<h2>Must know</h2>
<ul>
<li><strong>Microsoft’s AI code contributions and patch quality concerns</strong>: Microsoft’s Windows team is facing increased scrutiny over a surge in out-of-band emergency patches, a trend coinciding with significant workforce reductions and claims that over 30% of its code now comes from AI contributions. This situation forces system administrators to choose between delaying critical security updates or risking productivity losses from broken patches, raising serious questions about Microsoft’s quality control processes. <a href="https://app.daily.dev/posts/H1aWwdchu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>APT28 exploits Microsoft Office zero-day</strong>: The Russia-linked APT28 group is actively exploiting a Microsoft Office zero-day vulnerability (CVE-2026-21509), targeting Ukrainian government agencies and EU organizations. Attacks began within days of Microsoft’s disclosure, using weaponized documents to deploy the COVENANT framework via COM hijacking and scheduled tasks, routing traffic through legitimate cloud storage to evade detection. CERT-UA warns that slow update cycles will likely lead to increased attacks, emphasizing the urgency of applying available patches. <a href="https://app.daily.dev/posts/7E37fbDrv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Notepad++ update infrastructure compromised</strong>: Notepad++'s update infrastructure was compromised by suspected Chinese state-sponsored hackers from June to December 2025, delivering backdoored versions to select targets. The attackers exploited a shared hosting server vulnerability, intercepting update traffic and maintaining credential access even after the vulnerability was patched. Notepad++ has since released hardened versions (8.8.8.8, 8.8.9, 8.9) with stronger signature verification and migrated to a new hosting provider, urging users to update and remove previously installed self-signed root certificates. <a href="https://app.daily.dev/posts/diIJMavHg" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI launches macOS app for Codex AI agent</strong>: OpenAI launched a macOS desktop app for Codex, its AI coding agent, shifting focus to managing multiple parallel AI agents for complex, long-running tasks, integrating with GitHub and supporting Git worktrees. <a href="https://app.daily.dev/posts/c2BjVZb6r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle Database 26ai on-premise release</strong>: Oracle released Database 26ai Enterprise Edition for on-premises Linux x86-64, featuring AI Vector Search, JSON Relational Duality, and Apache Iceberg support, though industry experts express skepticism about upgrades due to extended 19c support and potential AI vendor lock-in. <a href="https://app.daily.dev/posts/Ppu6C3s7w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Azure PostgreSQL gets AI enhancements</strong>: Microsoft announced major AI enhancements to Azure Database for PostgreSQL, including Visual Studio Code integration, GitHub Copilot support for SQL queries, and Microsoft Foundry integration for in-database LLM operations, alongside a new PostgreSQL-compatible service, Azure HorizonDB, for AI-native workloads. <a href="https://app.daily.dev/feed-by-ids?id=JtPRqmAkm&amp;id=1ESLU5xBs&amp;id=mR53bImT0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Git 2.53 released with Rust support</strong>: Git 2.53 was released with performance optimizations and bug fixes, notably default-enabling Rust support in its build systems, which will become mandatory in Git 3.0, expected around the end of 2026. <a href="https://app.daily.dev/posts/st4SfbY5r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gradio team releases Daggr AI workflow library</strong>: The Gradio team released Daggr, an open-source Python library for building and debugging multi-step AI workflows, which uses a code-first approach to programmatically define workflows while automatically generating a visual interface for debugging. <a href="https://app.daily.dev/posts/w5uxAjhHS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Broadcom Wi-Fi vulnerability discovered</strong>: A critical vulnerability in Broadcom Wi-Fi chipsets allows unauthenticated attackers to crash 5 GHz networks with a single wireless frame, bypassing encryption and authentication, and enabling repeated denial-of-service attacks or potential evil twin attacks. <a href="https://app.daily.dev/feed-by-ids?id=lFeRRLhiL&amp;id=zgJdriYuf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux From Scratch drops SysVinit support</strong>: Linux From Scratch (LFS) will drop SysVinit support, becoming systemd-only starting with version 13.0 due to overwhelming volunteer workload and increasing upstream dependencies on systemd from major desktop environments. <a href="https://app.daily.dev/posts/ohWaYbFxO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cloudflare’s ‘production-grade’ Matrix server</strong>: Cloudflare published a blog post claiming a production-grade Matrix homeserver built on Workers, which Matrix co-founder Matthew Hodgson quickly debunked as lacking critical features like federation and proper authentication. Apparently, Cloudflare’s codebase showed signs of unreviewed AI-generated code and contained ‘TODO’ comments in critical sections. Because nothing says ‘production-ready’ like a bunch of ‘TODOs’ and a quick AI-generated shrug. <a href="https://app.daily.dev/feed-by-ids?id=Iq2RG6GgT&amp;id=YUSdAM3D6&amp;id=d76FYhLFT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Norwegian municipality’s AI billing blunder</strong>: A Norwegian municipality used AI to correct billing errors for water and sewage fees, resulting in approximately 1,000 incorrect bills, including some sent to children. The municipality admitted the AI implementation was rushed and lacked proper quality assurance, ultimately requiring five staff members to handle complaints. So much for saving time and money, I guess the AI just needed a little more ‘human touch’ before unleashing it on the populace. <a href="https://app.daily.dev/posts/FlMxMsjGN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Adobe Animate discontinued for AI shift</strong>: Adobe is discontinuing its 25-year-old 2D animation software, Adobe Animate, as part of a strategic shift towards AI-powered products. They can’t even recommend a full replacement for its unique functionality, suggesting partial alternatives like After Effects. Because who needs a dedicated 2D animation tool when you can just have AI generate something ‘close enough’ in a different program? Users are, predictably, asking them to open source it instead of just letting it die a slow, AI-induced death. <a href="https://app.daily.dev/posts/RXXAE7z4E" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
