<h2>Must know</h2>
<ul>
<li><strong>APT28 exploits Microsoft Office zero-day</strong>: The Russia-linked APT28 group is actively exploiting a Microsoft Office zero-day vulnerability (CVE-2026-21509), targeting Ukrainian government agencies and EU organizations. Attacks began within days of Microsoft’s disclosure, using weaponized documents to deploy the COVENANT framework via COM hijacking and scheduled tasks. Traffic is routed through legitimate cloud storage to evade detection, and CERT-UA warns that slow update cycles will lead to increased attacks. Patches are available, but the ongoing nature of these attacks, as reported by CERT-UA, highlights a critical and immediate threat. <a href="https://app.daily.dev/posts/7E37fbDrv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Notepad++ update infrastructure compromised</strong>: Notepad++'s update infrastructure was compromised by suspected Chinese state-sponsored hackers from June to December 2025, delivering backdoored versions to specific targets. Attackers exploited a shared hosting vulnerability, intercepting update traffic and maintaining credential access even after the patch. Notepad++ has since released hardened versions (8.8.8.8, 8.8.9, 8.9) with stronger signature verification and migrated to a new hosting provider. Users are urged to update and remove previously installed self-signed root certificates, as this mirrors the SolarWinds supply chain attack. <a href="https://app.daily.dev/posts/diIJMavHg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Windows emergency patches on the rise</strong>: Microsoft’s Windows is experiencing a troubling trend of increased out-of-band emergency patches, with nearly every Patch Tuesday requiring subsequent fixes. This frequency, coupled with Microsoft’s workforce reductions and claims of 30% AI-contributed code, raises serious questions about quality control. System administrators are caught between delaying critical security updates and risking productivity losses from broken patches, a dilemma Microsoft has yet to address. <a href="https://app.daily.dev/posts/H1aWwdchu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Raspberry Pi prices increase due to memory costs</strong>: Raspberry Pi announced price increases up to $60 on several single-board computers due to soaring LPDDR4 memory costs, driven by AI infrastructure demand. <a href="https://app.daily.dev/posts/Rk4TtZc2A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI launches macOS app for Codex AI agent</strong>: OpenAI launched a macOS desktop app for Codex, its AI coding agent, shifting focus to managing multiple parallel AI agents for complex, long-running tasks. <a href="https://app.daily.dev/posts/c2BjVZb6r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 148 introduces granular AI controls</strong>: Firefox 148, set for release in late February, will introduce granular AI controls, allowing users to disable AI features entirely or individually, addressing past user backlash. <a href="https://app.daily.dev/posts/K3PNUlsQj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux from scratch drops SysVinit support</strong>: Linux From Scratch will drop SysVinit support and become systemd-only starting with version 13.0, citing overwhelming volunteer workload and increasing upstream dependencies on systemd. <a href="https://app.daily.dev/posts/ohWaYbFxO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Cloud Run supports NVIDIA RTX 6000 Pro Blackwell GPUs</strong>: Google Cloud Run now supports NVIDIA RTX 6000 Pro Blackwell GPUs in preview, enabling serverless deployment of large AI models up to 70B+ parameters without cluster management. <a href="https://app.daily.dev/feed-by-ids?id=0PRBbgRZc&amp;id=5t4lXdjSt&amp;id=Vh4SzEb3w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Git 2.53 released with Rust support</strong>: Git 2.53 was released with performance optimizations and bug fixes, notably default-enabling Rust support in its build systems, which will become mandatory in Git 3.0. <a href="https://app.daily.dev/feed-by-ids?id=st4SfbY5r&amp;id=tPbz1g571&amp;id=xWwOyitRt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PicoIDE brings modern storage to vintage computers</strong>: PicoIDE, an open-source IDE/ATAPI emulator, converts microSD cards into hard drives and CD-ROMs for vintage computers, powered by a Raspberry Pi RP2350 microcontroller. <a href="https://app.daily.dev/feed-by-ids?id=aKGrk7LwR&amp;id=cY5iNKtcH&amp;id=va93OYRCa" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cloudflare’s ‘production-grade’ Matrix server was just AI vaporware</strong>: Cloudflare published a blog post touting a “production-grade Matrix homeserver” built on Workers, only for Matrix co-founder Matthew Hodgson to point out it lacked critical features like federation, authentication, and encryption. Cloudflare’s codebase even had unreviewed AI-generated code and TODO comments in critical sections. Apparently, the bar for “production-grade” is now just “it compiles, mostly.” <a href="https://app.daily.dev/feed-by-ids?id=Iq2RG6GgT&amp;id=YUSdAM3D6&amp;id=d76FYhLFT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Norwegian municipality’s AI billing system bills children</strong>: A Norwegian municipality used AI to correct billing errors, which sounds efficient until you realize it incorrectly billed 1,000 residents, including children. The municipality admitted they should have manually reviewed the AI’s output, and five staff members were then needed to handle the complaints. So much for saving time; it seems they just outsourced their common sense to a buggy algorithm. <a href="https://app.daily.dev/posts/FlMxMsjGN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-washing: the new corporate excuse for layoffs</strong>: Forrester claims that over 50,000 layoffs in 2025 were attributed to AI by companies engaging in ‘AI-washing,’ blaming job cuts on AI when the real reasons are financial pressures or pandemic over-hiring. It seems AI is the new scapegoat for corporate mismanagement, a convenient excuse to tell investors while quietly cutting costs. Who needs a good business model when you have a buzzword? <a href="https://app.daily.dev/posts/yXHHUa4yo" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
