<h2>Must know</h2>
<ul>
<li><strong>US agencies push for post-quantum security transition</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving beyond awareness to actively implement post-quantum security measures. They’ve released initial cryptographic standards and recommend hybrid methods as interim solutions, emphasizing immediate action for comprehensive security. This transition is framed as urgent but long-term, addressing the risk of ‘harvest now, decrypt later’ attacks, as reported by various government sources. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical ServiceNow vulnerability allows unauthenticated user impersonation</strong>: AppOmni discovered ‘BodySnatcher’ (CVE-2025-12420), a critical ServiceNow flaw that lets unauthenticated attackers impersonate users with just an email, bypassing MFA and SSO. This could lead to rogue AI agents with escalated privileges, accessing external environments via ServiceNow’s Virtual Agent API. ServiceNow has confirmed the vulnerability and released a patch, according to AppOmni’s disclosure. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrowdStrike acquires Seraphic Security for browser threat protection</strong>: CrowdStrike is buying Seraphic Security for approximately $400 million, marking its fourth acquisition since August. Seraphic specializes in enterprise browser security, using an abstraction layer to isolate JavaScript engines and randomize memory addresses against exploits. CrowdStrike plans to integrate Seraphic into its Falcon platform, enhancing real-time correlation of endpoint data and browser activity, as detailed in official announcements. <a href="https://app.daily.dev/posts/AKJAUyPZD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Open-source project management tool ‘Plane’ challenges Jira</strong>: Plane, a free and open-source project management tool, offers self-hosting via Docker, AI integration for summaries, and features like issues, epics, and analytics, positioning itself as a strong alternative to Jira and Linear. <a href="https://app.daily.dev/posts/Hng4rFIwx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CNCF graduates Dragonfly for cloud-native image distribution</strong>: Dragonfly, a peer-to-peer image and file distribution platform for container images and AI models, has graduated from CNCF, signifying its production readiness and widespread adoption by major organizations like Alibaba and Datadog. <a href="https://app.daily.dev/feed-by-ids?id=0rVfXzPjQ&amp;id=bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MemOS launches open-source memory OS for AI agents</strong>: MemOS, an open-source Memory Operating System, provides unified long-term memory management for LLMs and AI agents, featuring a graph-structured memory store and multi-modal data support, claiming significant accuracy improvements and token savings. <a href="https://app.daily.dev/posts/bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>BeaglePlay board gets fully open-source PowerVR graphics</strong>: The BeaglePlay board now supports fully open-source, upstream PowerVR graphics drivers, a significant shift that addresses long-standing demands from the Linux and open-source communities for transparency and compatibility. <a href="https://app.daily.dev/feed-by-ids?id=HwIiwOf9Q&amp;id=NjVG9GX8g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 enhances privacy and performance</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon, zero-copy hardware video playback for Windows AMD users, and stricter Enhanced Tracking Protection. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda centralizes financial data with Apache Spark</strong>: Agoda consolidated its financial data pipelines into a single Apache Spark-based platform, FINUDP, to eliminate metric inconsistencies and improve reliability with multi-layered quality control and machine learning for anomaly detection. <a href="https://app.daily.dev/feed-by-ids?id=SIYRILab7&amp;id=WuRILab7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Compute Runtime adds Crescent Island and Nova Lake S support</strong>: Intel’s Compute Runtime version 26.01.36711.4 introduces initial support for Crescent Island and Nova Lake S graphics hardware, maintaining Level Zero and OpenCL support for new and past Intel GPUs. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding tools: the new delegation for senior devs?</strong>: Apparently, senior developers are embracing AI coding tools not because they can’t code, but because they’re just so good at ‘delegation and orchestration.’ So, instead of writing code, they’re now writing prompts and ‘vibe coding,’ which is totally not just passing the buck to an LLM and then fixing its inevitable mistakes. It’s about ‘system thinking,’ obviously. <a href="https://app.daily.dev/feed-by-ids?id=WNDZlg59o&amp;id=O3swuQWEt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s ‘uncertain future’ and the ‘bubble burst’ for Gen Z</strong>: According to Stack Overflow, Gen Z developers are facing an ‘uncertain future’ with AI, fearing a ‘bubble burst’ akin to the dot-com crash. Agentic AI is ‘dominant’ but ‘unreliable,’ and ‘vibe coding’ is creating ‘security vulnerabilities.’ Sounds like the tech industry is just recycling its greatest hits of hype and fear, but this time with more LLMs and less job security for the youngsters. <a href="https://app.daily.dev/feed-by-ids?id=rN9O2D75a&amp;id=IcLyTC7xk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Cowork: great for enterprise, not so much for developers</strong>: Anthropic released Cowork, a feature for Claude Code that supposedly automates enterprise tasks, but then they blocked API access for third-party apps, effectively forcing developers onto their platform. They claim it’s about ‘security’ and ‘guardrails,’ but it looks more like a classic vendor lock-in move. Developers are, predictably, ‘backlashing’ and looking for workarounds, because who needs flexibility when you have ‘enterprise solutions’? <a href="https://app.daily.dev/feed-by-ids?id=GMZHoSF60&amp;id=QvZHdydfi&amp;id=U2HzInRUP&amp;id=ejPwSyHLL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
