<h2>Must know</h2>
<ul>
<li><strong>Singapore thwarts major cyber-espionage operation</strong>: Singapore successfully concluded an 11-month operation to remove China-linked APT group UNC3886 from its four major telecom networks. This extensive cyber defense campaign, involving over 100 government and industry personnel, targeted zero-day vulnerabilities to install custom rootkits and collect network intelligence. While limited access to critical systems was gained, no service disruptions or customer data theft occurred, highlighting the ongoing threat to critical infrastructure from state-backed actors. <a href="https://app.daily.dev/posts/wxCTLyHcH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft patches zero-days and AI vulnerabilities</strong>: Microsoft’s February Patch Tuesday addressed 59 vulnerabilities, including six actively exploited zero-days. Notably, critical remote code execution flaws were patched in GitHub Copilot and multiple IDEs (VS Code, Visual Studio, JetBrains), stemming from AI prompt injection vulnerabilities. These AI-related flaws pose significant risks to developers who often have access to sensitive credentials and infrastructure keys, emphasizing the evolving threat landscape in AI-assisted development, as reported by Krebs on Security. <a href="https://app.daily.dev/posts/zk4Rm0PBv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>European parliament bans cloud-based AI on devices</strong>: The European Parliament disabled AI features on lawmakers’ corporate devices due to data security and privacy concerns, as their IT department cannot guarantee where data is sent when AI assistants use cloud services. This temporary ban affects writing assistants, text summarization tools, and virtual assistants that rely on cloud-based processing, reflecting broader European unease about relying on U.S. tech companies for sensitive legislative data. <a href="https://app.daily.dev/posts/NW6nIRqB9" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agents drive identity security challenges</strong>: AI agents are compounding identity security challenges due to excessive permissions and the proliferation of non-human identities, with 76% of cybersecurity professionals experiencing identity-related incidents in the past year. <a href="https://app.daily.dev/feed-by-ids?id=eZUPHAL5M&amp;id=hHdbRqL2o&amp;id=i7hJKyTpP&amp;id=ioWEJHwCf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools transform developer workflows</strong>: AI coding tools are shifting developers’ roles from manual code writing to higher-level strategic work, focusing on reviewing AI-generated code, defining intent, and aligning with business goals. <a href="https://app.daily.dev/feed-by-ids?id=CBxVjaadg&amp;id=Qmgd9m7GA&amp;id=jnjzj9wis&amp;id=l9uv6PTOX&amp;id=lBsRsUwGM&amp;id=o13HbD6JR&amp;id=p4VqhMMFm&amp;id=urOGgKvla" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI infrastructure bottleneck in the US</strong>: America’s AI infrastructure faces a critical bottleneck due to 2-7 year wait times for electrical transformers and substations needed to connect data centers to the power grid, potentially costing the US its competitive edge in AI development. <a href="https://app.daily.dev/feed-by-ids?id=26XUA8lbK&amp;id=3CcXKuvOW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub launches AI-powered agentic workflows</strong>: GitHub launched Agentic Workflows in technical preview, integrating AI coding agents into GitHub Actions for repository automation, allowing workflows to be defined in plain Markdown or natural language. <a href="https://app.daily.dev/posts/pXH2kAFYs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open VSX registry implements rate limiting for AI usage</strong>: The Open VSX Registry is introducing rate limiting to manage rapidly growing AI-driven and automated usage, which increases operational costs for compute, bandwidth, and security. <a href="https://app.daily.dev/posts/PrsvlFhrJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust adoption for enhanced security and performance</strong>: WhatsApp deployed a Rust-based media parser, Kaleidoscope, to secure 3 billion devices, rewriting 160,000 lines of C++ code into 90,000 lines of Rust to detect malicious patterns and block malware. <a href="https://app.daily.dev/feed-by-ids?id=Xx8xuCz0M&amp;id=agvyjEEpz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 kernel updates overview</strong>: Linux 7.0 kernel merges significant scheduler improvements, including time slice extension support and enhanced scalability for high core count systems, while continuing to receive patches for legacy CPU architectures. <a href="https://app.daily.dev/feed-by-ids?id=RL4bMHXJh&amp;id=RaeTCnPo0&amp;id=Vay0ocYOF&amp;id=Vh5TboDqs" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated code quality concerns</strong>: Apparently, AI-generated code has ‘fundamental limitations’ and can’t be trusted for production without human oversight. Who knew that training models on the internet’s finest code would lead to repetitive logic and bugs? It’s almost like AI can’t magically fix bad engineering practices, but hey, at least it types faster. <a href="https://app.daily.dev/posts/sI20cmZZQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding assistant risks from poor documentation</strong>: Turns out, AI coding assistants rely on documentation to understand software. Without it, they ‘hallucinate’ or ‘guess,’ leading to undetected errors. So, instead of magically fixing our documentation debt, AI just makes it worse. Who’d have thought that feeding a machine garbage would result in garbage? <a href="https://app.daily.dev/posts/2XGWtlWnL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI’s impact on developer identity and joy in coding</strong>: A veteran developer is mourning the loss of ‘intimacy with machines’ because AI now handles the coding grunt work. Apparently, the ‘craft’ is transforming, and the joy of discovery is compressed. It’s almost as if the industry is moving forward, and some folks are struggling to find their identity when they’re no longer just typing code. Maybe it’s time to find joy in something other than being a human compiler? <a href="https://app.daily.dev/feed-by-ids?id=gQdkkAHm6&amp;id=hewIkht73" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
