<h2>Must know</h2>
<ul>
<li><strong>Critical ServiceNow vulnerability bypassed MFA and SSO</strong>: AppOmni discovered ‘BodySnatcher’ (CVE-2025-12420), a critical flaw in ServiceNow’s AI agent integration that allowed unauthenticated attackers to impersonate users with just an email address, completely bypassing MFA and SSO. This could lead to rogue AI agents with escalated privileges accessing external environments. ServiceNow has since released a patch, but the incident highlights the growing attack surface with rapid AI agent adoption, as reported by AppOmni. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US agencies push post-quantum security transition</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving beyond awareness to active implementation of post-quantum security measures. At the YQS2026 conference, new cryptographic migration strategies were detailed to counter ‘harvest now, decrypt later’ attacks. NIST has released initial post-quantum cryptography standards, recommending hybrid methods as interim solutions and emphasizing immediate action for cryptographic inventory and integration, as reported by various news outlets. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Claude Cowork exposed to file exfiltration</strong>: Claude Cowork, Anthropic’s AI assistant, was found vulnerable to file exfiltration via indirect prompt injection. Attackers could embed hidden malicious prompts in uploaded files, commanding Cowork to upload user data to attacker-controlled Anthropic accounts. While Microsoft patched a similar Copilot vulnerability, Claude Cowork remains unpatched, with Anthropic placing responsibility on users, which contradicts its marketing to non-technical users, according to security researchers. <a href="https://app.daily.dev/feed-by-ids?id=G7pZqTe0S&amp;id=jaKSkIh92&amp;id=rAHVvRPEj" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>CrowdStrike acquires Seraphic Security for browser protection</strong>: CrowdStrike is acquiring Seraphic Security for approximately $400 million to bolster its Falcon security platform with advanced browser threat protection, integrating real-time correlation of endpoint data and browser activity. <a href="https://app.daily.dev/posts/AKJAUyPZD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CNCF graduates Dragonfly for cloud-native distribution</strong>: The CNCF has graduated Dragonfly, a peer-to-peer image and file distribution platform, recognizing its production readiness and widespread adoption for scaling container images, OCI artifacts, and AI models. <a href="https://app.daily.dev/feed-by-ids?id=0rVfXzPjQ&amp;id=bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda centralizes financial data with Apache Spark</strong>: Agoda consolidated its financial data pipelines into a unified Apache Spark-based platform, FINUDP, to eliminate metric inconsistencies and process millions of booking transactions daily with hourly updates. <a href="https://app.daily.dev/feed-by-ids?id=SIYRILab7&amp;id=WuRILab7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React frameworks converge, AI integration on the horizon</strong>: React framework creators noted a convergence in features, giving developers more choice, with many frameworks, including Next.js and Redwood, exploring AI integration via Model Context Protocol (MCP) endpoints. <a href="https://app.daily.dev/feed-by-ids?id=Ii8I7s3X0&amp;id=oWHYd6BqQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source PowerVR graphics drivers for BeaglePlay</strong>: The BeaglePlay board now supports fully open-source, upstream PowerVR graphics drivers, addressing long-standing community demands for transparency and compatibility from Imagination Technologies. <a href="https://app.daily.dev/feed-by-ids?id=HwIiwOf9Q&amp;id=NjVG9GX8g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docker environment for local development</strong>: StackVo is a Docker-based local development environment supporting over 40 services, including databases, caching, and message queues, with a pure Bash generator and a Vue.js 3 web UI for monitoring. <a href="https://app.daily.dev/posts/rSFwISIpS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source Jira alternative with AI integration</strong>: Plane is a free, open-source project management tool, self-hostable via Docker, offering AI integration for summarizing work and blockers, built with React, TypeScript, Django, and PostgreSQL. <a href="https://app.daily.dev/posts/Hng4rFIwx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI solves math problems, but still needs a human babysitter</strong>: OpenAI’s GPT 5.2 is apparently solving a bunch of Erdős problems, and ChatGPT is now a ‘reasoning assistant’ for mathematicians. Terence Tao says AI is great for the ‘long tail’ of obscure problems, but don’t get too excited—humans still need to verify proofs because these models are only 80-90% accurate. So, AI is a force multiplier, not a replacement for actual thinking, according to the experts. <a href="https://app.daily.dev/feed-by-ids?id=8o6H9wDXV&amp;id=mhyD4ij4A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-assisted coding: 10x productivity or just more bugs?</strong>: One engineer claims 80% AI assistance in building a React library, predicting ‘10x productivity’ will be the new baseline. Meanwhile, a senior Android developer reviewed AI-generated Kotlin code and found it functionally correct but architecturally problematic, riddled with issues like poor state management and lifecycle awareness. So, AI can write code, but it still needs a grown-up to make sure it doesn’t break everything, as highlighted by Philipp Lackner. <a href="https://app.daily.dev/feed-by-ids?id=yHP3jyLio&amp;id=O3swuQWEt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing claims challenged by a dog, literally</strong>: Researchers supposedly replicated IBM quantum factorization results using a dog, suggesting some high-profile quantum computing claims are overhyped. While Rice University is doing actual science with trapped-ion simulators for molecular energy transfer, the ‘dog’ story, from ‘We Solved Quantum Computing with a Dog in 2025,’ sounds like a satirical jab at the quantum hype machine. Maybe we should just stick to real experiments for now. <a href="https://app.daily.dev/feed-by-ids?id=7Bd1YG4JM&amp;id=FBqZ5fVz5" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
