<h2>Must know</h2>
<ul>
<li><strong>Critical ServiceNow AI agent vulnerability disclosed</strong>: A critical vulnerability, ‘BodySnatcher’ (CVE-2025-12420), was discovered in ServiceNow’s AI agent integration, allowing unauthenticated attackers to impersonate users with just an email address. This flaw bypasses MFA and SSO, enabling the creation of rogue AI agents with escalated privileges that can access external environments. ServiceNow has released a patch, but the rapid adoption of AI agents significantly increases the attack surface, as reported by AppOmni. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US agencies push post-quantum security transition</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving beyond awareness to active implementation of post-quantum security measures. NIST has released initial standards, recommending hybrid cryptographic methods as interim solutions. This multi-year transition is framed as urgent, requiring immediate action to protect current infrastructure and safeguard quantum research against ‘harvest now, decrypt later’ attacks, according to official government guidance. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrowdStrike acquires Seraphic Security for browser protection</strong>: CrowdStrike is acquiring Seraphic Security for approximately $400 million, marking its fourth acquisition since August. Seraphic specializes in enterprise browser security, using an abstraction layer to isolate JavaScript engines and randomize memory addresses against exploitation. CrowdStrike plans to integrate Seraphic into its Falcon platform, enhancing real-time correlation of endpoint and browser activity to combat threats like session hijacking and data exfiltration through generative AI prompts. <a href="https://app.daily.dev/posts/AKJAUyPZD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Firefox 147 enhances privacy and performance</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon Macs, zero-copy hardware video playback for Windows AMD users, and stricter Enhanced Tracking Protection, alongside several security fixes. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Livewire 4 simplifies component development</strong>: Livewire 4 introduces single-file components, an ‘islands’ feature for isolated rendering and performance improvements, built-in drag-and-drop, smooth transitions via View Transitions API, and expanded JavaScript interoperability. <a href="https://app.daily.dev/posts/OxhgZzaoQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source PowerVR graphics drivers for BeaglePlay</strong>: The BeaglePlay board now supports fully open-source, upstream PowerVR graphics drivers, addressing long-standing demands from the Linux community for transparency and improved compatibility. <a href="https://app.daily.dev/feed-by-ids?id=HwIiwOf9Q&amp;id=NjVG9GX8g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda centralizes financial data with Apache Spark</strong>: Agoda consolidated its financial data pipelines into a unified Apache Spark-based platform, FINUDP, to eliminate metric inconsistencies and improve reliability with multi-layered quality control and hourly processing of millions of transactions. <a href="https://app.daily.dev/feed-by-ids?id=SIYRILab7&amp;id=WuRILab7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CNCF graduates Dragonfly, MemOS launches for AI memory</strong>: CNCF’s Dragonfly, a peer-to-peer image and file distribution platform, has graduated to full maturity, while MemOS launched as an open-source memory operating system for LLMs and AI agents, claiming significant accuracy and token savings. <a href="https://app.daily.dev/feed-by-ids?id=0rVfXzPjQ&amp;id=bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React frameworks converge, AI integration explored</strong>: React frameworks are converging in features, offering developers flexibility, with Next.js’s Server Components highlighted, Expo Router gaining file-based routing, and all major frameworks investigating AI integration via Model Context Protocol (MCP) endpoints. <a href="https://app.daily.dev/feed-by-ids?id=Ii8I7s3X0&amp;id=oWHYd6BqQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome 145 makes 100vw scrollbar-aware</strong>: Chrome 145 now automatically subtracts scrollbar width from 100vw when <code>html</code> has <code>overflow-y: scroll</code> or <code>scrollbar-gutter: stable</code>, resolving a long-standing layout issue. <a href="https://app.daily.dev/posts/52iSI4CNV" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding agents: still not replacing senior engineers</strong>: Anthropic’s Cowork, a new feature for Claude Code, promises to automate enterprise tasks, but experts confirm it’s a ‘force multiplier’ for well-architected systems, not a replacement for senior engineers who design novel abstractions. Meanwhile, a senior Android developer’s review of AI-generated Kotlin code revealed critical flaws in coroutine handling and state management, proving AI still lacks deep understanding of platform-specific nuances. So, keep those senior engineers, they’re still needed to fix the AI’s ‘functionally correct but architecturally problematic’ code. <a href="https://app.daily.dev/feed-by-ids?id=GMZHoSF60&amp;id=QvZHdydfi&amp;id=U2HzInRUP&amp;id=ejPwSyHLL&amp;id=O3swuQWEt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI security vulnerabilities: the gift that keeps on giving</strong>: Microsoft Copilot apparently had a vulnerability allowing data exfiltration via a single malicious URL click, which Microsoft ‘patched post-disclosure.’ Meanwhile, Claude Cowork is still exposed to file exfiltration via indirect prompt injection, with Anthropic’s brilliant response being to place responsibility on users to ‘monitor for suspicious activity.’ It’s almost like these AI tools, designed to be helpful, are just creating new, exciting ways for our data to leak. <a href="https://app.daily.dev/feed-by-ids?id=G7pZqTe0S&amp;id=jaKSkIh92&amp;id=rAHVvRPEj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing: still mostly hype, occasionally a dog</strong>: While Rice University researchers are doing actual science with trapped-ion quantum simulators to understand molecular energy transfer, some ‘researchers’ are busy ‘critiquing high-profile IBM quantum computing claims by replicating quantum factorization results using a dog.’ Yes, a dog. This perfectly encapsulates the quantum computing landscape: genuine scientific breakthroughs overshadowed by a healthy dose of satirical skepticism and, apparently, canine-assisted ‘replication.’ <a href="https://app.daily.dev/feed-by-ids?id=7Bd1YG4JM&amp;id=FBqZ5fVz5" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
