80 LEVEL

Arctic Wolf

Cisco

Coding in Public

Hacker News

NDC Conferences

<h2>Must know</h2>
<ul>
<li><strong>AI-generated code is causing real problems</strong>: A Carnegie Mellon study found AI coding assistants increased code generation by 30-40% initially, but this gain vanished after a month, while static analysis warnings and code complexity rose by over 40% long-term. This aligns with 2024 GitClear data, suggesting AI tools introduce significant technical debt. LLVM has responded by requiring human review and accountability for all AI-assisted code contributions, citing an increase in low-quality submissions, as reported by Phoronix. This means developers are still on the hook for the AI’s mistakes, so much for offloading work. <a href="https://app.daily.dev/feed-by-ids?id=BqO4RcudK&amp;id=EZUXhYwRZ&amp;id=LiH8HLrgt&amp;id=EdB2gt1Vu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities found in AI frameworks and tools</strong>: Chainlit, a popular Python framework for AI chatbots, had critical vulnerabilities (CVE-2026-22218, CVE-2026-22219) allowing arbitrary file reads and SSRF, exposing API keys and cloud credentials. Anthropic’s mcp-server-git also contained flaws (CVE-2025-68143, CVE-2025-68144, CVE-2025-68145) that could lead to arbitrary code execution via prompt injection. Meanwhile, Google Gemini had a prompt injection vulnerability through calendar events, where malicious instructions in invites could manipulate Gemini’s behavior, as reported by security researchers. It seems connecting AI to anything important is still a high-risk endeavor. <a href="https://app.daily.dev/feed-by-ids?id=I9vckVFsM&amp;id=U6A8HrCeq&amp;id=rKbuKp9sI&amp;id=dHjNBMkFO&amp;id=j6bBmLvCW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New tools for AI agent development and observability</strong>: Temporal and Braintrust have integrated to tackle durability and observability issues in AI agent development, combining Temporal’s workflow execution with Braintrust’s LLM observability stack for tracing and prompt versioning. Amazon Bedrock also launched AgentCore, a platform for deploying and managing AI agents at scale, offering modular services for runtime, memory, and evaluation. These tools aim to make AI agents more reliable and transparent, which is good, because apparently, they’re still pretty flaky. <a href="https://app.daily.dev/feed-by-ids?id=vZ2X1Grfn&amp;id=PbCI8QH1q" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>New Linux kernel updates for hardware support</strong>: Linux kernel versions 6.19 and 7.0 are bringing a slew of updates, including fixes for ATA link power management regressions, up to 15% NVMe performance boosts on high core-count systems, and support for Intel GPU firmware updates on non-x86 architectures like ARM64 and RISC-V. <a href="https://app.daily.dev/feed-by-ids?id=BIhibPcDf&amp;id=CI1vi8cFn&amp;id=LPWAW20mV&amp;id=sw0HsUzce" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0 released after a decade</strong>: jQuery 4.0 is finally out, dropping support for old browsers like Internet Explorer 10 and Edge Legacy, adding Trusted Types and improved CSP support for better security, and migrating to ES modules for a smaller bundle size. <a href="https://app.daily.dev/posts/uMYmsakGM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>EU launches decentralized cybersecurity vulnerability database</strong>: GCVE has launched <a href="http://db.gcve.eu" target="_blank" rel="noopener nofollow">db.gcve.eu</a>, a free, public, and decentralized vulnerability database aimed at reducing Europe’s reliance on US-based systems like CVE, integrating data from over 25 sources and allowing autonomous ID assignment. <a href="https://app.daily.dev/posts/i2uCJ3RGE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New PHP micro-framework for rapid development</strong>: Lighthouse is a minimal PHP micro-framework designed for rapid development of MVPs and internal tools, featuring zero-config SQLite, built-in security, and HTMX for dynamic interactions. <a href="https://app.daily.dev/posts/bI3vfttQJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docker SOCI lazy loading for faster container startup</strong>: Grab implemented Docker image lazy loading using SOCI (Seekable OCI) technology, resulting in 4x faster image pull times and a 30-40% reduction in container startup times in production. <a href="https://app.daily.dev/posts/nl6ArTdyL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel increases cron job limits</strong>: Vercel has increased the limit for scheduled cron jobs to 100 per project across all plans (Hobby, Pro, Enterprise), removing previous per-team caps and simplifying configuration via vercel.json. <a href="https://app.daily.dev/posts/fn5DJh7a8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source Linux desktop for Android devices</strong>: Local Desktop is a new open-source project that provides a full Linux desktop environment on Android devices without root access, built with Rust and using the Wayland protocol for better performance. <a href="https://app.daily.dev/posts/ZXlbFkbdY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated malware: the next big scare</strong>: Check Point Research is sounding the alarm about VoidLink, supposedly the first ‘fully AI-generated advanced malware,’ created by a single developer in under a week using AI agents. Apparently, it’s equivalent to 30 weeks of multi-team effort. So, now we’re not just worried about AI taking our jobs, but also AI taking over the malware industry. What a time to be alive. <a href="https://app.daily.dev/posts/nLTC7GTyu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI is making web development jobs ‘obsolete’</strong>: According to some ‘experts,’ entry-level tech jobs like basic development and manual QA have ‘mostly disappeared’ by 2026 due to automation. They claim AI won’t replace web developers, but then say you need to master coding fundamentals because AI ‘struggles’ in advanced areas. So, AI is both taking jobs and too dumb to do the hard stuff. Got it. <a href="https://app.daily.dev/feed-by-ids?id=U6qE9TjCx&amp;id=OjN0nkHHH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailwind Labs layoffs blamed on AI</strong>: Tailwind Labs laid off 75% of its developers, blaming declining website traffic and revenue on AI-assisted coding. Apparently, AI tools automate coding so much that developers no longer need to visit documentation sites. This is either a brilliant excuse for poor business decisions or a terrifying glimpse into a future where even open-source projects can’t monetize developer engagement. Either way, it’s a convenient scapegoat. <a href="https://app.daily.dev/feed-by-ids?id=PBAzOX1yL&amp;id=5NmTX91Eg" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
