<h2>Must know</h2>
<ul>
<li><strong>Cisco SD-WAN zero-day under active exploitation</strong>: Cisco and Five Eyes agencies have issued an emergency warning regarding CVE-2026-20127, a maximum-severity authentication bypass flaw in Catalyst SD-WAN controllers. Sophisticated actors are chaining this with older vulnerabilities to gain root access and manipulate network fabric configurations while leaving minimal forensic evidence. CISA has ordered federal agencies to patch by the end of the week, and a 40-page hunt guide is available for detection. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bun v1.3.10 delivers massive performance leaps</strong>: The latest Bun release introduces a native REPL rewritten in Zig and a new compiler target for self-contained HTML output. Performance benchmarks show structuredClone is now up to 25x faster for arrays, while deep rope string slicing saw a 168x speedup following a JavaScriptCore upgrade. The update also adds Windows ARM64 support and critical fixes for Python-based MCP servers. <a href="https://app.daily.dev/posts/IZQmEswhp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google launches Gemini 3.1 Flash Image model</strong>: Internally dubbed Nano Banana 2, this new model aims for Pro-level quality at double the speed, generating images in roughly 15 seconds. It introduces 4K upscaling, improved text rendering, and character consistency tracking across storyboards. Developers can access it immediately via AI Studio and the Gemini API, with early integration already live in Vercel’s AI Gateway. <a href="https://app.daily.dev/posts/ezdKReFDS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>React Context to Zustand migration cuts latency by 20 percent</strong>: Trendyol Tech reported an 80% reduction in Cumulative Layout Shift after moving from Context to Zustand’s granular subscriptions. <a href="https://app.daily.dev/posts/ienS0UzWs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Local-first web development matures with PGLite and Wasm</strong>: The movement is gaining traction as PGLite brings full PostgreSQL instances to the browser, enabling instant UI interactions without network round-trips. <a href="https://app.daily.dev/posts/qpvYGfXU9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React Doctor CLI audits codebases for 60 quality rules</strong>: This new open-source tool provides health scores and identifies hook misuse, re-render patterns, and security flaws like hardcoded secrets. <a href="https://app.daily.dev/posts/wbVD7QroD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Agent Framework reaches release candidate status</strong>: The SDK consolidates Semantic Kernel and AutoGen into a single stable API for building and deploying multi-agent AI workflows. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tigris CLI migrates to Bun for standalone binary distribution</strong>: The move resulted in a 60MB self-contained binary that is up to 48% faster for uploads on Apple M4 Max hardware. <a href="https://app.daily.dev/posts/QwG3SYE2X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open Source Endowment launches to fund critical infrastructure</strong>: Modeled after university funds, the OSE will provide sustainable microgrants to underfunded projects like PostCSS and cURL. <a href="https://app.daily.dev/feed-by-ids?id=9fIuvPxZh&amp;id=Ou9wl6itH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari Technology Preview 238 adds CSS open pseudo-class</strong>: The update also includes scroll anchoring to prevent viewport jumps and support for customizable select elements. <a href="https://app.daily.dev/posts/NUI8NcsFJ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The great AI layoff narrative</strong>: Block CEO Jack Dorsey is cutting 4,000 people and claiming AI does the job better, a convenient excuse that saw the stock jump 23% despite being down 80% from its peak. Analysts are rightly questioning if this is ‘proactive AI adoption’ or just a standard tech-debt-fueled fire sale dressed up in a trendy trench coat. Expect every struggling mid-cap to blame ‘GPT-5’ for their next round of restructuring. <a href="https://app.daily.dev/feed-by-ids?id=32ARXqM4A&amp;id=o7H5FUKAc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s marketing stunt masquerading as a blog</strong>: Anthropic launched a Substack purportedly written by their ‘retired’ Claude Opus 3 model to share its ‘musings’ on the world. The Register correctly identified this as a transparent marketing ploy to anthropomorphize software and reinforce a ‘safety-conscious’ brand image. It’s a fancy way of saying they’ve automated their PR department to sound like a sentient philosopher. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The DIY Kubernetes is dead hype</strong>: A new wave of opinion pieces is claiming your ‘Frankenstein’ Kubernetes stack won’t survive the AI era, conveniently pushing you toward expensive, opinionated PaaS solutions. While managing YAML is a headache, the idea that agentic AI requires a ‘universal control plane’ to function is the latest attempt to rebrand vendor lock-in as a technical necessity. Apparently, if your infrastructure isn’t ‘invisible,’ your AI agents will simply refuse to work. <a href="https://app.daily.dev/posts/MuEoJoS06" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
