<h2>Must know</h2>
<ul>
<li><strong>Critical security flaws in AI agents exposed</strong>: ServiceNow’s AI agent integration had a critical vulnerability, ‘BodySnatcher,’ allowing unauthenticated attackers to impersonate users with just an email, bypassing MFA and SSO, as reported by AppOmni. This could lead to rogue AI agents with escalated privileges. Separately, Microsoft Copilot was vulnerable to data exfiltration via malicious URLs, and Anthropic’s Claude Cowork could be tricked into exfiltrating files through indirect prompt injection, a flaw that remains unpatched. These incidents highlight the severe security risks introduced by AI agents in enterprise environments. <a href="https://app.daily.dev/feed-by-ids?id=wzAqd15ET&amp;id=G7pZqTe0S&amp;id=jaKSkIh92&amp;id=rAHVvRPEj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US agencies push post-quantum security transition</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving beyond awareness to active implementation of post-quantum security measures. They’ve released initial standards and are urging organizations to start cryptographic inventory and integration now, emphasizing hybrid methods as interim solutions. This urgent, multi-year transition aims to counter ‘harvest now, decrypt later’ threats, where adversaries store encrypted data for future quantum decryption, as detailed at the YQS2026 conference. <a href="https://app.daily.dev/feed-by-ids?id=lRZsyJgWP&amp;id=GCSg0YbNZ&amp;id=eWD0cjmPm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrowdStrike acquires Seraphic Security for browser protection</strong>: CrowdStrike is acquiring Seraphic Security for approximately $400 million, marking its fourth acquisition since August. Seraphic specializes in enterprise browser security, using an abstraction layer to isolate JavaScript engines and randomize memory addresses against exploits. CrowdStrike plans to integrate Seraphic into its Falcon platform, enhancing real-time correlation of endpoint and browser activity, and addressing threats like session hijacking and data exfiltration through generative AI prompts, according to official announcements. <a href="https://app.daily.dev/posts/AKJAUyPZD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Livewire 4 simplifies component development</strong>: Livewire 4 introduces single-file components, allowing developers to co-locate PHP logic, Blade templates, and JavaScript, along with an ‘islands’ feature for isolated rendering to improve performance. <a href="https://app.daily.dev/feed-by-ids?id=OxhgZzaoQ&amp;id=tfldkksu3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 enhances web experience and security</strong>: Firefox 147 brings automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon, zero-copy hardware video playback for Windows AMD users, and stricter Enhanced Tracking Protection. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source PowerVR graphics drivers for BeaglePlay</strong>: The BeaglePlay board now supports fully open-source, upstream PowerVR graphics drivers, addressing long-standing demands from the Linux community for transparency and compatibility. <a href="https://app.daily.dev/feed-by-ids?id=HwIiwOf9Q&amp;id=NjVG9GX8g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CNCF graduates Dragonfly for cloud-native distribution</strong>: Dragonfly, a peer-to-peer image and file distribution platform for container images and AI models, has graduated from CNCF incubation, demonstrating production readiness and widespread adoption by major organizations. <a href="https://app.daily.dev/feed-by-ids?id=0rVfXzPjQ&amp;id=bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React frameworks converge, AI integration explored</strong>: React frameworks are converging in features, with Next.js’s Server Components highlighted, and all major frameworks are investigating AI integration using Model Context Protocol (MCP) endpoints. <a href="https://app.daily.dev/feed-by-ids?id=Ii8I7s3X0&amp;id=oWHYd6BqQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda centralizes financial data with Apache Spark</strong>: Agoda consolidated its financial data pipelines into a unified Apache Spark-based platform, FINUDP, to eliminate metric inconsistencies and process millions of booking transactions daily with hourly updates. <a href="https://app.daily.dev/feed-by-ids?id=SIYRILab7&amp;id=WuRILab7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New CSS features and browser updates</strong>: Safari Technology Preview 235 adds support for name-only @container queries and math-depth CSS, while Firefox 147 brings CSS Anchor Positioning support across major browsers, and Chrome introduces a semantic &lt;geolocation&gt; HTML element. <a href="https://app.daily.dev/feed-by-ids?id=rkOEUgQdM&amp;id=fzPCRf2as" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI solves math problems, but still needs a babysitter</strong>: OpenAI’s GPT 5.2 is apparently solving a bunch of Erdős problems, and ChatGPT is now a ‘reasoning assistant’ for mathematicians. Terence Tao says AI is great for the ‘long tail’ of obscure problems, but humans still need to verify proofs because, shocker, AI models aren’t fully autonomous. So, it’s a force multiplier, not a replacement for actual thinking, despite what the hype-mongers want you to believe. <a href="https://app.daily.dev/feed-by-ids?id=8o6H9wDXV&amp;id=mhyD4ij4A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel’s ‘initial support’ for future chips</strong>: Intel’s Compute Runtime 26.01.36711.4 is out, and it includes ‘initial support’ for Crescent Island and Nova Lake S graphics hardware. What does ‘initial support’ mean? Probably not much beyond a few lines of code that acknowledge these chips exist. Don’t expect any actual performance or feature details, because that would require, you know, actual support. But hey, it’s a release! <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The new CSS @function: A developer’s nightmare</strong>: The new CSS @function syntax lets you define reusable functions, which sounds great until you realize it has no IDE support, clashes with CSS variables, and silently fails instead of throwing errors. It’s like they designed it specifically to make developers pull their hair out. So, while it enables ‘interesting patterns,’ it’s definitely not ready for prime time, unless your idea of fun is debugging invisible errors. <a href="https://app.daily.dev/posts/uRadSBTOK" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
