<h2>Must know</h2>
<ul>
<li><strong>PackageGate zero-days expose npm and yarn to worm attacks</strong>: Six zero-day vulnerabilities, dubbed PackageGate, are affecting npm and yarn, allowing attackers to bypass security controls designed to prevent worm attacks. While pnpm, vlt, and Bun have already patched these flaws, npm claims the behavior is ‘by design,’ and yarn remains unpatched. Researcher Oren Yomtov strongly advises developers to migrate to patched package managers to avoid potential malicious payload delivery, as reported by multiple security outlets. <a href="https://app.daily.dev/posts/klUkuFZvK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Office zero-day forces emergency patch</strong>: Microsoft has released an emergency out-of-band patch for a critical zero-day vulnerability (CVE-2026-21509) in Office, actively exploited in the wild. The flaw, a security feature bypass with a CVSS score of 7.8, allows attackers to circumvent protections against legacy COM and OLE components via malicious Office files. While newer versions are patched, Office 2016 and 2019 users must rely on manual registry workarounds, and CISA has mandated federal agencies patch by February 16, 2026, according to Microsoft and CISA disclosures. <a href="https://app.daily.dev/posts/qC937DXHe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare launches serverless post-quantum Matrix homeserver</strong>: Cloudflare has ported a full Matrix homeserver, Tuwunel, to its Workers platform, leveraging a serverless architecture with D1, KV, R2, and Durable Objects. This implementation uses X25519MLKEM768 post-quantum cryptography by default, protecting against harvest-now-decrypt-later attacks with sub-50ms global latency and costing less than $1 per month for idle servers. However, a Matrix homeserver developer criticized the release for lacking critical security features like authorization checks and state resolution, calling it incomplete and potentially AI-generated, as detailed in Cloudflare’s announcement and subsequent critiques. <a href="https://app.daily.dev/feed-by-ids?id=vURH9h7xw&amp;id=93HDTbjA4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agents reshape developer roles and enterprise operations</strong>: AI is shifting developer roles from coding to product architecture and outcome engineering, with the rise of ‘agentic stacks’ creating new infrastructure needs for orchestration and fault tolerance, as highlighted in ‘What will AI do to your career?’ and ‘How Agents are quietly transforming the Enterprise’. <a href="https://app.daily.dev/feed-by-ids?id=b2fEANN64&amp;id=yBxtGCVqr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PHP: Stop passing arrays everywhere</strong>: Modern PHP (8.x+) offers superior alternatives to passing arrays as data structures, such as readonly value objects, enums, and strict typing, which enforce explicit data contracts and reduce bugs, according to a recent article. <a href="https://app.daily.dev/posts/5bZBEXxfb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go language team proposes generic methods</strong>: The Go team has proposed adding generic methods to the language, allowing type parameters on concrete methods for improved code organization and readability, while maintaining backward compatibility. <a href="https://app.daily.dev/posts/W8OOKuC86" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WordPress 7.0 to introduce customizable navigation overlays</strong>: WordPress 7.0 will feature customizable navigation overlays, allowing full control over mobile menu design using blocks and patterns, saving them as reusable template parts for custom designs. <a href="https://app.daily.dev/posts/43JljYXfy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Hybrid use of Rust and JavaScript/TypeScript in modern software architectures</strong>: Hybrid architectures combining Rust for performance-critical system-level tasks and JavaScript/TypeScript for rapid UI development are gaining traction, with WebAssembly enabling seamless integration, as seen in companies like Figma and Cloudflare. <a href="https://app.daily.dev/posts/UAEJhL6mu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ESLint v10.0.0-rc.2 released for testing</strong>: ESLint v10.0.0-rc.2, a release candidate, is now available, fixing a regression in the strict rule’s global mode report range and improving documentation, with a migration guide provided for upgrading. <a href="https://app.daily.dev/posts/EfrDMwvxT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>JetBrains content creators program 2025 achievements</strong>: The JetBrains Content Creators Program added over 200 members in 2025, with participants reporting significant achievements like full-time content careers, millions of views, and Microsoft MVP recognition, often using JetBrains IDEs. <a href="https://app.daily.dev/posts/hAVhlidqj" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Ricursive Intelligence: $4B valuation for an AI chip design startup with no product</strong>: Ricursive Intelligence, founded by ex-Google researchers, just bagged $300 million at a $4 billion valuation, two months after launch. Their grand plan? An AI system to design and improve AI chips. No products, no public statements from founders, just a lot of hype and comparisons to other multi-billion dollar AI startups. Apparently, the ‘build it and they will come’ strategy now applies to valuations before actual products, as reported by multiple sources. <a href="https://app.daily.dev/posts/pqGutcjN8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding agents: still can’t code their way out of a wet paper bag</strong>: OpenAI’s own technical breakdown of Codex CLI admits their AI coding agents are ‘brittle and prone to errors’ outside their training data, requiring human oversight for production. Meanwhile, experiments with AI agents in Swift projects show they generate code that violates language idioms, adds unnecessary complexity, and introduces subtle semantic errors. So, while they’re great for boilerplate, don’t expect them to write your next clean, maintainable codebase without a lot of hand-holding, as detailed in OpenAI’s own assessment and developer experiments. <a href="https://app.daily.dev/feed-by-ids?id=qZX3wHxMK&amp;id=uilUGnhp4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI ethics: all talk, no trousers</strong>: Despite a proliferation of AI ethics frameworks, major tech companies are busy lobbying to dilute regulations and dismantling their internal ethics teams. Examples like the Dutch childcare fraud and Australia’s Robodebt, which harmed thousands, show that vulnerable populations remain unprotected. It seems ‘AI ethics’ is mostly a PR exercise, with little to no enforceable accountability, as critically observed by various reports. <a href="https://app.daily.dev/posts/lKscHPRX8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
