<h2>Must know</h2>
<ul>
<li><strong>PackageGate zero-days expose npm and yarn to worm attacks</strong>: Six zero-day vulnerabilities, dubbed PackageGate, are affecting npm and yarn, allowing attackers to bypass security controls designed to prevent worm attacks. While pnpm, vlt, and Bun have already patched these flaws, npm claims the behavior is by design, not a bug. Researcher Oren Yomtov strongly advises developers to migrate to patched package managers to avoid potential malicious payload delivery, as reported by multiple sources. <a href="https://app.daily.dev/posts/klUkuFZvK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Office zero-day forces emergency patch</strong>: Microsoft released an emergency out-of-band patch for CVE-2026-21509, a critical zero-day in Office actively exploited in the wild. The flaw, a security feature bypass, allows attackers to use malicious Office files to circumvent protections against legacy COM and OLE components. While newer Office versions are patched, Office 2016 and 2019 users must rely on manual registry workarounds, and CISA has mandated federal agencies patch by February 16, 2026. <a href="https://app.daily.dev/posts/qC937DXHe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare launches serverless post-quantum Matrix homeserver</strong>: Cloudflare has ported a full Matrix homeserver, Tuwunel, to its Workers platform, leveraging a serverless architecture and post-quantum cryptography (X25519MLKEM768) by default. This aims to protect data from ‘harvest-now-decrypt-later’ attacks and offers end-to-end encrypted messaging with sub-50ms global latency, costing less than $1 per month for idle servers. However, a Matrix developer has criticized the implementation for lacking critical security features like authorization checks and state resolution, calling it incomplete and potentially more expensive than traditional hosting, according to Cloudflare’s own announcements and subsequent critiques. <a href="https://app.daily.dev/feed-by-ids?id=vURH9h7xw&amp;id=93HDTbjA4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Rust Foundation expands funding and outlines 2026-2028 strategy</strong>: The Rust Foundation raised $5.1 million in 2025, investing $2.7 million into project support, and has outlined a 2026-2028 strategy focusing on stable infrastructure, sustainable maintainer support, and responsible adoption growth. <a href="https://app.daily.dev/posts/y4jhOcrNg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go language team proposes generic methods</strong>: The Go team has proposed adding generic methods to the language, allowing type parameters on concrete methods for improved code organization and readability, with full backward compatibility. <a href="https://app.daily.dev/posts/W8OOKuC86" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Teleport unveils agentic identity framework for AI agents</strong>: Teleport launched a new Agentic Identity Framework that uses cryptographic authentication and zero-trust principles to secure AI agents, providing real-time visibility and enforcing least-privileged access to infrastructure. <a href="https://app.daily.dev/posts/CI1C8FH63" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CISA publishes federal guidance on post-quantum cryptography adoption</strong>: CISA has released guidance mapping NIST-standardized post-quantum cryptography algorithms to enterprise hardware and software, directing federal agencies to procure PQC-capable products where solutions are available. <a href="https://app.daily.dev/posts/5Lj7cpvbX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Hybrid use of Rust and JavaScript/TypeScript in modern software architectures</strong>: Modern software architectures increasingly combine Rust for performance-critical system-level components and JavaScript/TypeScript for rapid development and UI, often leveraging WebAssembly for seamless integration. <a href="https://app.daily.dev/posts/UAEJhL6mu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KPHP: open-source PHP compiler by <a href="http://VK.com" target="_blank" rel="noopener nofollow">VK.com</a></strong>: <a href="http://VK.com" target="_blank" rel="noopener nofollow">VK.com</a>’s KPHP is an open-source PHP compiler that transpiles a restricted subset of PHP to C++ for 3-10x speed improvements, offering compile-time type inference and optimizations. <a href="https://app.daily.dev/posts/801wep0xd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vinted automates Vespa search maintenance using Temporal</strong>: Vinted replaced manual Bash scripts with Temporal for orchestrating Vespa search engine operations, enabling fault-tolerant upgrades with zero user impact and significantly reducing operational toil for engineers. <a href="https://app.daily.dev/posts/psgDmdeNF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents are ‘quietly transforming the enterprise’ (into a mess)</strong>: Apparently, AI agents are now ‘quietly transforming the enterprise’ by moving from cloud to local systems and becoming ‘semi- or fully-autonomous coworkers.’ The real challenge, according to the experts, isn’t the tech, but ‘leadership in agent governance’ to avoid ‘agent sprawl’ and ‘unpredictable actions.’ So, basically, we’re building a bunch of digital toddlers and hoping they don’t burn down the house, as reported by Temporal and other ‘critical infrastructure providers.’ <a href="https://app.daily.dev/feed-by-ids?id=b2fEANN64&amp;id=yBxtGCVqr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI use accelerates decline of public knowledge platforms (who could have seen that coming?)</strong>: ChatGPT and Claude are now so good at answering questions that developers are ditching Stack Overflow and Wikipedia, leading to a 78% traffic drop for the former. This, of course, creates a ‘feedback loop’ where AI models train on increasingly AI-generated content, risking ‘model collapse’ and a future where all our knowledge is just a blurry, inbred echo of itself. Who needs human expertise when you can have confident, inaccurate AI hallucinations, right? <a href="https://app.daily.dev/posts/3Qlqmk7FI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ricursive Intelligence: $4B valuation for an AI that designs AI chips (because why not?)</strong>: Ricursive Intelligence, founded by ex-Google researchers, just snagged $300 million at a $4 billion valuation, two months after launch. Their big idea? An AI system that designs and improves AI chips. Because clearly, the problem with AI is that humans are still involved in making the hardware. No products released, no independent verification of their ‘AlphaChip’ claims, just a whole lot of investor cash for a self-improving AI chip designer. What could possibly go wrong? <a href="https://app.daily.dev/posts/pqGutcjN8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
