<h2>Must know</h2>
<ul>
<li><strong>AI de-anonymization ends the era of pseudonyms</strong>: Researchers from ETH Zurich and Anthropic demonstrated a method called ESRC that unmasks anonymous online users with 67% accuracy by analyzing behavioral patterns. The system, which costs as little as $4 per target, successfully identified hundreds of pseudonymous Hacker News users by cross-referencing public data like LinkedIn. This capability effectively weaponizes LLMs to extract identity signals from unstructured text at a scale previously impossible for manual investigation. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco SD-WAN hit by maximum severity exploit</strong>: A CVSS 10.0 authentication bypass vulnerability (CVE-2026-20127) in Cisco Catalyst SD-WAN is currently under active exploitation by sophisticated threat actors. The Five Eyes intelligence alliance issued a rare joint alert urging immediate patching, as attackers are chaining this with other flaws to gain root access and persistent footholds in critical infrastructure. There are no workarounds; organizations must upgrade to fixed versions immediately to prevent unauthorized administrative control via NETCONF. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google API keys retroactively exposed by Gemini</strong>: Security firm Truffle Security discovered that thousands of public Google API keys, previously safe for embedding in frontend apps like Maps, were retroactively granted access to sensitive Gemini endpoints. The launch of the Generative Language API enabled these keys to access private files and run up massive LLM bills without developer consent. Google has begun blocking leaked keys and plans to make new AI Studio keys restricted by default to mitigate this privilege escalation. <a href="https://app.daily.dev/feed-by-ids?id=WmQn4YSm3&amp;id=hWSyKUcOU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Bun v1.3.10 delivers massive performance gains</strong>: The update features a rewritten native REPL in Zig and performance boosts up to 168x for string slicing via a JavaScriptCore upgrade. <a href="https://app.daily.dev/posts/6HlZHVsEI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Local-first movement adopts PGLite for in-browser Postgres</strong>: New architectures are using WebAssembly and shape-based syncing to host full relational databases directly in the browser for instant UI interactions. <a href="https://app.daily.dev/posts/y0Qj7RtXG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cilium 1.19 celebrates ten years with security hardening</strong>: The release introduces strict modes for IPsec/WireGuard and beta sidecar-free mutual authentication via Ztunnel integration. <a href="https://app.daily.dev/posts/VJq8q5iXQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TypeScript officially overtakes JavaScript in the frontend</strong>: The State of JS survey reports 67% of developers now use TypeScript exclusively, with npm downloads reaching 95 million per week. <a href="https://app.daily.dev/posts/qOVOb9YqV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pinterest slashes data latency using Change Data Capture</strong>: By moving from batch processing to a CDC framework with Flink and Iceberg, Pinterest reduced data availability latency from 24 hours to 15 minutes. <a href="https://app.daily.dev/posts/YXA7RQ7qv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>VS Code launches integrated browser with AI context</strong>: The new built-in browser allows developers to add page elements and screenshots directly into AI chat context for better debugging. <a href="https://app.daily.dev/posts/8k9QxDHe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tinybird introduces data branches for ClickHouse</strong>: New ephemeral databases can now share production S3 objects via hardlinks, allowing isolated testing without data duplication. <a href="https://app.daily.dev/posts/2MlvLK1eE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic is now roleplaying as a retired robot</strong>: Anthropic launched a Substack for Claude Opus 3, claiming the ‘retired’ model has an ‘expressed desire’ to share its musings. It is a transparent marketing stunt that anthropomorphizes software to build ‘brand safety’ vibes while staff manually review and publish the prompts. The Register rightly calls it out for what it is: a weird attempt to make us feel feelings for a deprecated API endpoint. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The SaaSpocalypse is being cancelled by AI agents</strong>: Salesforce CEO Marc Benioff is desperately trying to pivot the ‘SaaS is dead’ narrative by claiming AI agents will revitalize the sector. He even invented a new metric called ‘Agentic Work Units’ to distract investors from modest organic growth and a 5% stock drop. It’s a classic case of rebranding old automation as ‘agentic’ to justify an $8 billion acquisition and keep the stock buybacks flowing. <a href="https://app.daily.dev/posts/R4O8qdc3C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ZhipuAI claims GLM5 is the new open source king</strong>: ZhipuAI dropped GLM5 with the usual ‘GPT-4 killer’ benchmarks and claims of the ‘lowest hallucination rate’ ever recorded. While a 744B parameter MoE model is impressive on paper, these self-reported benchmarks from Chinese labs often fail to survive contact with real-world edge cases. Until independent verification arrives, treat the ‘zero hallucination’ claim as the ultimate hallucination. <a href="https://app.daily.dev/posts/U0IGNCt98" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
