<h2>Must know</h2>
<ul>
<li><strong>Cursor releases Composer 2 with self-summarization</strong>: Cursor has launched Composer 2, an in-house coding model that claims to outperform Claude 4.6 on terminal-based benchmarks. The technical standout is a ‘self-summarization’ reinforcement learning technique that compresses context to 1,000 tokens when limits are hit, reportedly reducing compaction errors by 50%. According to Cursor, the model is significantly cheaper than Anthropic’s flagship, though early reports show slight discrepancies in its exact benchmark scores. <a href="https://app.daily.dev/posts/mIKxoNmwG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI acquires Astral to swallow Python tooling</strong>: OpenAI is acquiring Astral, the team behind the high-performance Python tools uv and Ruff. While OpenAI promises to maintain these as open-source projects, the move strategically integrates critical developer infrastructure into the Codex ecosystem to better support AI agents. Industry analysts, including Simon Willison, note this mirrors Anthropic’s acquisition of Bun, signaling a land grab for the underlying tools developers use daily. <a href="https://app.daily.dev/feed-by-ids?id=lqMrRsYud&amp;id=G7iZQZ26W" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pentagon bans Anthropic citing supply chain risks</strong>: The Pentagon has issued a 180-day directive to remove all Anthropic products, including Claude, from its systems and those of its contractors. The administration designated the AI provider as a supply chain risk, creating a massive compliance hurdle for CISOs who must now identify embedded APIs and third-party dependencies. This move highlights the lack of mature AI-BOM standards for tracking model lineage in enterprise software. <a href="https://app.daily.dev/posts/eUVq8byjl" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Next.js 16.2 boosts rendering speed by 60 percent</strong>: The update replaces JSON.parse callbacks with recursive JavaScript walks for faster server component deserialization. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangChain opens SWE framework for cloud-sandboxed agents</strong>: Open SWE provides MIT-licensed architectures for coding agents with full shell access in isolated Modal or Daytona containers. <a href="https://app.daily.dev/posts/eZFXj4R96" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Stitch 2.0 introduces vibe design canvas</strong>: The experimental tool now features an agent manager for parallel UI exploration and exports design rules via <a href="http://design.md" target="_blank" rel="noopener nofollow">design.md</a>. <a href="https://app.daily.dev/posts/Ke9ZMEd7T" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Interlock ransomware exploits critical Cisco zero-day</strong>: A CVSS 10 vulnerability in Cisco Secure Firewall was exploited for 38 days before a patch was available. <a href="https://app.daily.dev/posts/kS1FWAP6y" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Avalonia MAUI brings .NET apps to Linux and Web</strong>: A new open-source backend allows .NET MAUI applications to run on Linux without code changes using Avalonia handlers. <a href="https://app.daily.dev/posts/wOaYwcJqb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wayland 1.25 stabilizes color management</strong>: The release features a fully documented content update model and migrates its documentation to mdBook. <a href="https://app.daily.dev/posts/PjG6ceHpw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pulumi reaches stable OPA policy support</strong>: Version 1.1.0 adds Kubernetes Gatekeeper compatibility, allowing Rego files to be used directly in Pulumi policy packs. <a href="https://app.daily.dev/posts/2G4tIOqfZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Vibe coding is just technical debt with a better publicist</strong>: The industry is currently obsessed with ‘vibe coding’—the idea that you can just chat your way to a 500,000-line microservices architecture in a week. While Cisco executives and ‘vibe engineers’ celebrate the speed, they conveniently gloss over the ‘context rot’ and subtle logic flaws that Jellyfish researchers say are already drowning senior engineers in code review hell. It turns out that making implementation cheap just makes the cost of your inevitable bad decisions much more expensive. <a href="https://app.daily.dev/feed-by-ids?id=0hn0P8EbP&amp;id=LJipAqA3r&amp;id=bRLPCrJcl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PwC threatens staff with AI or the exit</strong>: PwC US CEO Paul Griggs has declared that senior staff who aren’t ‘AI-first’ will be replaced, despite his own firm’s research showing half of businesses see zero benefit from AI. They are even considering ditching hourly billing for ‘AI-driven subscriptions,’ which sounds like a desperate attempt to pivot before clients realize they’re paying premium rates for LLM-generated boilerplate. It’s a bold strategy to fire your experts in favor of a technology that still can’t reliably handle a 36.7x compression pass without losing 60% of its facts. <a href="https://app.daily.dev/feed-by-ids?id=f99oheuSo&amp;id=bRLPCrJcl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The great AI agent security theater</strong>: Companies like Salt Security and Checkmarx are rushing to launch ‘Agentic Security Platforms’ to solve the problems created by the very AI agents they’re encouraging you to deploy. We’re being sold a cycle where autonomous agents create ‘unmanaged identities’ and ‘indirect prompt injections,’ only for the same vendors to sell us ‘machine-speed responses’ to fix them. It’s a classic arms race where the only guaranteed winners are the ones selling the subscriptions to both the problem and the cure. <a href="https://app.daily.dev/feed-by-ids?id=PE8tBh7Qo&amp;id=xv0zyL8Oh&amp;id=uVLuQPRmw" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
