<h2>Must know</h2>
<ul>
<li><strong>The rise of autonomous coding agents and the end of vibe coding</strong>: At QCon London, experts highlighted a shift from simple ‘vibe coding’ to autonomous agent swarms that integrate directly into CI/CD via headless CLI modes. While tools like Claude Code are demonstrating impressive results by writing and running their own tests, the security landscape is worsening; unsupervised agents have already begun leaking secrets to public registries like NPM. To manage this, new risk frameworks are emerging that treat agent security as a core architectural problem rather than a peripheral concern. <a href="https://app.daily.dev/feed-by-ids?id=Ur5RHzsG2&amp;id=VPYYe9XNN&amp;id=bCQotnt4R" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flash MoE brings 397B parameter models to consumer MacBooks</strong>: A new pure C and Metal inference engine called Flash-MoE is enabling the massive Qwen3.5-397B model to run on a MacBook Pro with only 48GB of RAM. By streaming from SSD and loading only four active experts per layer into memory, it achieves usable speeds of over 4 tokens per second. This project, detailed on GitHub, bypasses custom caching in favor of the OS page cache and utilizes Apple’s Accelerate BLAS for a 64% performance boost. <a href="https://app.daily.dev/posts/xsGaEEFUf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GrapheneOS defies global age verification mandates</strong>: Privacy-focused GrapheneOS has publicly refused to comply with new age verification laws in Brazil and California, stating they will never collect personal identification even if it results in regional sales bans. This stance complicates their upcoming hardware partnership with Motorola but reinforces their commitment to a zero-account, privacy-first mobile ecosystem. Critics argue these laws effectively mandate a surveillance infrastructure that is trivial for bad actors to bypass while penalizing legitimate privacy projects. <a href="https://app.daily.dev/feed-by-ids?id=3oUfmyp1R&amp;id=f2c1Srdfh&amp;id=u4yVQPhrL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel Workflow adds automatic end to end encryption</strong>: The platform now uses per-deployment unique keys and AES-256-GCM to encrypt all step arguments and return values automatically. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 rc5 stabilizes with improved hardware support</strong>: Linus Torvalds released the latest candidate featuring fixes for older Radeon GPUs and better Bluetooth support for Logitech peripherals. <a href="https://app.daily.dev/posts/1tWnyX7nj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The MkDocs ecosystem fractures amid maintainer conflict</strong>: The popular documentation tool has split into three competing forks—ProperDocs, MaterialX, and Zensical—following a community fallout with the original founder. <a href="https://app.daily.dev/posts/GedRmjUpE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ZeroPath unified AppSec platform targets RSAC 2026</strong>: This AI-native startup aims to replace fragmented SAST/SCA tools by verifying exploitability and generating mergeable PR fixes directly. <a href="https://app.daily.dev/posts/5p9F6EuUW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>State of React Native 2026 shows massive architecture adoption</strong>: Survey results indicate 80% of developers have migrated to the new architecture, with Expo Router now dominating 71% of projects. <a href="https://app.daily.dev/posts/3jRmoGbOi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Project Detroit reopens to bring JS and Python to the JVM</strong>: The initiative leverages the Foreign Function and Memory API to integrate these languages more deeply into the Java ecosystem. <a href="https://app.daily.dev/posts/24VxbiILg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fennec brings Zen Browser sidebar to stock Firefox</strong>: A new userChrome.css project allows users to replicate the Zen sidebar workflow without switching to a custom browser fork. <a href="https://app.daily.dev/posts/71xIyVeTH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cursor’s secret sauce is just a rebranded Chinese model</strong>: Cursor hyped their new ‘Composer 2’ as a frontier-level breakthrough, only for users to discover it’s actually built on Moonshot AI’s Kimi k2.5. Their VP eventually admitted the ‘mistake’ in non-disclosure, but only after being caught using a commercial partnership via Fireworks AI. It’s a classic case of wrapping someone else’s API in a fancy UI and calling it a proprietary revolution. <a href="https://app.daily.dev/posts/2O2HmWwMM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The 80 percent AI generated production SaaS claim</strong>: A new ‘free’ course on AI code architecture is being marketed using the unverifiable claim that it’s based on a production SaaS that is 80% AI-generated. This is the new ‘get rich quick’ scheme for the LLM era: use a high percentage of generated code as a proxy for efficiency while ignoring the technical debt and architectural rot likely lurking underneath. It’s less of a course and more of a promotional funnel for the ‘vibe coding’ lifestyle. <a href="https://app.daily.dev/posts/IoV0luSh7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The AI agent update trap and the 95 percent failure rate</strong>: While vendors scream about ‘agentic workflows,’ reports show that 95% of AI pilots are failing to deliver any measurable ROI. Organizations are falling into an ‘update trap,’ constantly swapping models to chase benchmarks while ignoring the fact that their underlying business processes are still broken. Throwing a multi-agent orchestrator at a legacy mess doesn’t fix the mess; it just makes the failure more expensive and harder to debug. <a href="https://app.daily.dev/posts/f6EHrsEI8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
