<h2>Must know</h2>
<ul>
<li><strong>Interlock ransomware hits Cisco firewalls via zero day</strong>: The Interlock ransomware group exploited a critical zero-day vulnerability in Cisco Secure Firewall Management Center (CVE-2026-20131) for over a month before a patch was available. Amazon’s MadPot honeypot network revealed a sophisticated attack chain involving remote code execution via deserialization, carrying a maximum CVSS score of 10. Security teams are urged by Cisco and Amazon to patch immediately to prevent further exploitation by this RaaS group. <a href="https://app.daily.dev/posts/kS1FWAP6y" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FBI seizes Handala sites after massive Stryker wipe</strong>: The FBI and DOJ have seized the infrastructure of the pro-Iranian group Handala following a devastating cyberattack on medical tech giant Stryker. The attackers compromised a Microsoft Intune administrator account to remotely wipe tens of thousands of employee devices, bypassing traditional ransomware tactics in favor of pure disruption. CISA has issued a high-priority alert recommending dual-administrator approval for high-impact Intune actions like device wipes. <a href="https://app.daily.dev/posts/N8kFe3mft" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor launches Composer 2 with context compaction</strong>: Cursor has released Composer 2, an in-house coding model that utilizes a ‘self-summarization’ reinforcement learning technique to manage long-context windows. By compressing context to 1,000 tokens when limits are hit, Cursor claims a 50% reduction in compaction errors compared to standard sliding window methods. The model reportedly outperforms Claude 4.6 on Terminal-Bench 2.0 while being priced significantly lower at $0.50 per million input tokens. <a href="https://app.daily.dev/posts/mIKxoNmwG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Databricks debuts serverless GPU runtime for H100 training</strong>: The new AI Runtime (AIR) provides on-demand distributed GPU clusters with pre-installed PyTorch and Ray, integrated directly into the Lakehouse for CI/CD. <a href="https://app.daily.dev/posts/ofgaFNNzJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pulumi stabilizes OPA support with Gatekeeper compatibility</strong>: Version 1.1.0 allows developers to drop existing Gatekeeper Rego policies directly into Pulumi for shift-left enforcement during infrastructure previews. <a href="https://app.daily.dev/posts/CFvJEofzM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangSmith rebrands Agent Builder to Fleet for enterprise scale</strong>: The platform now features tiered permissions, Slack bot identities, and a centralized ‘Agent Inbox’ for human-in-the-loop oversight of AI agent swarms. <a href="https://app.daily.dev/posts/fnry81udE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Heroku CLI v11 completes ESM migration and boosts performance</strong>: The architectural overhaul moves to Node.js 22 and oclif v4, delivering faster execution and a new semantic color system for terminal accessibility. <a href="https://app.daily.dev/posts/2swWgPS9c" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Actions adds IANA timezone support for cron schedules</strong>: Developers can now specify local timezones for scheduled workflows, eliminating the need to manually calculate UTC offsets for cron expressions. <a href="https://app.daily.dev/posts/VEWbw34GM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Neo4j Aura Agent simplifies GraphRAG deployment</strong>: The low-code platform automates agent setup from graph schemas and supports Text2Cypher for retrieving structured data into LLM contexts. <a href="https://app.daily.dev/posts/mc7JPTHNY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Erlang OTP 29 RC2 introduces native records and JIT tweaks</strong>: The latest release candidate includes experimental native records (EEP-79) and improved JIT performance for binary matching and map comprehensions. <a href="https://app.daily.dev/posts/43R5cEvzp" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Google AI Studio and the rise of vibe coding</strong>: Google is unironically marketing ‘vibe coding’ as a feature where Gemini generates full-stack apps from natural language prompts. While they claim it’s a shift to ‘AI-native development,’ it’s essentially a high-stakes version of ‘copy-pasting from StackOverflow’ that deploys straight to your cloud bill. If your architectural integrity relies on a ‘vibe,’ you aren’t an engineer; you’re a passenger in a car with no brakes. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The AI arms race according to security vendors</strong>: Checkmarx is pitching an ‘AI orchestration framework’ to manage five different AI agents because apparently, the solution to AI-generated vulnerabilities is more AI. They frame this as a ‘machine-speed’ necessity, ignoring the fact that adding five black-box LLMs to your DevSecOps pipeline creates a debugging nightmare that no ‘AI-BOM’ can solve. It’s a classic case of selling a fire extinguisher that’s also filled with gasoline. <a href="https://app.daily.dev/posts/PE8tBh7Qo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Next.js 16.2 is stupid fast and agent obsessed</strong>: Vercel claims Next.js is now ‘stupid fast’ by replacing JSON.parse with recursive walks, a micro-optimization that likely won’t save your bloated client-side bundles. They’ve also added an <code>agents.md</code> file by default to new projects, because clearly, the biggest hurdle to AI agents taking our jobs was the lack of a specific markdown file in the root directory. It’s peak ‘AI-washing’ for a framework that’s increasingly focused on hype cycles over developer experience. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
