<h2>Must know</h2>
<ul>
<li><strong>Interlock ransomware hits Cisco via zero day</strong>: The Interlock ransomware group exploited a critical zero-day vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center for 38 days before a patch was released. Amazon’s MadPot honeypot network uncovered the attack chain, which allowed remote code execution via deserialization with a maximum CVSS score of 10. Administrators are urged to patch immediately to prevent further exploitation by this RaaS group. <a href="https://app.daily.dev/posts/kS1FWAP6y" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor launches Composer 2 with self summarization</strong>: Cursor has released Composer 2, an in-house coding model that uses a reinforcement learning technique called self-summarization to compress context windows to 1,000 tokens. The company claims it outperforms Claude Opus 4.6 on Terminal-Bench 2.0 while being significantly cheaper at $0.50 per million input tokens. This version is the first to utilize continued pre-training before RL to handle long-horizon coding tasks involving hundreds of sequential actions. <a href="https://app.daily.dev/posts/mIKxoNmwG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FBI seizes Handala sites after Stryker wipeout</strong>: The FBI and DOJ have seized the websites of the pro-Iranian group Handala following a massive cyberattack on medical tech giant Stryker. The group reportedly compromised a Microsoft Intune administrator account to wipe tens of thousands of employee devices, leaving Stryker’s supply and ordering systems offline. CISA has issued a security alert recommending dual-administrator approval for high-impact Intune actions like device wipes. <a href="https://app.daily.dev/posts/N8kFe3mft" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Next.js 16.2 optimizes server component deserialization</strong>: The update replaces JSON.parse revivers with recursive JavaScript walks for 60% faster HTML rendering and adds an <a href="http://agents.md" target="_blank" rel="noopener nofollow">agents.md</a> file for AI context. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google AI Studio adds vibe coding and Firebase integration</strong>: A new Build Mode generates full-stack apps from natural language prompts and deploys them directly to Cloud Run with native Firebase support. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon Redshift query compilation is now 7x faster</strong>: A new ‘composition’ technique generates lightweight logic arrangements to remove compilation from the critical path of execution. <a href="https://app.daily.dev/posts/CbJoUWyN5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Heroku CLI v11 completes ESM migration</strong>: The architectural overhaul moves to oclif v4 and Node.js 22, doubling slug size limits to 1GB to better support AI and ML frameworks. <a href="https://app.daily.dev/feed-by-ids?id=rnRadhI60&amp;id=vu5ItVeI2&amp;id=2swWgPS9c" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks launches serverless GPU training runtime</strong>: The AI Runtime provides on-demand NVIDIA H100s with pre-installed PyTorch and Ray, integrated directly into the Lakehouse for CI/CD. <a href="https://app.daily.dev/posts/ofgaFNNzJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangSmith rebrands Agent Builder to Fleet</strong>: The platform now focuses on enterprise-scale agent management with tiered permissions, Slack bot identities, and centralized human-in-the-loop inboxes. <a href="https://app.daily.dev/posts/fnry81udE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS SDK for Ruby adds bulk S3 directory transfers</strong>: New methods in aws-sdk-s3 automate multipart handling and parallelism for recursive directory uploads and downloads. <a href="https://app.daily.dev/posts/tlRI3NVwm" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Checkmarx joins the AI arms race with five more agents</strong>: Checkmarx is now orchestrating a ‘fleet’ of five AI agents to handle everything from triage to remediation because apparently, the solution to AI-generated vulnerabilities is just more AI. They’re calling it ‘machine-speed security,’ which is marketing-speak for ‘we hope the LLM guesses the fix correctly before the attacker’s LLM finds the next hole.’ It’s a recursive loop of automated technical debt that security teams will eventually have to clean up manually. <a href="https://app.daily.dev/posts/PE8tBh7Qo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coding is the new low code</strong>: Google is unironically using the term ‘vibe coding’ to describe generating apps from natural language prompts in AI Studio. It’s the same ‘no-code’ promise we’ve seen for twenty years, just rebranded for the TikTok generation who’d rather ‘vibe’ with a prompt than understand a stack trace. Good luck maintaining a production system when the ‘vibe’ shifts and your generated backend logic starts hallucinating API endpoints. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Snowflake wants to teach agents what your data means</strong>: Snowflake claims that by creating a ‘semantic model’ structured file, AI agents will suddenly understand business logic that humans have struggled to document for decades. It’s a classic case of moving the goalposts: if the AI can’t write the SQL, just spend months manually encoding every table relationship and business rule into a proprietary format so the AI can ‘discover’ it. At that point, you’ve basically just written the code yourself, but with extra steps and a higher subscription fee. <a href="https://app.daily.dev/posts/6wWXcyCzZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
