<h2>Must know</h2>
<ul>
<li><strong>AI agents are transforming software development, for better or worse</strong>: The role of developers is rapidly shifting from manual coding to higher-level architecture and strategic problem-solving, as AI agents automate code generation. Andrej Karpathy, a prominent AI researcher, now reports 80% of his coding is AI-assisted, enabling faster iteration and focusing on creative elements. However, this shift brings challenges: AI-generated code often lacks quality, introduces technical debt, and can lead to ‘vibe coding’—generating code without proper human review, creating a false sense of productivity. This raises concerns about skill atrophy and the need for human oversight to ensure maintainability and correctness, as highlighted by <a href="http://fast.ai" target="_blank" rel="noopener nofollow">fast.ai</a>. <a href="https://app.daily.dev/feed-by-ids?id=b2fEANN64&amp;id=vRs04mdPH&amp;id=uilUGnhp4&amp;id=ejy87fNgJ&amp;id=fPZ532s1X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ingress-nginx is getting archived, time to migrate</strong>: The ingress-nginx project is slated for archival in early 2026, meaning an end to active maintenance and security updates. Users are advised to migrate to either Cilium Ingress for a straightforward replacement or Cilium’s Gateway API implementation for advanced features like header-based routing and cross-namespace support. Both Cilium options leverage an eBPF-powered datapath, promising better performance and observability, according to CNCF. Migration tools are available to help automate the transition. <a href="https://app.daily.dev/posts/PptBbhnAu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Office zero-day actively exploited</strong>: Microsoft has issued an emergency patch for CVE-2026-21509, a zero-day vulnerability in Office with a CVSS score of 7.8, actively exploited in the wild. This flaw bypasses security features for legacy COM and OLE components, allowing attackers to execute code via malicious Office files. While newer Office versions and Microsoft 365 Apps received immediate updates, Office 2016 and 2019 users currently require manual registry workarounds. CISA has mandated federal agencies patch by February 16, underscoring the urgency. <a href="https://app.daily.dev/posts/qC937DXHe" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Google Photos expands AI editing to new markets</strong>: Google Photos is rolling out AI-driven, prompt-based photo editing to India, Australia, and Japan, allowing users to edit images with natural language commands on Android devices with at least 4GB RAM, using the on-device Nano Banana AI model. <a href="https://app.daily.dev/posts/QDh2xpUc9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Docker controller automates Cloudflare Tunnel sync</strong>: A new Docker controller, ‘docker-cloudflare-tunnel-sync,’ automates the synchronization of Cloudflare Tunnel routes, DNS records, and Access rules using container labels, monitoring Docker events to expose services and remove configurations automatically. <a href="https://app.daily.dev/posts/mXmVkLhBe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>JavaScript ecosystem sees performance boosts and new tools</strong>: Node.js 25.5.0 simplifies single executable application building, Bun v1.3.7 claims a 35% speed increase for async/await, and Vercel highlights Turbopack’s performance improvements, while a new open-source undo/redo library and AI coding agent migration tools also emerge. <a href="https://app.daily.dev/posts/JFSKwBTB6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WordPress 7.0 adds customizable mobile navigation overlays</strong>: WordPress 7.0 introduces customizable navigation overlays for mobile sites, allowing users and developers full control over menu design with blocks and patterns, addressing longstanding complaints and increasing flexibility. <a href="https://app.daily.dev/posts/43JljYXfy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Convex launches open source sponsorship program</strong>: Convex has initiated a formal program to offer credits to open-source projects, prioritizing those it depends on, and plans to showcase sponsored projects on a new landing page, building on its existing open-source initiatives. <a href="https://app.daily.dev/posts/6mIKq6JaH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quartex Pascal adds datamodule visual tooling</strong>: Quartex Pascal now supports datamodules, enabling drag-and-drop composition of non-visual components for JavaScript projects, including Node.js server-side, directly comparable to the visual tooling in Delphi and C++Builder. <a href="https://app.daily.dev/posts/Va0Jmmnu4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New terminal UI tool Overitall launches</strong>: Overitall (oit) is a new terminal UI tool combining process management with advanced log viewing, offering interactive log filtering, trace detection, and VS Code integration, with explicit support for AI assistants like Claude. <a href="https://app.daily.dev/posts/DkhXBDdU9" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cloudflare’s ‘serverless’ Matrix homeserver is a broken mess</strong>: Cloudflare proudly announced a Matrix homeserver running on its Workers platform, touting ‘zero maintenance’ and ‘post-quantum cryptography.’ However, actual Matrix developers quickly pointed out the implementation is ‘fundamentally broken,’ lacking basic security features like authorization checks and state resolution. Apparently, Cloudflare’s idea of ‘serverless’ means ‘serverless of essential functionality,’ and their ‘post-quantum’ security is just a fancy way of saying ‘we forgot to implement the rest of the protocol.’ <a href="https://app.daily.dev/feed-by-ids?id=93HDTbjA4&amp;id=vURH9h7xw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor’s AI-built browser: more spaghetti than breakthrough</strong>: Cursor claimed its AI agents built a web browser ‘from scratch’ with millions of lines of code and a custom Rust rendering engine. Developers who actually looked at the code called it ‘spaghetti,’ noted it fails to compile, and found it heavily relies on existing external projects. So, ‘from scratch’ apparently means ‘cobbled together by AI with a lot of help,’ and ‘custom Rust rendering engine’ might just be a fancy way to say ‘a bunch of broken code that doesn’t work.’ <a href="https://app.daily.dev/posts/gcgtwbk5H" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated nude apps: Apple and Google’s profitable oversight</strong>: The Tech Transparency Project found 102 AI-generated nude image apps across Google Play and Apple’s App Store, racking up 705 million downloads and $117 million in revenue. Both companies claim strict policies against such content, yet these apps remained available until external reporting forced their hand. It seems ‘policy enforcement’ for these tech giants is a reactive measure, only kicking in after someone else does the actual policing, all while they pocket the profits. <a href="https://app.daily.dev/posts/QTbARbMn3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
