<h2>Must know</h2>
<ul>
<li><strong>Cursor launches Composer 2 to challenge Claude 4.6</strong>: Cursor has released Composer 2, an in-house coding model that reportedly outperforms Claude Opus 4.6 on terminal-based benchmarks while being significantly cheaper. The technical core is a ‘self-summarization’ reinforcement learning technique that compresses context to 1,000 tokens, reducing errors by 50% compared to standard sliding window methods. It is available now within the Cursor editor, supporting long-horizon tasks that require hundreds of sequential actions. <a href="https://app.daily.dev/posts/mIKxoNmwG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Next.js 16.2 optimizes rendering and embraces AI agents</strong>: The latest Next.js update introduces a 400% faster dev server and a major architectural shift in HTML rendering, replacing JSON.parse callbacks with recursive JavaScript walks for 25-60% speed gains. For frontend engineers, the release adds a default <code>agents.md</code> file to provide context for AI coding tools and experimental dev tools that expose component trees and network requests directly to agents. It also features a new dev server lock file to eliminate the headache of port conflicts during local development. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Interlock ransomware exploits critical Cisco zero day</strong>: A maximum-severity vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center was exploited in the wild for over a month before a patch was available. The flaw allows remote code execution via deserialization and has been actively used by the Interlock group to target healthcare and government sectors. Amazon’s MadPot honeypot network uncovered the attack chain, and administrators are urged to apply the March 4 patch immediately. <a href="https://app.daily.dev/posts/kS1FWAP6y" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Google AI Studio adds vibe coding for full stack generation</strong>: A new Build Mode generates frontend UI and backend logic from natural language, deploying directly to Cloud Run with native Firebase integration. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TanStack Start emerges as a lightweight Next.js alternative</strong>: Developers are reporting doubled shipping velocity by migrating to TanStack Start (React 19 + Vite) to escape App Router abstraction overhead. <a href="https://app.daily.dev/posts/4nwi9O4T1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mystral Native brings WebGPU to desktop without the browser</strong>: This alpha JS/TS runtime uses SDL3 and V8 to run Three.js or PixiJS apps as native executables on macOS, Windows, and Linux. <a href="https://app.daily.dev/posts/YUabTxSP2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PHP 8.5 arrives with pipe operator and performance boosts</strong>: The 30th-anniversary release includes the long-awaited pipe operator and official support for FrankenPHP, which benchmarks 4x faster than PHP-FPM. <a href="https://app.daily.dev/posts/9QGNRKN0e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Heroku CLI v11 completes full ESM migration</strong>: The overhaul moves to oclif v4 and Node 22, offering faster execution via tree-shaking and a new semantic color system for better accessibility. <a href="https://app.daily.dev/feed-by-ids?id=2swWgPS9c&amp;id=rnRadhI60" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangSmith rebrands Agent Builder to Fleet for enterprise</strong>: The platform now features tiered permissions, per-user OAuth via ‘Assistants,’ and a centralized inbox for human-in-the-loop oversight. <a href="https://app.daily.dev/posts/fnry81udE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Checkmarx One automates triage with five AI agents</strong>: The updated platform uses specialized agents to handle vulnerability discovery and AI-assisted code remediation across DevSecOps workflows. <a href="https://app.daily.dev/posts/PE8tBh7Qo" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The vibe coding marketing blitz</strong>: Google is unironically trying to make ‘vibe coding’ a thing in AI Studio, suggesting that ‘natural language prompts’ are a replacement for actual engineering. It’s a rebranding of low-code tools that ignores the inevitable technical debt and maintenance nightmare of black-box generated applications. If your app is built on a ‘vibe,’ don’t be surprised when the production outage feels like a bad trip. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are the new blockchain for security vendors</strong>: Checkmarx is claiming an ‘AI arms race’ requires ‘machine-speed security,’ which is marketing-speak for ‘we added a wrapper around an LLM.’ While they promise five agents will automate your triage, senior engineers know that hallucinated security fixes are just a faster way to introduce new vulnerabilities. It’s the same deterministic rules we’ve always had, now with more expensive tokens and less predictability. <a href="https://app.daily.dev/posts/PE8tBh7Qo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The myth of the dead website</strong>: Agency owners and ‘thought leaders’ are debating if websites are dead because of AI overviews, while simultaneously reporting they are busier than ever. It’s a classic hype cycle tactic: declare a fundamental technology dead to sell a ‘new’ solution that is just the old solution with a chatbot on top. SEO isn’t dying; it’s just becoming more expensive as we pivot from writing for humans to writing for scrapers. <a href="https://app.daily.dev/posts/nhyEUBECD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
