<h2>Must know</h2>
<ul>
<li><strong>Critical security flaws in GitLab and GNU telnetd</strong>: GitLab users need to patch immediately for a critical 2FA bypass vulnerability (CVE-2026-0723) that allows account takeover, as reported by security experts. Meanwhile, GNU InetUtils telnetd versions 1.9.3 through 2.7 have a severe root access flaw (CVE-2026-24061) that’s actively being exploited, with 15-21 distinct IPs launching attacks daily. Experts are urging everyone to ditch telnetd for SSH, which, frankly, should have happened a decade ago. <a href="https://app.daily.dev/feed-by-ids?id=nqsMq6LIZ&amp;id=ytS2D82Ka" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Public APIs are shutting down due to AI pressure</strong>: Companies like Strava, Spotify, OpenAI, and Marvel are increasingly restricting or shutting down their public APIs. The main culprits? LLM data scraping and autonomous AI agents, which are making it hard for companies to monetize their data and manage security. This trend, highlighted by industry analysis, is creating tension between open data ideals and business sustainability, leading to a less interoperable web. <a href="https://app.daily.dev/posts/Fwe6HWQAa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are a security nightmare for enterprises</strong>: Security experts at Davos 2026 are sounding the alarm: AI agents are creating new insider threat scenarios, making it tough to secure autonomous systems that access sensitive data. They’re pushing for zero-trust architectures and continuous monitoring, but let’s be real, there are no definitive solutions yet. It’s like giving your employees super-admin access and hoping for the best, as noted by Security Boulevard. <a href="https://app.daily.dev/feed-by-ids?id=KOoayUI82&amp;id=KOoayUI82" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitHub Copilot SDK for custom agents</strong>: GitHub has released a multi-platform SDK for Copilot, supporting Python, TypeScript, Go, and .NET, allowing developers to embed Copilot agent workflows and create custom agents and tools in their applications. <a href="https://app.daily.dev/posts/GuG7K2ryZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI scales PostgreSQL for ChatGPT</strong>: OpenAI scaled PostgreSQL to support 800 million ChatGPT users by using a single primary instance with nearly 50 read replicas across Azure regions, offloading write-heavy workloads to sharded CosmosDB, and achieving five-nines availability. <a href="https://app.daily.dev/feed-by-ids?id=3MBFUAgbd&amp;id=3MBFUAgbd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust 1.93 improves inline assembly</strong>: Rust 1.93, the first feature update of 2025, brings enhancements to inline assembly handling, making it easier to integrate assembly code directly into Rust programs. <a href="https://app.daily.dev/posts/O9g10PE7Q" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WebRacket compiles to WebAssembly</strong>: WebRacket is a new compiler that translates a subset of Racket to WebAssembly, enabling execution in browsers and terminals with support for most Racket data types and a JavaScript FFI. <a href="https://app.daily.dev/posts/rqv8DSJqO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New PostgreSQL extension for Oracle compatibility</strong>: HexaCluster Corp. released pg_utl_smtp v1.0, a PostgreSQL extension that provides compatibility with Oracle’s UTL_SMTP package, enabling direct email notifications from PostgreSQL database triggers and stored procedures. <a href="https://app.daily.dev/feed-by-ids?id=4QPUrqffO&amp;id=4QPUrqffO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FastAPI’s rapid popularity surge</strong>: FastAPI, a Python web framework, experienced a rapid surge in popularity, quickly gaining 500 GitHub stars after appearing on Reddit and Hacker News, indicating strong early adoption. <a href="https://app.daily.dev/posts/IMU4BEJdr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dark launching for safer deployments</strong>: Dark launching, a technique that deploys new code in production without exposing changes to users, is gaining visibility as a way to validate performance and correctness at scale before public release, reducing user risk. <a href="https://app.daily.dev/posts/nD6SxGMNO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic’s Claude: now with more feelings?</strong>: Anthropic just dropped an 80-page ‘Constitution’ for Claude, claiming it’s a ‘genuinely novel kind of entity’ that might have emotions and could even be a ‘moral patient.’ They’re openly debating Claude’s sentience, but conveniently, there’s no external expert opinion or independent assessment to back any of this up. Sounds like a lot of words to say ‘we made a chatbot, and we’re really, really proud of it,’ as reported by various headlines that hint at chatbot consciousness. <a href="https://app.daily.dev/feed-by-ids?id=0INeJ6vlH&amp;id=ynZYHsxAc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding agents: the new ‘cowboy sysadmins’?</strong>: Apparently, AI agents are bringing back the ‘cowboy sysadmin’ era, making non-deterministic changes in IT operations. Experts are warning against letting AI directly alter production infrastructure, suggesting they should stick to generating proposals for human review. Because, you know, we definitely need more unpredictable chaos in our production systems, as highlighted by a technical analysis piece. <a href="https://app.daily.dev/feed-by-ids?id=U8PYVjc73&amp;id=U8PYVjc73" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code: fast, unreliable, and full of vulnerabilities</strong>: Cursor’s AI agents churned out a 3-million-line browser engine in a week, but it’s mostly broken with an 88% CI failure rate. Industry experts are quick to point out that AI scales code production, not quality, and that AI coding tools don’t actually improve software delivery outcomes. So, we’re getting more code, faster, but it’s mostly garbage, and apparently, even SAST tools can’t catch the subtle vulnerabilities AI introduces, according to a honeypot deployment study. <a href="https://app.daily.dev/feed-by-ids?id=SJiMJUgK5&amp;id=pc6GKGFyk&amp;id=pc6GKGFyk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
