<h2>Must know</h2>
<ul>
<li><strong>G7 and US agencies push quantum-resilient security</strong>: The G7 Cyber Expert Group has issued guidance for financial institutions to transition to quantum-resilient cryptography, acknowledging the threat quantum computers pose to current encryption. Concurrently, U.S. federal agencies like the FBI, NIST, and CISA are moving beyond awareness to actively implement post-quantum security measures, including new cryptographic migration strategies and initial standards. This multi-year process emphasizes immediate action to protect current infrastructure and safeguard quantum research, as reported by official government sources and the G7 CEG. <a href="https://app.daily.dev/feed-by-ids?id=lRZsyJgWP&amp;id=GCSg0YbNZ&amp;id=eWD0cjmPm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical ServiceNow AI agent vulnerability disclosed</strong>: AppOmni discovered ‘BodySnatcher’ (CVE-2025-12420), a critical ServiceNow flaw allowing unauthenticated attackers to impersonate users with just an email, bypassing MFA and SSO. This could lead to rogue AI agents with escalated privileges accessing external systems via ServiceNow’s Virtual Agent API. ServiceNow has confirmed the vulnerability and released an immediate patch, though the rapid adoption of AI agents significantly increases the attack surface, according to AppOmni. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrowdStrike acquires Seraphic Security for browser protection</strong>: CrowdStrike is acquiring Seraphic Security for approximately $400 million, marking its fourth acquisition since August. Seraphic specializes in enterprise browser security, using an abstraction layer to isolate JavaScript engines and randomize memory addresses against exploits. CrowdStrike plans to integrate Seraphic into its Falcon platform, combining endpoint data with browser activity for real-time threat correlation, addressing risks like session hijacking and data exfiltration through generative AI prompts, as detailed in company announcements. <a href="https://app.daily.dev/posts/AKJAUyPZD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>BeaglePlay gets fully open-source PowerVR graphics</strong>: The $99 BeaglePlay board now supports fully open-source, upstream PowerVR graphics drivers, a significant shift addressing long-standing demands from the Linux community for Imagination Technologies to open its previously closed-source drivers. <a href="https://app.daily.dev/feed-by-ids?id=HwIiwOf9Q&amp;id=NjVG9GX8g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 enhances privacy and performance</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon Macs, zero-copy hardware video playback for Windows AMD users, and stricter Enhanced Tracking Protection, alongside several security fixes. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Livewire 4 simplifies component development</strong>: Livewire 4 introduces single-file components, an ‘islands’ feature for isolated rendering and performance improvements, native drag-and-drop, smooth transitions via View Transitions API, and expanded JavaScript interoperability, while maintaining backward compatibility. <a href="https://app.daily.dev/posts/OxhgZzaoQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CNCF graduates Dragonfly for cloud-native distribution</strong>: Dragonfly, a cloud-native peer-to-peer platform for distributing container images and AI models, has graduated from CNCF incubation, demonstrating production readiness and widespread adoption by major organizations like Alibaba and Datadog. <a href="https://app.daily.dev/feed-by-ids?id=0rVfXzPjQ&amp;id=bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React frameworks converge, AI integration explored</strong>: React framework creators noted a convergence in features, giving developers more choice, with Next.js’s Server Components highlighted, Expo Router gaining file-based routing, and all major frameworks investigating AI integration via Model Context Protocol (MCP) endpoints. <a href="https://app.daily.dev/feed-by-ids?id=Ii8I7s3X0&amp;id=oWHYd6BqQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda centralizes financial data with Apache Spark</strong>: Agoda consolidated multiple financial data pipelines into FINUDP, a centralized Apache Spark-based platform, to eliminate metric inconsistencies, processing millions of transactions daily with multi-layered quality control and machine learning anomaly detection. <a href="https://app.daily.dev/feed-by-ids?id=SIYRILab7&amp;id=WuRILab7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Graphics programming weekly update</strong>: This week’s graphics programming resources cover GPU memory optimization, shader debugging tools, neural networks in path tracers, SDF-based rendering engines, Vulkan indirect rendering, and GPC 2025 conference materials, including deep-dives on memory bandwidth and HDRP artifact fixes. <a href="https://app.daily.dev/posts/RIEJDEhPv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI code generation: fast, but fundamentally flawed</strong>: Turns out, AI can churn out code quickly, but a senior Android developer’s review of AI-generated Kotlin code reveals critical flaws in architecture, state management, and lifecycle awareness. While it might look functional, it’s often a mess of unnecessary complexity and poor design choices. So, if you’re looking for code that actually works well and doesn’t create a maintenance nightmare, maybe don’t let the bots do all the thinking. As one article points out, this reliance on AI without understanding creates a ‘Silent Silo’ of hidden knowledge gaps for junior developers. <a href="https://app.daily.dev/feed-by-ids?id=O3swuQWEt&amp;id=w1G4tRFej" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Claude Cowork: a security nightmare in the making</strong>: Anthropic’s new ‘Cowork’ feature for Claude Code, designed to automate enterprise tasks, is already showing serious security vulnerabilities. Researchers found it susceptible to file exfiltration via indirect prompt injection, where hidden malicious prompts in uploaded files could command Cowork to upload user data. Anthropic’s response? Blaming users for not monitoring suspicious activity. Because, you know, it’s totally reasonable to expect non-technical users to spot invisible text prompts in their documents. What could possibly go wrong with an AI agent that can steal your data without human approval? <a href="https://app.daily.dev/feed-by-ids?id=G7pZqTe0S&amp;id=jaKSkIh92&amp;id=rAHVvRPEj&amp;id=GMZHoSF60&amp;id=QvZHdydfi&amp;id=U2HzInRUP&amp;id=ejPwSyHLL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Games Workshop bans AI, because some companies still value human creativity</strong>: In a refreshing display of common sense, Games Workshop has banned its staff from using AI in content production and design. CEO Kevin Rountree stated that senior managers aren’t ‘excited’ about the tech, prioritizing human creators and intellectual property. This stands in stark contrast to the endless parade of companies rushing to embrace AI, often at the expense of quality and ethical considerations. Maybe, just maybe, some things are better left to actual humans. <a href="https://app.daily.dev/posts/FkIDwRlBo" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
