80 LEVEL

CNCF

Hacker News

Josh Hornby

Lobsters

Planet Python

<h2>Must know</h2>
<ul>
<li><strong>Ingress-nginx project archived, time to migrate to Cilium</strong>: The ingress-nginx project is being archived in early 2026, meaning no more active maintenance or security updates. If you’re still using it, it’s time to move. You can either go for Cilium Ingress for a quick, minimal-change replacement, or adopt Cilium’s Gateway API for more advanced features like header-based routing and traffic splitting. Both options leverage Cilium’s eBPF-powered datapath for better performance and observability, as reported by CNCF. Migration tools are available to help with the transition. <a href="https://app.daily.dev/posts/PptBbhnAu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WhatsApp overhauls media security with Rust, launches privacy lockdown</strong>: WhatsApp has replaced 160,000 lines of C++ code with 90,000 lines of Rust in its media handling stack, deploying a new media consistency library called Kaleidoscope. This move, affecting billions of users, aims to improve performance, memory safety, and detect malicious patterns in media files. Concurrently, WhatsApp launched ‘Strict Account Settings,’ an optional privacy feature for high-risk users like journalists, which will roll out to all users soon, according to Meta’s announcements. <a href="https://app.daily.dev/feed-by-ids?id=2YIPmtHiF&amp;id=0u5TXEYDl&amp;id=Fw1AO3ne7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Office zero-day exploited in the wild</strong>: Microsoft issued an emergency patch for CVE-2026-21509, a zero-day vulnerability in Office actively exploited with a CVSS score of 7.8. This flaw bypasses security features for legacy COM and OLE components, allowing attackers to execute code via malicious Office files. While newer Office versions received immediate updates, Office 2016 and 2019 users need manual registry workarounds until patches are released. CISA has mandated federal agencies patch by February 16, highlighting the urgency. <a href="https://app.daily.dev/posts/qC937DXHe" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Linux kernel project formalizes succession plan</strong>: The Linux kernel project has formalized a succession plan for leadership after Linus Torvalds’ eventual departure, ensuring continuity and addressing concerns about an aging maintainer community. <a href="https://app.daily.dev/posts/vAKZlS9Qz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust Foundation releases 2025 annual report and strategic plan</strong>: The Rust Foundation released its 2025 Annual Report and a 2026-2028 strategic plan, prioritizing stable infrastructure, maintainer support, responsible adoption growth, and community engagement, having raised $5.1 million in 2025. <a href="https://app.daily.dev/posts/DRpplNBlF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU C Library moves to Linux Foundation infrastructure</strong>: The GNU C Library (glibc) is migrating its hosting to the Linux Foundation’s Core Toolchain Infrastructure (CTI) project to enhance cybersecurity, ensure sustainability, and diversify sponsorship, with most maintainers supporting the move. <a href="https://app.daily.dev/posts/u5a6CSvnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL community support declines amid Oracle layoffs</strong>: MySQL, despite being the second most popular database, is seeing declining community enthusiasm and development velocity due to Oracle’s layoffs in MySQL-related teams, leading to discussions about a community fork. <a href="https://app.daily.dev/posts/u7JkpyQEs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-driven polymorphic phishing uses LLMs for dynamic malware</strong>: A new phishing attack uses AI models like DeepSeek and Gemini to generate malicious JavaScript in victims’ browsers, splitting malware into fragments and reassembling them client-side to evade traditional detection systems. <a href="https://app.daily.dev/posts/jfmiKNwaJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft expands Android anti-theft protections</strong>: Google is rolling out new anti-theft features for Android 16+, including Failed Authentication Lock, expanded Identity Check coverage, and an optional security challenge for Remote Lock, with some features defaulting to on in Brazil. <a href="https://app.daily.dev/posts/a8ZBOybpX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Marketplace now supports self-service FPGA AMI listings</strong>: AWS Marketplace now allows vendors to self-list AMI products containing FPGA images, streamlining the process for hardware accelerator vendors and supporting up to 15 Amazon FPGA images per listing. <a href="https://app.daily.dev/posts/HO7u7zIEu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents built a browser from scratch, or so they say</strong>: Cursor announced their AI agents built a web browser with millions of lines of code and a custom Rust rendering engine ‘from scratch.’ Developers who actually looked at the code found it to be ‘spaghetti,’ unable to compile, and heavily reliant on existing external projects. So, ‘from scratch’ apparently means ‘cobbled together with AI and a lot of existing open-source work, then marketed with a healthy dose of hype.’ <a href="https://app.daily.dev/posts/gcgtwbk5H" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare’s serverless Matrix homeserver: secure or just broken?</strong>: Cloudflare proudly announced a serverless Matrix homeserver on Workers, claiming ‘zero maintenance’ and post-quantum security. However, actual Matrix developers are calling it ‘fundamentally broken,’ lacking basic security features like authorization checks and state resolution. Apparently, ‘serverless’ also means ‘security-less’ and ‘protocol-compliant-less’ in Cloudflare’s marketing dictionary. Who needs a working product when you have a blog post? <a href="https://app.daily.dev/feed-by-ids?id=vURH9h7xw&amp;id=93HDTbjA4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding agents: faster code, worse quality, more technical debt</strong>: Turns out, those AI coding agents everyone’s hyping up are great at spitting out code quickly, but not so much at making it good. They’re generating ‘non-idiomatic patterns and unnecessary complexity,’ leading to subtle semantic errors and a pile of technical debt. So, while you might get more code, you’ll also get more headaches. Human oversight is still ‘essential and irreplaceable,’ which is a polite way of saying AI is still pretty dumb. <a href="https://app.daily.dev/feed-by-ids?id=uilUGnhp4&amp;id=fPZ532s1X" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
