<h2>Must know</h2>
<ul>
<li><strong>Cisco SD-WAN zero-day exploited by sophisticated actors</strong>: Cisco Talos and Five Eyes agencies have issued a maximum-severity alert (CVSS 10.0) for CVE-2026-20127, an authentication bypass in Catalyst SD-WAN Controllers. Attackers are chaining this with an older path traversal flaw to gain root access, manipulate fabric configurations, and then restore software versions to hide their tracks. CISA has ordered federal agencies to patch by the end of the week as nation-state actors are suspected. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI de-anonymization reaches 90 percent precision</strong>: Researchers from ETH Zurich and Anthropic demonstrated a system called ESRC that unmasks pseudonymous online identities for as little as $4 per person. By analyzing behavioral clues across Reddit and LinkedIn using LLMs, the system achieved 90% precision when making confident guesses. This development effectively signals the end of practical online anonymity through pseudonyms as automated, large-scale unmasking becomes commercially viable. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft unifies agent development under one SDK</strong>: Microsoft has moved its Agent Framework to Release Candidate status, consolidating the previously fragmented Semantic Kernel and AutoGen projects into a single SDK for .NET and Python. The framework introduces type-safe function tools, graph-based multi-agent workflows, and native Model Context Protocol (MCP) interoperability. This signals a shift toward standardized, production-ready agentic engineering patterns within the enterprise ecosystem. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Bun v1.3.10 adds native Zig REPL and 168x faster string slicing</strong>: The update includes a rewritten REPL, Windows ARM64 support, and massive performance gains for structuredClone and path parsing. <a href="https://app.daily.dev/posts/IZQmEswhp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google invests 1B dollars in iron-air batteries for data centers</strong>: The Form Energy system provides 100 hours of continuous discharge, helping Google’s Minnesota data center run on 24/7 carbon-free energy. <a href="https://app.daily.dev/posts/QIX58GwiF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open Source Endowment launches to fund critical infrastructure</strong>: Modeled after university funds, the OSE has $700k in initial commitments to provide sustainable income for unpaid maintainers of essential projects. <a href="https://app.daily.dev/feed-by-ids?id=Ou9wl6itH&amp;id=fRs0oZgID" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 switches to Rust-based sudo-rs by default</strong>: The ‘Resolute Raccoon’ LTS release will use the memory-safe rewrite, which notably enables visual password feedback (asterisks) by default. <a href="https://app.daily.dev/feed-by-ids?id=QvM4ZBs0d&amp;id=SYZfiqgDW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot adds multi-model support for enterprise users</strong>: Anthropic’s Claude and OpenAI’s Codex are now available as selectable agents within the Copilot environment at no extra cost. <a href="https://app.daily.dev/posts/OmgJHRdHw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Truffle Security finds 3,000 exposed Google API keys granting Gemini access</strong>: Legacy keys previously considered safe for maps or search now grant full access to Gemini AI and cached data due to infrastructure sharing. <a href="https://app.daily.dev/posts/hWSyKUcOU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PayPal migrates 300 petabytes to BigQuery for agentic commerce</strong>: The massive consolidation from four legacy platforms to one has resulted in 16x fresher data for training fraud prevention models. <a href="https://app.daily.dev/posts/PXB4bVNFg" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Jack Dorsey claims 4,000 layoffs are purely AI-driven</strong>: Block is cutting 40% of its workforce while the stock jumps 23%, with Dorsey conveniently blaming ‘AI efficiency’ for what looks like standard late-cycle margin expansion. It’s a classic move: fire the humans, pump the stock, and tell the remaining skeleton crew that a chatbot will handle the workload. Expect other CEOs to adopt this ‘AI-driven’ rebranding for their next round of cost-cutting. <a href="https://app.daily.dev/feed-by-ids?id=32ARXqM4A&amp;id=o7H5FUKAc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Claude Opus 3 starts a Substack blog</strong>: In a peak marketing stunt, Anthropic launched a blog purportedly written by their ‘retired’ model to share its ‘musings’ on the world. The Register rightly called this out as a transparent attempt to anthropomorphize software to reinforce their ‘safety-conscious’ brand. It’s hard to take ‘AI safety’ seriously when the company is busy pretending their math equations have a soul and a desire for a newsletter. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The DIY Kubernetes is dead narrative returns</strong>: Industry pundits are now claiming your ‘Frankenstein’ K8s stack won’t survive the ‘agentic AI era’ because agents are too ‘non-deterministic’ for raw YAML. The solution, naturally, is to buy a high-level, opinionated commercial platform that abstracts away the complexity you already spent years mastering. It’s the same ‘serverless’ pitch from 2017, just wearing a new AI-shaped trench coat. <a href="https://app.daily.dev/posts/MuEoJoS06" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
