<h2>Must know</h2>
<ul>
<li><strong>AI coding tools double credential leak rates</strong>: GitGuardian’s 2026 State of Secrets Sprawl report reveals that AI-assisted commits, specifically via Claude Code, leak secrets at double the GitHub baseline. Despite a 34% year-over-year increase in detected secrets, 64% of valid leaks from 2022 remain unrevoked, signaling a massive governance failure. Security researchers emphasize that AI guardrails are fragile, with jailbreak success rates exceeding 90% across major LLMs. <a href="https://app.daily.dev/feed-by-ids?id=6oV42cFiY&amp;id=FgL8OStG7&amp;id=HKQB5N1dY&amp;id=YDOUFeINx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 149 adds built-in VPN and Sanitizer API</strong>: Mozilla is integrating a free 50GB monthly VPN directly into Firefox 149, launching March 24 to combat a desktop market share that has slipped to 4.2%. On the security front, Firefox 148 is the first browser to ship the Sanitizer API, a new web standard designed to natively block XSS attacks. Other updates include a Split View mode and a renamed Smart Window for AI-assisted browsing features. <a href="https://app.daily.dev/posts/nPBbJz5BW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Netflix slashes container startup times with kernel 6.3</strong>: Netflix engineers resolved severe container scaling bottlenecks caused by O(n) idmap mounts during User Namespace isolation. By leveraging recursive bind mount (rbind) support in Linux kernel 6.3, they reduced mount operations to O(1) and contributed the fix to containerd v2.2.0. This optimization specifically mitigates global lock contention that previously crippled performance on AWS r5.metal instances. <a href="https://app.daily.dev/posts/1EzpXbPep" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vite 8 migrates to Rolldown for 30x faster builds</strong>: The major release replaces Rollup/esbuild with Rolldown and introduces a Babel-free React plugin and Wasm SSR support. <a href="https://app.daily.dev/feed-by-ids?id=V8fBkmgAD&amp;id=db4oA9qt6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Zeroboot achieves sub-millisecond Firecracker VM snapshots</strong>: This open-source prototype forks pre-snapshotted microVMs in 0.8ms, significantly outperforming E2B and Daytona for AI agent isolation. <a href="https://app.daily.dev/posts/0KZTYS81s" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub MCP Server adds pre-commit secret scanning</strong>: Developers can now trigger credential scans within AI coding agent workflows before opening pull requests in MCP-compatible IDEs. <a href="https://app.daily.dev/posts/KccNNiiq3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Electron 41 resolves Wayland client-side decoration issues</strong>: The update fixes title bar rendering for frameless windows on Linux and defaults to Wayland-native execution. <a href="https://app.daily.dev/feed-by-ids?id=pfckIQzun&amp;id=V8fBkmgAD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux MGLRU patches boost MongoDB throughput by 30%</strong>: New kernel submissions from Tencent optimize dirty folio handling, yielding 100% performance gains on slower HDD storage. <a href="https://app.daily.dev/posts/vkiJLGz9l" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Devise v5.0.3 fixes critical email confirmation race condition</strong>: The vulnerability allowed attackers to confirm unauthorized email addresses by desynchronizing tokens during concurrent requests. <a href="https://app.daily.dev/posts/xUUVN4M4D" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Atomic-scale imaging reveals semiconductor ‘mouse bite’ defects</strong>: Cornell and TSMC researchers used electron ptychography to directly image roughness in transistor channels only 15 atoms wide. <a href="https://app.daily.dev/posts/uIm3A2zJl" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The trillion-parameter mystery model charity</strong>: A ‘Hunter Alpha’ model just appeared on OpenRouter with a million-token context and zero price tag, which developers pinky-promise is definitely DeepSeek V4. It’s processed 160 billion tokens already, because nothing says ‘sustainable business model’ like giving away massive compute to anonymous agent frameworks. We’re sure the ‘knowledge cutoff’ matching DeepSeek is just a total coincidence and not a desperate attempt to stay relevant. <a href="https://app.daily.dev/feed-by-ids?id=3baTPKkLt&amp;id=8adJ9fnLg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Biological computers are the new 10-year vaporware</strong>: Final Spark claims their ‘biocomputers’ made of living neurons are a million times more efficient than your pathetic silicon, provided the neurons don’t die after three months. They’ve got a 10-year roadmap to a general-purpose brain-in-a-box, which is convenient because that’s exactly long enough for everyone to forget this press release. It’s a great way to pivot when you realize training LLMs on GPUs is actually just too expensive for your budget. <a href="https://app.daily.dev/posts/2gDDVTHFD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The generative AI profitability hallucination</strong>: Anthropic is reportedly spending $10 billion on compute to make $5 billion in revenue, which is a bold strategy even by Silicon Valley standards. One developer found their $200 subscription was burning $12,000 in API costs, proving that ‘scaling’ in 2026 just means losing money faster than the speed of light. It’s basically the 2008 subprime crisis, but instead of houses, we’re bundling junk-rated data center debt and calling it ‘intelligence.’ <a href="https://app.daily.dev/feed-by-ids?id=8CuxGxfHz&amp;id=3baTPKkLt" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
