<h2>Must know</h2>
<ul>
<li><strong>Major RCE vulnerability found in popular AI assistant</strong>: A critical 1-click Remote Code Execution (RCE) vulnerability was discovered in OpenClaw (formerly Moltbot), an AI assistant used by over 100,000 developers. The exploit chained a logic flaw with a WebSocket origin validation bypass to steal authentication tokens and execute arbitrary commands. The vulnerability has been patched, and users must upgrade to versions after v2026.1.24-1 and rotate tokens. This highlights the inherent security risks in AI agents, especially those with broad system access, as reported by security researchers from Cisco, Vectra, and 1Password. <a href="https://app.daily.dev/feed-by-ids?id=2SdHHyeRJ&amp;id=fuL6WfKHt&amp;id=zgJdriYuf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US expands foreign tech bans amid security concerns</strong>: Federal and state governments are expanding bans on foreign technology, primarily Chinese software and hardware, citing cybersecurity and national security concerns. Texas banned 26 Chinese tech and AI firms, and federal agencies blocked DeepSeek. The U.S. government is even considering banning TP-Link routers, which hold 50% of the home router market, despite no direct evidence of spying. This trend is mirrored by China, which reciprocates with bans on U.S. and Israeli cybersecurity tools, indicating a global technology decoupling. <a href="https://app.daily.dev/posts/jksoq0C8v" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Notepad++ compromised by suspected state-sponsored hackers</strong>: Notepad++ was compromised by suspected Chinese state-sponsored hackers from June to December 2025, involving an infrastructure-level breach at the hosting provider. Attackers intercepted update traffic, redirecting targeted users to malicious servers by exploiting insufficient update verification. Remediation included migrating to a new hosting provider and implementing enhanced security measures in Notepad++ v8.8.9, with v8.9.2 enforcing certificate/signature verification and XMLDSig. <a href="https://app.daily.dev/posts/NmnSVgxR6" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>iPhone becomes wireless keyboard and mouse</strong>: A developer created an ESP32-S3 adapter that allows an iPhone to function as a wireless keyboard and mouse, connecting via Bluetooth LE and providing a low-latency USB HID interface for controlling devices like Smart TVs. <a href="https://app.daily.dev/posts/UpqfH9Vo0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel 6.19 to add Uniwill/TUXEDO laptop support</strong>: The Linux 6.19 kernel will integrate a new Uniwill laptop platform driver, enabling cTGP graphics power settings and other platform-specific controls for Uniwill-manufactured laptops, including TUXEDO models, to enhance hardware integration on Linux. <a href="https://app.daily.dev/posts/mzBRRS79C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WebAssembly celebrates 10 years, expands beyond browser</strong>: WebAssembly (WASM) celebrated its 10th anniversary, evolving from a browser performance solution to a foundational technology for edge platforms, serverless runtimes, and embedded systems, offering deterministic, compact, and portable modules. <a href="https://app.daily.dev/posts/XjOBMuNCm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New open-source Kubernetes dashboard ‘Radar’ released</strong>: A new open-source Kubernetes dashboard named Radar was introduced, built as a single Go binary with an embedded React frontend, providing real-time cluster visibility via topology graphs and event timelines without requiring cloud logins or cluster-side agents. <a href="https://app.daily.dev/feed-by-ids?id=DiEunA7dc&amp;id=a3wJg58hN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MLflow integrates new LLM evaluation metrics</strong>: MLflow 3.9.0 now integrates over 50 evaluation metrics from DeepEval, RAGAS, and Arize Phoenix frameworks into a unified API, allowing developers to evaluate LLM agents and RAG systems simultaneously and compare results in the MLflow UI. <a href="https://app.daily.dev/posts/zVcgznCs0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust-analyzer gets new fixes and features</strong>: Rust-analyzer version 0.3.2777 includes fixes for upvar analysis in nested closures, macro parsing improvements, doclink handling for trait Self types, and enhancements to code completion and refactoring features. <a href="https://app.daily.dev/posts/8KTUu637N" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Svelte type checker claims 24x speedup</strong>: An experimental type and compiler warning checker, <code>svelte-fast-check</code>, was announced for Svelte and SvelteKit projects, claiming up to 24x faster performance than <code>svelte-check</code> by leveraging TypeScript 7 (tsgo), a Go-based TypeScript compiler. <a href="https://app.daily.dev/posts/6aMfl6kdf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI makes web search hard, prioritizes hallucination</strong>: OpenAI makes it difficult to enable web search in ChatGPT, despite the model frequently providing incorrect information without it. Apparently, their UX design and A/B testing actively discourage web search usage. One might wonder if they’re prioritizing cost savings over, you know, accuracy. Who needs facts when you have a chatbot that confidently hallucinates? <a href="https://app.daily.dev/posts/0hvZGEXEr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Norwegian developer predicts AI bubble burst</strong>: A Norwegian developer predicts the AI bubble will burst in 2026, leading to higher prices and lower quality AI services because companies can’t monetize their massive investments. He advises developers to avoid proprietary AI models and maintain core programming skills, criticizing AI-generated code for lacking domain understanding and creating unmaintainable systems. Because, clearly, the solution to a complex problem is always to throw more unmonetized compute at it until it collapses. <a href="https://app.daily.dev/posts/NEIMwAdHs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Musk building personal conglomerate, because why not?</strong>: Elon Musk is reportedly merging SpaceX, xAI, and Tesla into a single conglomerate, aiming to control multiple industries and echoing Gilded Age tycoons. His net worth approaches $800 billion, rivaling General Electric’s peak market capitalization. Because what the world really needs is one guy controlling rockets, AI, and electric cars, all while facing potential valuation discounts and regulatory scrutiny. What could possibly go wrong with a personal conglomerate? <a href="https://app.daily.dev/posts/1c1BwD4mb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
