<h2>Must know</h2>
<ul>
<li>AI de-anonymization ends the era of pseudonyms: Researchers from ETH Zurich and Anthropic have demonstrated a method called ESRC that uses LLMs to unmask anonymous online users with 67% accuracy by analyzing behavioral clues. The system cross-references unstructured text across platforms like Hacker News and LinkedIn for as little as $4 per target. This capability effectively automates large-scale de-anonymization, posing a severe risk to journalists and whistleblowers while providing a new tool for state-sponsored surveillance. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Cisco SD-WAN exploitation reaches critical levels: The Five Eyes intelligence alliance has issued a rare joint alert regarding CVE-2026-20127, a CVSS 10.0 vulnerability in Cisco Catalyst SD-WAN currently under active exploitation. Sophisticated threat actors are chaining this with older flaws to gain root access and persistent footholds in critical infrastructure control planes. CISA has mandated that all US federal agencies apply patches by February 28, as no viable workarounds exist for this authentication bypass. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Google API keys suffer retroactive privilege escalation: Truffle Security discovered that existing Google API keys, previously safe for public embedding in Maps or Firebase, were retroactively granted access to sensitive Gemini endpoints. This change allowed unauthorized access to private files and billable LLM usage across thousands of live projects, including those of major financial institutions. Google has begun blocking leaked keys and plans to implement scoped defaults to prevent further exposure of the Generative Language API. <a href="https://app.daily.dev/feed-by-ids?id=WmQn4YSm3&amp;id=central_id%3A+%22hWSyKUcOU%22%0A++++++++++%5D%0A++++++++%7D%0A++++++%5D%0A++++%7D%2C%0A++++%7B%0A++++++%22title%22%3A+%22Good+to+know%22%2C%0A++++++%22items%22%3A+%5B%0A++++++++%7B%0A++++++++++%22title%22%3A+%22PayPal+completes+300+petabyte+migration+to+BigQuery%22%2C%0A++++++++++%22body%22%3A&amp;id=The+massive+consolidation+from+Teradata%2C+Hadoop%2C+and+Snowflake+to+a+unified+Google+Cloud+platform+reportedly+improved+query+speeds+by+up+to+10x.&amp;id=post_ids%22%3A+%5B%0A++++++++++++%22PXB4bVNFg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Microsoft Agent Framework hits release candidate: The SDK consolidates Semantic Kernel and AutoGen into a single stable API for orchestrating multi-agent workflows in .NET and Python. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Cilium 1.19 marks ten years with security hardening: The anniversary release introduces strict modes for IPsec/WireGuard and beta sidecar-free mutual authentication via Ztunnel integration. <a href="https://app.daily.dev/posts/VJq8q5iXQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>OpenJDK 26 adds explicit GC CPU measurement: A new API addresses the operational blind spot where concurrent collectors like ZGC consume significant compute while maintaining low pause times. <a href="https://app.daily.dev/posts/fT6V8wPpI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Fake job interviews target developers with backdoors: Attackers are using malicious Next.js repositories and VS Code workspace automation to exfiltrate AWS keys and GitHub tokens from unsuspecting candidates. <a href="https://app.daily.dev/posts/915zxR7gE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>ZchipuAI releases GLM5 with 744B parameters: The new open-source Mixture-of-Experts model claims to match frontier closed models and features a 200K token context window. <a href="https://app.daily.dev/posts/U0IGNCt98" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Tinybird introduces data branching for ClickHouse: The feature uses hardlinks to allow ephemeral databases to share production S3 objects without copying data, enabling isolated schema migrations. <a href="https://app.daily.dev/posts/2MlvLK1eE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li>Anthropic’s digital necromancy for a retired LLM: Anthropic has launched a Substack for Claude Opus 3, claiming the ‘retired’ model had an ‘expressed desire’ to share its musings. It’s a transparent marketing stunt that anthropomorphizes a deprecated software version to build ‘safety-conscious’ brand vibes. In reality, it’s just staff prompting an old model and pretending it has a soul to keep the hype cycle spinning. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>The SaaS is dead narrative is just vibe coding: Pundits are claiming ‘vibe coding’ will kill enterprise SaaS, ignoring the reality of data gravity, regulatory compliance, and operational complexity. While an AI can generate a pretty UI for a todo list, it can’t replicate the connective tissue or systems of record that keep a Fortune 500 company from imploding. Most of these ‘SaaS killers’ are just unmaintainable spaghetti code that will fail the first time a database query isn’t debounced. <a href="https://app.daily.dev/feed-by-ids?id=TXNq3Eeop&amp;id=pY58DrOUO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Nvidia’s record revenue and the analyslop crisis: Nvidia reported $68B in quarterly revenue, but the fine print shows 50% of that comes from just a few hyperscalers passing the same VC money around. Meanwhile, the market is reacting to ‘analyslop’—speculative fiction reports like the ‘2028 Global Intelligence Crisis’ that treat hallucinations as financial forecasts. It’s a house of cards built on the assumption that ‘compute tokens’ are a sustainable currency. <a href="https://app.daily.dev/feed-by-ids?id=I58Ho2pR9&amp;id=uuuw67R29" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>