<h2>Must know</h2>
<ul>
<li><strong>Netflix fixes VFS mount lock bottleneck in containerd</strong>: Netflix engineers diagnosed a severe container launch bottleneck caused by O(n) VFS mount operations competing for global locks during migration to user namespaces. The issue led to 30-second health check timeouts on high-core metal instances, which was exacerbated by hyperthreading and NUMA latency. Netflix contributed a fix upstream to containerd, reducing mount operations from O(n) to O(1) per container by mapping the common parent directory. <a href="https://app.daily.dev/posts/cKVVAN6ve" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SkyPilot Job Groups enable heterogeneous RL training</strong>: SkyPilot launched Job Groups to solve the coordination headache of reinforcement learning post-training (GRPO, PPO) across different hardware. The new feature allows defining a single YAML to provision H100s for trainers, cheaper GPUs for rollouts, and high-memory CPUs for replay buffers simultaneously. It handles DNS-based service discovery and automatic recovery from preemptions across AWS, GCP, Azure, and Kubernetes. <a href="https://app.daily.dev/posts/KoMwla8ap" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco zero day exploited for persistent root access</strong>: Threat actor UAT-8616 has been exploiting a maximum severity authentication bypass (CVE-2026-20127) in Cisco Catalyst SD-WAN Controllers since 2023. The attack chains this flaw with an older path traversal bug to achieve persistent root access by temporarily downgrading device software to evade detection. Five Eyes agencies issued a rare joint 40-page hunt guide, and CISA has mandated federal agencies to patch by the end of the week. <a href="https://app.daily.dev/posts/zAv8BAtGJ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Mercury 2 launches as the first production diffusion LLM</strong>: Inception Labs claims its diffusion-based architecture is 10x faster than autoregressive models, hitting 1,000 tokens per second. <a href="https://app.daily.dev/posts/X9MtYJ6uL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Argo CD 3.3 introduces PreDelete hooks for safer teardowns</strong>: The release enables predictable resource deletion sequences like traffic draining and data export before final removal. <a href="https://app.daily.dev/posts/J931yCKTd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flux 2.8 GA ships with Helm v4 and server side apply</strong>: The update adds kstatus-based health checking as default and introduces faster recovery from failed deployments. <a href="https://app.daily.dev/posts/HLQXM0pWL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Minimatch patches high severity ReDoS vulnerabilities</strong>: Foundational npm package fixes three flaws that could stall the Node.js event loop via catastrophic regex backtracking. <a href="https://app.daily.dev/posts/EvvwDJaxE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Weave semantic merge driver outperforms standard Git</strong>: Using tree-sitter to understand code structure, Weave resolved 31/31 clean merges in benchmarks where Git only managed 15. <a href="https://app.daily.dev/posts/1urLsGkzn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Cloud GA brings programmable infrastructure API</strong>: The new CLI and API allow AI agents and CI/CD pipelines to manage deployments, databases, and scaling programmatically. <a href="https://app.daily.dev/posts/VdpPnPzs7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oxfmt beta claims 30x speedup over Prettier</strong>: The Rust-powered formatter is now Prettier-compatible and has been adopted by the Vue and Vercel core repositories. <a href="https://app.daily.dev/posts/7oOsPWKdE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cloudflare built a Next.js clone with AI in a week</strong>: Cloudflare is touting ‘vinext’ as a reimplementation of Next.js built almost entirely by Claude Code in seven days. Vercel’s CEO rightfully called it ‘vibe-coded’ slop, and even Cloudflare admits it’s an experimental mess not ready for production. It’s a classic ‘look what our AI can do’ stunt that ignores the years of edge-case handling required for a stable framework. <a href="https://app.daily.dev/feed-by-ids?id=zaBGmltYg&amp;id=he1DQDQSY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic claims Chinese labs are launchings distillation attacks</strong>: Anthropic is crying foul over Chinese labs using ‘distillation’—querying their models to train others—which is exactly how every AI company, including Anthropic, used the open web. Labeling standard model behavior as a ‘coordinated attack’ feels like a desperate attempt to politically weaponize their IP concerns. It’s hard to take the ‘national security’ angle seriously when the exchange counts they cited are smaller than a busy Slack channel. <a href="https://app.daily.dev/feed-by-ids?id=n4TR5sqqd&amp;id=sw4iOpjCV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Block layoffs are definitely about AI and not overhiring</strong>: Jack Dorsey is claiming AI tools can perform jobs better to justify cutting 40% of Block’s workforce. While the stock jumped 24%, analysts are calling out the ‘AI-driven’ narrative as a convenient cover for standard financial restructuring and correcting for pandemic-era overhiring. It’s the ultimate 2026 trend: if you need to fire thousands, just blame the robots so the shareholders cheer. <a href="https://app.daily.dev/feed-by-ids?id=yB8j5HQ6b&amp;id=eacyfq01e" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
