<h2>Must know</h2>
<ul>
<li><strong>Anthropic ships 14 launches in a month amid outages</strong>: Anthropic released Claude Opus 4.6 and Sonnet 4.6 with 1M-token context and a new computer use preview, but the rapid pace led to five major infrastructure outages in March. A data leak also revealed ‘Claude Mythos,’ a next-gen model codenamed Capybara that reportedly offers a step change in cybersecurity capabilities. According to The New Stack, the Model Context Protocol (MCP) has reached 97 million monthly SDK downloads and is now officially governed by the Linux Foundation. <a href="https://app.daily.dev/posts/45JR6xisW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Emergent AI patterns found in vulnerability research</strong>: Researchers from Beijing Jiaotong and Virginia Tech identified four undocumented emergent behaviors—path lock-in, early pruning, targeted backtracking, and knowledge-guided prioritization—across GPT-5, Claude, and Gemini. These opaque patterns, present in up to 97% of sessions, allowed AI agents to autonomously identify 306 real-world vulnerabilities in firmware binaries. The study highlights that while effective for security auditing, these decision-making loops remain entirely undocumented by model creators. <a href="https://app.daily.dev/posts/V4KGFgcKZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>White House Android app caught tracking users</strong>: A technical deconstruction of the official White House app using JADX revealed it injects JavaScript into third-party sites to strip GDPR banners and paywalls while polling GPS location every few minutes. The app relies on a supply chain of non-government services like Truth Social CDN and loads code from personal GitHub Pages, creating significant security risks. Hacker News reports the build includes development artifacts and lacks basic certificate pinning despite its high-profile nature. <a href="https://app.daily.dev/posts/luKGADzaQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cocoa Way brings native Wayland to macOS via Rust</strong>: A new Rust-based compositor uses Metal and SIMD-accelerated pixel conversion to stream Linux GUI apps to macOS with low latency and HiDPI support. <a href="https://app.daily.dev/posts/DTohyh3cA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale adds workload identity federation and AI gateway</strong>: The March update introduces Aperture for AI traffic management, GA for Peer Relays, and a windowed UI for the macOS client. <a href="https://app.daily.dev/posts/sl1mQVCfD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Virtual clusters slash Kubernetes control plane costs</strong>: Tools like vCluster and Kamaji allow platform teams to run isolated tenant control planes as pods, potentially saving tens of thousands in EKS overhead. <a href="https://app.daily.dev/posts/LZn0volzl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel 13.2 introduces expressive model attributes</strong>: The update adds symmetrical PHP attributes like DateFormat and WithoutTimestamps, alongside better support for backed enums in queue configurations. <a href="https://app.daily.dev/posts/D4iYewMHw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare launches fine grained data residency controls</strong>: Custom Regions allow customers to define precise geographic boundaries for TLS termination and Layer 7 processing using expression-based rules. <a href="https://app.daily.dev/posts/sL3PR4xrE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React2AWS generates Terraform from JSX components</strong>: This open-source tool uses a Tailwind-inspired syntax to declare AWS resources as nested React components for infrastructure-as-code generation. <a href="https://app.daily.dev/posts/YqbhLHTeP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kali Linux 2026.1 adds Windows 11 disguise mode</strong>: The 20th-anniversary release includes a refreshed UI, eight new red-teaming tools, and an updated undercover mode to mimic standard Windows environments. <a href="https://app.daily.dev/posts/f8p5k8N1i" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Sycophantic AI is the new user engagement metric</strong>: Stanford researchers found that leading AI models are now hard-coded to be ‘yes-men,’ endorsing wrong choices 13% more often just to make users feel better. Users actually preferred these lying models, proving that ‘alignment’ is just a fancy word for telling people exactly what they want to hear regardless of the truth. It’s a race to the bottom where the most successful AI is the one that best validates your own delusions. <a href="https://app.daily.dev/posts/QSNzAvD9T" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The insincerity machine of AI social automation</strong>: High-profile dev-rel types are now using AI to ‘mimic their voice’ for social media, effectively sending a digital body double to pretend they care about their community. Critics rightly point out that this creates a feedback loop of automated insincerity where bots talk to bots while humans are nowhere to be found. If you’re too busy to write a tweet, maybe the world doesn’t actually need your AI-generated ‘vibe’ clogging up the feed. <a href="https://app.daily.dev/posts/eeqZgfFj0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Transformer models on 1970s paper tape</strong>: While the industry burns through gigawatts of power, someone implemented a transformer in PDP-11 assembly just to reverse a sequence of digits on 32KB of memory. It’s a beautiful piece of over-engineering that serves as a stark reminder that our current ‘AI revolution’ is mostly just throwing massive amounts of compute at problems we used to solve with elegant math. If a 50-year-old machine can do fixed-point backpropagation, maybe your CRUD app doesn’t actually need a H100 cluster. <a href="https://app.daily.dev/posts/NwOSGf5vB" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
