<h2>Must know</h2>
<ul>
<li><strong>AI coding tools are getting real, but so are the costs</strong>: Salesforce deployed Cursor AI to 20,000 engineers, reporting double-digit improvements in cycle time and code quality, with 90% adoption. However, the ‘free ride’ on AI coding tools is ending, with services like Grok Code Fast now charging, pushing developers towards pay-per-use models that can cost $100-200/month for heavy users. This shift, highlighted by TechLinked, suggests that while AI boosts productivity, companies need multi-tool strategies to avoid vendor lock-in and manage rising expenses. <a href="https://app.daily.dev/feed-by-ids?id=7KqSlBkW9&amp;id=I1I7kR81e&amp;id=lEyfE8DaD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated spam is killing bug bounties</strong>: The cURL project is shutting down its bug bounty program due to an overwhelming flood of low-quality, AI-generated vulnerability reports, as reported by Elektroniktidningen. Maintainers found that filtering this ‘garbage’ consumed excessive resources, outweighing the benefits of legitimate findings. This trend, where AI tools accelerate both valid and low-quality vulnerability discovery, is forcing projects to reconsider traditional security incentives, with some experts suggesting reputation is a stronger motivator than financial rewards for serious researchers. <a href="https://app.daily.dev/feed-by-ids?id=zNsgAYHqy&amp;id=ssDvZHbZq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New security vulnerabilities in Zoom and GitLab</strong>: Zoom patched a critical command injection vulnerability (CVE-2026-22844) in its Node Multimedia Routers, allowing remote code execution for meeting participants. GitLab also released updates addressing multiple high-severity flaws, including a 2FA bypass (CVE-2026-0723) that could allow attackers to forge device responses. Both companies recommend immediate updates to prevent potential exploitation. <a href="https://app.daily.dev/posts/nU967RVZ1" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI-powered customer support is here to stay</strong>: Bunq, Europe’s second-largest neobank, deployed Finn, an AI assistant powered by Amazon Bedrock and Anthropic’s Claude models, now managing 97% of customer support interactions across 38 languages with an average response time of 47 seconds. <a href="https://app.daily.dev/posts/mMFFFln2H" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New open-source tools for AI and code management</strong>: Portkey launched the open-source MCP Gateway for centralized control of Model Context Protocol servers, while Snipplle offers an open-source code snippet manager with version control and CLI integration, and BlackIce provides a containerized toolkit for AI security testing. <a href="https://app.daily.dev/feed-by-ids?id=HxhnM7R7f&amp;id=AIlcmWOAv&amp;id=Lhaif3YU8&amp;id=PSfiaCphA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA and AMD push new hardware for AI and desktops</strong>: NVIDIA released Nemotron 3 Nano, a 30B MoE model requiring 24GB VRAM, and AMD’s ROCm 7.2 adds RDNA4 and RDNA3 GPU support, while a benchmark comparison is underway for NVIDIA’s GB10 superchip and AMD’s Ryzen AI Max+ Strix Halo CPUs. <a href="https://app.daily.dev/feed-by-ids?id=o2Y2OkLyO&amp;id=kdiVG31wA&amp;id=NRUbLXi9K" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New features for web development frameworks</strong>: Firefox 147 now supports CSS Module Scripts and the View Transition API, while nuqs, a 6kB library, synchronizes React state with URL query parameters, and Laravel 12.48.0 introduces query builder expression aliases and improved batch job tracking. <a href="https://app.daily.dev/feed-by-ids?id=7EvuIZfDg&amp;id=Cp1cdd7od&amp;id=zjqLhhiKK&amp;id=ZeIjZxaxs&amp;id=HOCHgCfJT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS enhances cloud services for web apps and data</strong>: The AWS Transfer Family Terraform module now supports deploying web applications for S3 file transfers, and AWS Clean Rooms adds SQL optimization hints for improved query performance and cost reduction. <a href="https://app.daily.dev/feed-by-ids?id=oBG0qA6hP&amp;id=qg2BNTihn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kotlin and PyTorch get performance and feature upgrades</strong>: Kotlin 2.3 introduces an unused return value checker and stabilizes multiplatform support, while PyTorch 2.10 brings performance improvements through combo-kernels and new debugging tools, with TorchScript officially deprecated. <a href="https://app.daily.dev/feed-by-ids?id=1q33ZUkes&amp;id=Cpo6kjsla" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New tools for Python and PHP developers</strong>: PHPStan 2.1.34 reports 25-40% faster static analysis, and Real Python released a quiz on integrating local LLMs with Python using Ollama, focusing on offline and privacy-focused workflows. <a href="https://app.daily.dev/feed-by-ids?id=nNqA8xPSh&amp;id=o2fGiPYCa" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents are coding for you, but maybe don’t give them the keys to the kingdom</strong>: Apparently, you can now turn a fresh VPS into a ‘fully-configured AI coding environment’ in 30 minutes with Agent Flywheel, letting AI agents write production code autonomously, 24/7. The catch? It costs $440-656/month for subscriptions and VPS, and as one discussion pointed out, it’s like ‘giving guns to people who’ve never seen them before’ when non-developers create apps without understanding security. What could possibly go wrong? <a href="https://app.daily.dev/feed-by-ids?id=xBP8EMs83&amp;id=RlSMmScC7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI will make you a JavaScript wizard, or so they say</strong>: Joshua Morony claims LLMs can optimize JavaScript performance, turning a 20-30 FPS game into 60 FPS by fixing bottlenecks from closures to bit-shifting. He says the speed and reliability make it practical for shipping projects ‘without accumulating technical debt.’ Sure, because outsourcing your understanding of performance to an AI is definitely how you build long-term maintainable systems. <a href="https://app.daily.dev/posts/NttZ4o4xB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The EU wants open source, but only if it’s <em>their</em> open source</strong>: The European Commission is seeking public input on mandating Free and Open Source Software (FOSS) to reduce dependency on non-EU firms, pushing for public sector adoption and educational reform to replace proprietary software. They’re even suggesting direct funding and tax incentives for EU-based FOSS companies. Because nothing says ‘open’ like a government-mandated, geographically restricted ecosystem. <a href="https://app.daily.dev/posts/bi5i5eszo" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
