<h2>Must know</h2>
<ul>
<li><strong>Next.js 16.2 targets 400 percent faster dev startup</strong>: The latest Next.js release focuses on extreme performance by replacing JSON.parse reviver callbacks with pure JavaScript recursive walks for server component payloads, resulting in up to 60% faster HTML rendering. It also introduces an <a href="http://agents.md" target="_blank" rel="noopener nofollow">agents.md</a> file by default to provide context for AI coding tools and experimental dev tools that expose browser-level data like component trees to agents via the shell. This update signals a shift toward making the framework more ‘AI-native’ while addressing long-standing developer complaints about dev server latency. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor launches Composer 2 to challenge Claude Opus</strong>: Cursor has released its third in-house model, Composer 2, which utilizes a ‘self-summarization’ reinforcement learning technique to compress context windows to 1,000 tokens when limits are hit. The company claims this reduces compaction errors by 50% and allows the model to outperform Claude Opus 4.6 on terminal-based benchmarks while being significantly cheaper at $0.50 per million input tokens. This release emphasizes long-horizon coding tasks, enabling the AI to perform hundreds of sequential actions across a codebase. <a href="https://app.daily.dev/posts/mIKxoNmwG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Interlock ransomware exploits critical Cisco zero day</strong>: A critical deserialization vulnerability in Cisco Secure Firewall Management Center (CVE-2026-20131) with a CVSS score of 10 was exploited in the wild for 38 days before a patch was available. Amazon’s MadPot honeypot network identified the Interlock ransomware group as the primary actor using this flaw for remote code execution and lateral movement. Security teams are urged to apply the March 4 patch immediately, as the group is actively targeting healthcare and government sectors. <a href="https://app.daily.dev/posts/kS1FWAP6y" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>PHP 8.5 arrives with pipe operator and FrankenPHP support</strong>: The ecosystem celebrates 30 years with native URI support and FrankenPHP benchmarks hitting 15,000 requests per second. <a href="https://app.daily.dev/posts/9QGNRKN0e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google AI Studio adds vibe coding and Firebase integration</strong>: A new ‘Build Mode’ generates full-stack apps from prompts and deploys directly to Cloud Run with live database support. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Prompts v0.3.15 introduces CLI streaming and tasks</strong>: New primitives extracted from Laravel Cloud allow for real-time terminal output and native desktop notifications. <a href="https://app.daily.dev/posts/sAfCpHwiB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TanStack Start emerges as a lightweight Next.js alternative</strong>: Developers are reporting doubled shipping velocity by moving to this React 19 and Vite-based framework to avoid App Router abstractions. <a href="https://app.daily.dev/posts/4nwi9O4T1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mystral Native brings WebGPU to desktop JS runtimes</strong>: This early-alpha runtime uses V8 and SDL3 to build native desktop games using Web APIs without a browser. <a href="https://app.daily.dev/posts/YUabTxSP2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS SDK for Ruby adds bulk S3 directory transfers</strong>: New methods automate multipart handling and parallelism for recursive directory uploads and downloads. <a href="https://app.daily.dev/posts/tlRI3NVwm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FBI seizes Handala hacktivist sites after Stryker attack</strong>: The seizure follows a massive incident where the group used compromised Intune dashboards to wipe tens of thousands of employee devices. <a href="https://app.daily.dev/posts/N8kFe3mft" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The vibe coding marketing offensive</strong>: Google is unironically trying to make ‘vibe coding’ a thing in AI Studio, promising that natural language prompts can replace actual engineering. It’s the same ‘no-code’ pipe dream rebranded for the LLM era, ignoring that ‘vibes’ don’t help when your generated backend logic hits a race condition at 3 AM. If you can’t describe the logic, an AI guessing your ‘vibe’ is just a recipe for expensive, unmaintainable technical debt. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Checkmarx and the AI security arms race</strong>: Checkmarx is pitching an ‘orchestration framework’ of five different AI agents to fix the vulnerabilities created by other AI agents. It’s a classic vendor-created problem: use LLMs to bloat your codebase with insecure ‘slop,’ then pay for a suite of ‘machine-speed’ bots to triage the mess. We’re reaching a point where the human developer is just a spectator in a very expensive, hallucination-prone feedback loop. <a href="https://app.daily.dev/posts/PE8tBh7Qo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The game industry’s AI disclosure theater</strong>: A recent survey shows 88% of game devs want AI disclosures on storefronts, while simultaneously ignoring that ‘efficiency tools’ are already baked into every modern engine. It’s a performant stance against ‘artistic theft’ that conveniently ignores the fact that most of these studios will happily use AI to automate the ‘boring’ parts of development. We’re arguing about labels on the box while the entire production pipeline is already being quietly automated away. <a href="https://app.daily.dev/posts/nnizOg9IY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
