CNCF

Daily Dose of Data Science | Avi Chawla | Substack

freeCodeCamp

Frontend Masters

Hacker News

Lobsters

<h2>Must know</h2>
<ul>
<li><strong>AI agents are transforming coding, but quality is a concern</strong>: AI agents are fundamentally changing how developers code, with some researchers like Andrej Karpathy reporting a shift to 80% AI-assisted coding. This enables rapid prototyping and reduces repetitive work, but also raises concerns about skill atrophy and the agents’ tendency to overcomplicate solutions. While AI can generate code quickly, studies from <a href="http://fast.ai" target="_blank" rel="noopener nofollow">fast.ai</a> and others indicate it often disregards internal code quality, leading to non-idiomatic patterns, subtle semantic errors, and increased technical debt. Human oversight remains crucial to ensure maintainability and reliability, as AI-generated code frequently requires experienced developers to review and correct issues. <a href="https://app.daily.dev/feed-by-ids?id=vRs04mdPH&amp;id=uilUGnhp4&amp;id=fPZ532s1X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Office zero-day actively exploited</strong>: Microsoft has issued an emergency patch for CVE-2026-21509, a zero-day vulnerability in Office with a CVSS score of 7.8, that is actively being exploited. This flaw allows attackers to bypass security features for legacy COM and OLE components using malicious Office files. While newer Office versions and Microsoft 365 Apps received immediate updates, Office 2016 and 2019 users must rely on manual registry workarounds until patches are released. CISA has mandated that US federal agencies patch this by February 16, highlighting the urgency of the threat. <a href="https://app.daily.dev/posts/qC937DXHe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Livewire RCE vulnerability leads to mass compromises</strong>: Multiple Laravel websites have been compromised due to a probable Remote Code Execution (RCE) vulnerability (CVE-2025-54068) in Livewire versions 3.x before 3.6.4. The exploit leverages improper serialized data handling, allowing attackers to execute arbitrary code and deploy PHP backdoors in the public/ directory. This bypasses standard Laravel routing and middleware, enabling SEO cloaking and CPU cryptominers. Immediate mitigation includes upgrading Livewire to 3.6.4+, securing the APP_KEY, and restricting public/ directory permissions. <a href="https://app.daily.dev/posts/dsQkjC4Yj" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agents are getting a UI</strong>: Generative UI is emerging, allowing AI agents to render interactive components like weather cards or data tables instead of just text, with protocols like A2UI and MCP Apps enabling real-time communication between agents and frontends. <a href="https://app.daily.dev/posts/7MG572qNY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ingress-nginx is being archived, time to migrate</strong>: The ingress-nginx project will be archived in early 2026, ending active maintenance and security updates, pushing users to migrate to alternatives like Cilium Ingress for a drop-in replacement or Cilium’s Gateway API for advanced features and better performance. <a href="https://app.daily.dev/posts/PptBbhnAu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust Foundation outlines 2026-2028 strategic plan</strong>: The Rust Foundation released its 2025 Annual Report and 2026-2028 strategic plan, prioritizing stable infrastructure, sustainable maintainer support, responsible adoption growth, and community engagement, having raised $5.1 million in 2025 with $2.7 million invested directly into the Rust Project. <a href="https://app.daily.dev/posts/DRpplNBlF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel adopts formal succession plan</strong>: The Linux kernel project has formalized a succession plan for leadership after Linus Torvalds’ eventual departure, ensuring continuity by outlining a process for maintainers to select new leadership, addressing concerns about an aging community. <a href="https://app.daily.dev/posts/vAKZlS9Qz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WhatsApp adopts Rust for media security</strong>: WhatsApp replaced 160,000 lines of C++ code with 90,000 lines of Rust in its media handling stack, deploying a new media consistency library called Kaleidoscope to validate media files and detect malicious patterns, affecting billions of users worldwide. <a href="https://app.daily.dev/posts/2YIPmtHiF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Cloud launches N4A instances with Axion ARM CPUs</strong>: Google Cloud has released N4A compute instances powered by custom Axion ARM processors (Neoverse N3 cores), offering up to 64 vCPUs and 512GB RAM, targeting web servers, microservices, and containerized applications with improved performance and cost-effectiveness over previous T2A instances. <a href="https://app.daily.dev/posts/JvBjVyZ5U" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL community support declining</strong>: Despite being the second most popular database, MySQL is seeing declining community enthusiasm compared to PostgreSQL, with Oracle’s layoffs reducing development velocity and widening the feature gap between open-source and paid versions, prompting discussions about a community fork. <a href="https://app.daily.dev/posts/u7JkpyQEs" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>D-Wave’s quantum hype machine keeps spinning</strong>: D-Wave is touting 314% growth in Advantage2 usage and a $10 million QCaaS contract, while also announcing an accelerated gate-model roadmap and claiming to be the only company offering all three core quantum technologies. Conveniently, all these claims come directly from D-Wave’s press releases, with no independent verification or mention of technical or business risks. Sounds like a lot of self-congratulatory noise without much substance. <a href="https://app.daily.dev/feed-by-ids?id=B9UXF3b8Z&amp;id=DT8WvPaAx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor AI: building a browser ‘from scratch’ (with a lot of help)</strong>: Cursor claims its AI agents built a web browser with millions of lines of code and a custom Rust rendering engine ‘from scratch.’ However, developers who actually looked at the code found it to be ‘spaghetti,’ failing to compile, and heavily reliant on existing external projects. So, ‘from scratch’ apparently means ‘cobbled together with AI and existing components, then marketed with a healthy dose of hype.’ <a href="https://app.daily.dev/posts/gcgtwbk5H" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated nudie apps: Apple and Google’s ‘moderation’ is a joke</strong>: The Tech Transparency Project found 55 AI-generated nudification apps on Google Play and 47 on Apple’s App Store, collectively downloaded 705 million times and generating $117 million. Both companies only removed these policy-violating apps after external reporting, despite some actively marketing to children as young as nine. It seems ‘moderation’ for these tech giants is less about proactive enforcement and more about reacting when someone points out their massive profits from harmful content. <a href="https://app.daily.dev/posts/QTbARbMn3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
