<h2>Must know</h2>
<ul>
<li><strong>Frontend frameworks get critical security updates</strong>: React and Next.js frameworks have critical Denial of Service (DoS) vulnerabilities in their React Server Components (RSCs), requiring immediate updates. This comes as Expo SDK 55 beta is released, exclusively supporting React 19.2 and the New Architecture. Meanwhile, Firefox 147 shipped with major web platform features like Navigation API and CSS Anchor Positioning, but Mozilla backtracked on AI-focused plans after user backlash, as reported by This Week In React and Mozilla. <a href="https://app.daily.dev/feed-by-ids?id=6SNqtBd7I&amp;id=lUVYNy0HJ&amp;id=lzF6Kani0&amp;id=vXGQGdWIT&amp;id=MHu1Kt5o3&amp;id=P4NFiRPo5&amp;id=YpmFb9dA2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes exploit allows full cluster compromise</strong>: A security researcher found an exploit in Kubernetes’ <code>nodes/proxy GET</code> call that allows privileged command execution and full cluster compromise without audit trails. The Kubernetes team, however, classified this as ‘intended behavior,’ not a bug, and no CVE was issued. This vulnerability affects 69 monitoring tools, and while a fix is planned for Kubernetes 1.36, it’s not yet available, according to the security researcher. <a href="https://app.daily.dev/posts/bOiz0Chx6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WinRAR vulnerability actively exploited post-patch</strong>: A critical WinRAR vulnerability, CVE-2025-8088, a path traversal flaw allowing malware hiding via Windows Alternate Data Streams, is still being actively exploited by various threat actors, including state-sponsored groups and cybercriminals. Despite a patch released in July 2025, the exploit facilitates the deployment of Remote Access Trojans (RATs) and targets a wide range of entities, from military to banking users. <a href="https://app.daily.dev/posts/J0xyRLNez" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>New Angular library for type-safe dynamic forms</strong>: ng-forge is a new Angular library leveraging Signal Forms for configuration-driven dynamic form generation with full TypeScript type inference, declarative validation, and support for various UI frameworks. <a href="https://app.daily.dev/posts/BVmXj0h8x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google BigQuery integrates SQL-native AI inference</strong>: Google BigQuery now supports SQL-native managed inference, allowing data teams to deploy and run over 180,000 Hugging Face and Vertex AI models directly via SQL statements, eliminating the need for separate ML infrastructure. <a href="https://app.daily.dev/posts/eM9NtN7mD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust Foundation releases strategic plan</strong>: The Rust Foundation released its 2025 Annual Report and a 2026-2028 strategic plan focusing on stable infrastructure, maintainer support, adoption growth, organizational engagement, and community building. <a href="https://app.daily.dev/posts/DRpplNBlF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft updates Quantum Development Kit</strong>: Microsoft announced major updates to its open-source Quantum Development Kit (QDK), including VS Code and GitHub Copilot integration, and specialized toolkits for quantum chemistry and error correction. <a href="https://app.daily.dev/posts/0i847vEah" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenSilver 3.3 integrates Blazor into XAML apps</strong>: OpenSilver 3.3 now allows Blazor components to run directly within XAML applications, supporting .NET 10 and C# 14, and offering a modernization path for legacy Silverlight and WPF apps. <a href="https://app.daily.dev/posts/tV4S61iPN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Snowflake commits to Iceberg and interoperability</strong>: Snowflake announced full bidirectional interoperability support through the Iceberg REST Catalog, enabling seamless data federation between Snowflake and external platforms to reduce vendor lock-in. <a href="https://app.daily.dev/posts/1ClpU8i8R" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New open-source coding agent SERA announced</strong>: SERA, an open-source coding agent, achieves state-of-the-art performance on SWE-Bench Verified at 54.2% and is affordable to train, costing approximately $400 for reproduction. <a href="https://app.daily.dev/posts/y5jjtMeVw" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic CEO argues for minimal AI regulation, citing theoretical superintelligence</strong>: Anthropic CEO Dario Amodei penned a 22,000-word essay advocating for minimal AI regulation, primarily focusing on hypothetical superintelligent AI risks and restricting China’s chip access. Critics, however, suggest this is just ‘typical corporate resistance’ to regulation, conveniently ignoring present-day issues like wealth inequality and job displacement, especially since Anthropic isn’t expected to be profitable until 2028. Funny how the ‘existential threat’ only seems to matter when it aligns with the bottom line. <a href="https://app.daily.dev/posts/amOI7bITg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents face ‘trough of disillusionment’ in enterprise</strong>: Apparently, enterprise AI agent rollouts are struggling to move from the lab to actual production, with only the ‘largest companies’ seeing success. Redis CEO notes fewer production AI agents than expected, blaming the aggregation of unstructured data and the need for AI to ‘replicate human judgment.’ Sounds like we’re still waiting for the magic bullet, or maybe, just maybe, AI isn’t quite the silver bullet for every single business problem yet. <a href="https://app.daily.dev/posts/7PYYjzg77" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>France’s ‘digital sovereignty’ means replacing Teams with homegrown Visio</strong>: France is replacing U.S. video conferencing platforms like Teams and Zoom with its homegrown Visio across all public services by 2027, all in the name of ‘digital sovereignty’ and avoiding the U.S. CLOUD Act. They’re expecting to save a whopping €1 million per 100,000 users, which is great, but questions about interoperability and user experience persist. Because nothing says ‘innovation’ like forcing everyone onto a potentially clunkier, government-mandated platform. <a href="https://app.daily.dev/posts/32Qx0g0Ch" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
