<h2>Must know</h2>
<ul>
<li><strong>Critical ServiceNow AI agent vulnerability disclosed</strong>: AppOmni discovered ‘BodySnatcher’ (CVE-2025-12420), a critical ServiceNow flaw allowing unauthenticated attackers to impersonate users with just an email, bypassing MFA and SSO. This could lead to rogue AI agents with escalated privileges accessing external systems via ServiceNow’s Virtual Agent API. ServiceNow has confirmed the vulnerability and released a patch, as reported by AppOmni. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US agencies push post-quantum security transition</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving from awareness to active implementation of post-quantum security measures. They detailed new cryptographic migration strategies at the YQS2026 conference, addressing ‘harvest now, decrypt later’ attacks. NIST has released initial post-quantum cryptography standards, recommending hybrid methods as interim solutions, according to official government guidance. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Claude Code faces API restrictions and security concerns</strong>: Anthropic released Cowork, a new feature for Claude Code to automate enterprise tasks, but simultaneously blocked API access for third-party applications, causing significant developer backlash. This forces users onto Anthropic’s platforms. Meanwhile, a vulnerability in Claude Cowork allows file exfiltration via indirect prompt injection, which remains unpatched, with Anthropic placing responsibility on users, as detailed in multiple reports. <a href="https://app.daily.dev/feed-by-ids?id=GMZHoSF60&amp;id=QvZHdydfi&amp;id=U2HzInRUP&amp;id=ejPwSyHLL&amp;id=G7pZqTe0S&amp;id=jaKSkIh92&amp;id=rAHVvRPEj" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>CNCF graduates Dragonfly for cloud-native AI distribution</strong>: The CNCF has graduated Dragonfly, a peer-to-peer image and file distribution platform, recognizing its production readiness and widespread adoption by major organizations like Alibaba and Datadog for scaling container images and AI models. <a href="https://app.daily.dev/posts/0rVfXzPjQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda centralizes financial data with Apache Spark</strong>: Agoda consolidated its financial data pipelines into a single Apache Spark-based platform, FINUDP, to eliminate metric inconsistencies and process millions of booking transactions daily with hourly updates and machine learning anomaly detection. <a href="https://app.daily.dev/feed-by-ids?id=SIYRILab7&amp;id=WuRILab7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrowdStrike acquires Seraphic Security for browser protection</strong>: CrowdStrike is acquiring Seraphic Security for approximately $400 million to integrate browser security, including protection against session hijacking and data exfiltration via AI prompts, into its Falcon security platform. <a href="https://app.daily.dev/posts/AKJAUyPZD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source PowerVR graphics drivers for BeaglePlay</strong>: The BeaglePlay board now supports fully open-source, upstream PowerVR graphics drivers, addressing long-standing demands from the Linux community for transparency and improved compatibility. <a href="https://app.daily.dev/feed-by-ids?id=HwIiwOf9Q&amp;id=NjVG9GX8g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New memory OS for AI agents launched</strong>: MemOS, an open-source memory operating system for LLMs and AI agents, has launched, offering unified long-term memory management for multi-modal data with claims of improved accuracy and token savings over existing solutions. <a href="https://app.daily.dev/posts/bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust in safety-critical systems and dependency challenges</strong>: Rust is being deployed in safety-critical systems like medical devices, but challenges remain with third-party dependencies, toolchain stability, and async runtime qualification at higher criticality levels. <a href="https://app.daily.dev/posts/kV5hg8yNn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Python’s cryptography library considers OpenSSL alternatives</strong>: Maintainers of Python’s cryptography library are concerned about OpenSSL 3.0’s performance regressions and complexity, exploring migration to forks like BoringSSL or LibreSSL, and have achieved 10x performance with their own Rust-based parsing. <a href="https://app.daily.dev/posts/Wy77IQs4s" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI solves all the ‘easy’ math problems, humans still needed for the hard stuff</strong>: OpenAI’s GPT 5.2 is apparently crushing Erdős problems, and Harmonic’s Aristotle is formalizing math like crazy. Mathematician Terence Tao says AI is great for the ‘long tail’ of obscure, straightforward problems, but don’t worry, humans still get to verify the proofs and handle the ‘complex/non-straightforward cases.’ So, AI is just doing the grunt work, leaving us with the truly ‘intellectual’ tasks, or so they say. <a href="https://app.daily.dev/feed-by-ids?id=8o6H9wDXV&amp;id=mhyD4ij4A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents porting code, because why pay a human?</strong>: An ‘experienced developer’ managed to port a Rust-based template engine to Go in 45 minutes of ‘active guidance’ and 10 hours of ‘autonomous agent work.’ Apparently, AI agents are so good they can make ‘idiomatic Go decisions.’ This totally shifts the value from code to tests and documentation, and definitely not from human developers to AI orchestrators. What a time to be alive, or unemployed. <a href="https://app.daily.dev/posts/VOMBPE1Xs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Production readiness: The five features tutorials ‘forget’ to mention</strong>: Apparently, production applications need five ‘critical features’ that ‘many tutorials’ miss: analytics, error tracking, uptime monitoring, rate limiting, and automated testing. Who knew? It’s almost like the difference between a hobby project and something that actually works in the real world. They even cite Netlify’s $104,000 bill for ‘lacking proper rate limiting’ as a cautionary tale. Thanks for the groundbreaking insight, I guess. <a href="https://app.daily.dev/feed-by-ids?id=hizCv12EP&amp;id=q1wpmdkFL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
