev/posts/odhr3uGEb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tigris CLI migrates to Bun for standalone binaries</strong>: The team achieved 20-48% faster upload speeds on M4 Max by switching from Node.js to a Bun-compiled 60MB binary. <a href="https://app.daily.dev/posts/QwG3SYE2X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari Technology Preview 238 adds CSS open pseudo-class</strong>: The release also includes scroll anchoring to prevent viewport jumps and initial support for customizable select elements. <a href="https://app.daily.dev/posts/NUI8NcsFJ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The great AI de-anonymization scare</strong>: Researchers claim they can unmask your ‘secret online life’ for $4 using LLMs to cross-reference Reddit and LinkedIn. While the 90% precision sounds terrifying, it relies on you being enough of a ‘Hacker News personality’ to have a distinct behavioral fingerprint. If your online presence is as generic as the AI models trying to find you, your pseudonym is probably safe for another week. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s marketing stunt masquerading as a blog</strong>: Anthropic launched a Substack purportedly written by their ‘retired’ Claude Opus 3 model to share its ‘musings.’ The Register rightly called this out as a transparent marketing tactic designed to anthropomorphize software and reinforce a ‘safety-conscious’ brand image. It’s not a sentient AI reflecting on its life; it’s a prompt-engineered output designed to make you feel warm and fuzzy about a corporate asset. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated 3D models are still just triangle soup</strong>: Despite the hype around 8-second 3D generation, an autopsy of ‘AI slop’ in e-commerce shows these models suffer from hallucinated textures and uneditable topology. Retopologizing these messes takes longer than building them from scratch in Blender. Until an AI can output clean UV maps and PBR materials, it’s just high-tech clutter that kills visual trust. <a href="https://app.daily.dev/posts/9drmYT2ke" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
