<h2>Must know</h2>
<ul>
<li><strong>Cisco SD-WAN zero-day under active exploitation</strong>: Cisco Talos and Five Eyes agencies have issued an emergency alert for CVE-2026-20127, a CVSS 10.0 authentication bypass affecting Catalyst SD-WAN Controllers. Sophisticated actors are chaining this with an older path traversal flaw to gain root access and manipulate network fabric configurations while evading detection. CISA has mandated federal agencies to patch by the end of the week, as reported by Cisco PSIRT. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Agent Framework hits release candidate</strong>: Microsoft has consolidated Semantic Kernel and AutoGen into a single Agent Framework SDK, now at RC status for both .NET and Python. The framework introduces type-safe function tools, graph-based multi-agent orchestration, and native MCP interoperability for production-grade AI agents. This release signals a stable API for developers building autonomous workflows with human-in-the-loop support, according to Microsoft’s official documentation. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google launches Gemini 3.1 Flash Image model</strong>: Internally dubbed Nano Banana 2, this new model aims to deliver Pro-level image quality at double the speed of previous iterations. Key features include 4K upscaling, consistent character tracking across 14 objects for storyboarding, and real-time web data grounding. Google claims the model is now the default across the Gemini app and Vertex AI, though some early testers note 4K output claims remain difficult to verify. <a href="https://app.daily.dev/posts/ezdKReFDS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Bun v1.3.10 adds native Zig REPL and ARM64 support</strong>: The update features a rewritten REPL, 25x faster structuredClone for arrays, and a critical fix for Python-based MCP servers. <a href="https://app.daily.dev/posts/IZQmEswhp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tigris CLI migrates to Bun for 48 percent faster uploads</strong>: By switching from Node.js to a Bun-compiled standalone binary, the team eliminated end-user dependencies and significantly improved small-file performance. <a href="https://app.daily.dev/posts/QwG3SYE2X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Zustand migration cuts Trendyol interaction latency by 20 percent</strong>: Moving from React Context to Zustand’s granular subscriptions resolved cascading re-renders in a complex Ads Editor, reducing layout shifts by 80%. <a href="https://app.daily.dev/posts/ienS0UzWs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google AI Edge Gallery introduces on-device function calling</strong>: The new FunctionGemma 270M model allows AI to trigger OS-level actions like calendar events locally on Pixel 7 Pro devices without internet. <a href="https://app.daily.dev/posts/g1OJ8Iw5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React-admin v5.14 adds TanStack Router adapter</strong>: The update includes modernized package exports for RSC support and a new RecordsIterator for custom list rendering. <a href="https://app.daily.dev/posts/FrhM2AuqR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Snake game over SSH renders 100M pixels per second</strong>: A Go-based engineering feat achieved 25x speedups by stripping OpenSSH timing obfuscation and pre-allocating string caches to kill GC pressure. <a href="https://app.daily.dev/posts/WcmUY5ncO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenJDK 26 adds direct GC CPU time measurement</strong>: A new API allows engineers to see the actual compute cost of concurrent collectors like ZGC, which was previously an operational blind spot. <a href="https://app.daily.dev/posts/fT6V8wPpI" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The great AI layoff pivot</strong>: Jack Dorsey just cut 4,000 people at Block and claimed AI is simply ‘performing jobs better,’ which is a convenient way to mask a 23% stock jump fueled by aggressive cost-cutting. Analysts are rightfully rolling their eyes at the ‘AI-driven’ narrative, noting it looks more like a standard financial restructuring dressed up in trendy tech-bro terminology. If AI were actually that good, maybe it could have predicted Block’s 80% stock slide since 2021. <a href="https://app.daily.dev/feed-by-ids?id=32ARXqM4A&amp;id=o7H5FUKAc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s marketing stunt for a retired model</strong>: Anthropic launched a Substack blog purportedly written by its ‘retired’ Claude Opus 3 model to share its ‘musings’ on the world. The Register correctly identified this as a transparent marketing stunt designed to anthropomorphize software and reinforce a ‘safety-conscious’ brand image. It’s a lot of effort to humanize a version of the software they’ve already replaced with a faster, cheaper one. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coding meets evaluative anesthesia</strong>: The industry is currently obsessed with ‘vibe coding,’ where developers use AI to generate massive amounts of code they don’t actually understand. This has led to what critics call ‘evaluative anesthesia,’ where the perceived productivity of seeing a UI appear instantly blinds teams to the massive technical debt and architectural rot underneath. We’re essentially building ‘Potemkin codebases’ that look great in a demo but collapse the moment a human needs to debug a non-deterministic edge case. <a href="https://app.daily.dev/feed-by-ids?id=okz8k049r&amp;id=LhcI5kB0C" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
