<h2>Must know</h2>
<ul>
<li><strong>Critical security flaw in ServiceNow AI agent integration</strong>: AppOmni discovered a critical vulnerability, BodySnatcher (CVE-2025-12420), in ServiceNow’s AI agent integration that allows unauthenticated attackers to impersonate users with just an email address, bypassing MFA and SSO. This could lead to rogue AI agents with escalated privileges accessing external environments, as reported by AppOmni. ServiceNow has confirmed the flaw and released an immediate patch, urging customers to update. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US agencies push post-quantum security transition</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving beyond awareness to actively implement post-quantum security measures, as detailed at the YQS2026 conference. NIST has released initial standards, recommending hybrid cryptographic methods as interim solutions to counter ‘harvest now, decrypt later’ attacks. This transition is framed as an urgent, multi-year process requiring immediate action for comprehensive security, according to government guidance. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CrowdStrike acquires Seraphic Security for browser protection</strong>: CrowdStrike is acquiring Seraphic Security for approximately $400 million, marking its fourth acquisition since August. Seraphic specializes in enterprise browser security, using an abstraction layer to isolate JavaScript engines and randomize memory addresses against exploits. CrowdStrike plans to integrate Seraphic into its Falcon platform, enhancing real-time correlation of endpoint and browser activity, addressing risks from session hijacking and exfiltration via generative AI prompts. <a href="https://app.daily.dev/posts/AKJAUyPZD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>React frameworks converge, AI integration on the horizon</strong>: At React Conf, experts agreed that mainstream React frameworks are converging in features, making developer choice largely risk-free, with all frameworks exploring AI integration via Model Context Protocol (MCP) endpoints. <a href="https://app.daily.dev/feed-by-ids?id=Ii8I7s3X0&amp;id=oWHYd6BqQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 enhances privacy and performance</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon, zero-copy hardware video playback for Windows AMD users, and stricter Enhanced Tracking Protection. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Livewire 4 simplifies component development and boosts performance</strong>: Livewire 4 introduces single-file components, an ‘islands’ feature for isolated rendering, native drag-and-drop, and smooth transitions via the View Transitions API, all while maintaining backward compatibility. <a href="https://app.daily.dev/posts/OxhgZzaoQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source PowerVR graphics drivers for BeaglePlay</strong>: The $99 BeaglePlay board now supports fully open-source, upstream PowerVR graphics drivers, addressing long-standing community demands for transparency and compatibility from Imagination Technologies. <a href="https://app.daily.dev/feed-by-ids?id=HwIiwOf9Q&amp;id=NjVG9GX8g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda centralizes financial data with Apache Spark</strong>: Agoda consolidated its financial data pipelines into a unified Apache Spark-based platform, FINUDP, to eliminate metric inconsistencies and process millions of daily transactions with multi-layered quality control. <a href="https://app.daily.dev/feed-by-ids?id=SIYRILab7&amp;id=WuRILab7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CNCF graduates Dragonfly, MemOS launches for LLM memory</strong>: CNCF’s Dragonfly, a peer-to-peer image and file distribution platform, graduated to full maturity, while MemOS launched as an open-source memory operating system for LLMs, claiming significant accuracy improvements and token savings. <a href="https://app.daily.dev/feed-by-ids?id=0rVfXzPjQ&amp;id=bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Compute Runtime adds Crescent Island and Nova Lake S support</strong>: Intel’s Compute Runtime version 26.01.36711.4 introduces initial support for Crescent Island and Nova Lake S graphics hardware, maintaining Level Zero and OpenCL support for new and past Intel GPUs. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI assistant vulnerabilities: because who needs security when you have ‘innovation’?</strong>: Microsoft Copilot apparently had a vulnerability allowing data exfiltration via a single malicious URL click, which Microsoft has now patched. Meanwhile, Claude Cowork is still exposed to file exfiltration through indirect prompt injection, with Anthropic’s brilliant solution being to tell users to ‘monitor for suspicious activity.’ It’s almost like these AI companies are more interested in shipping features than ensuring basic security, leaving users to clean up the mess. <a href="https://app.daily.dev/feed-by-ids?id=G7pZqTe0S&amp;id=jaKSkIh92&amp;id=rAHVvRPEj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing claims challenged by a dog, literally</strong>: Researchers supposedly replicated IBM’s quantum factorization results using a dog, suggesting that some high-profile quantum computing claims might be a bit… overhyped. While Rice University is doing actual, verifiable work on molecular energy transfer with quantum simulators, others are busy proving that a canine can achieve similar ‘breakthroughs’ as a multi-billion dollar corporation. Perhaps we should just give all our quantum research grants to pets. <a href="https://app.daily.dev/feed-by-ids?id=7Bd1YG4JM&amp;id=FBqZ5fVz5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI in math: still needs human babysitters, apparently</strong>: OpenAI’s GPT 5.2 is solving Erdős problems and LLMs are hitting 80-90% accuracy on statistical coding tasks, which sounds impressive until you realize human researchers make similar error rates. Terence Tao, a real mathematician, points out AI is great for ‘long tail’ problems, but humans still need to verify everything. So, AI is a ‘force multiplier’ for well-architected systems, not a replacement for senior engineers. In other words, it’s a fancy calculator that still needs you to double-check its work. <a href="https://app.daily.dev/feed-by-ids?id=8o6H9wDXV&amp;id=mhyD4ij4A" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
