<h2>Must know</h2>
<ul>
<li><strong>Notepad++ update infrastructure compromised by state-sponsored hackers</strong>: Notepad++'s update infrastructure was compromised by suspected Chinese state-sponsored hackers from June to December 2025, delivering backdoored versions to select targets. The attackers exploited a vulnerability in the shared hosting server, mirroring the SolarWinds attack. Notepad++ has since released hardened versions and migrated to a new hosting provider, urging users to update and remove previously installed self-signed root certificates. <a href="https://app.daily.dev/posts/diIJMavHg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft windows emergency patch frequency increases</strong>: Microsoft has been releasing an increasing number of out-of-band emergency patches, with nearly every Patch Tuesday requiring subsequent fixes. This trend, coupled with Microsoft’s workforce reductions and claims of 30% AI-contributed code, raises concerns about quality control. System administrators face a dilemma: apply critical security patches that might break systems or delay and risk vulnerabilities, as reported by various sources. <a href="https://app.daily.dev/posts/H1aWwdchu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>APT28 exploits microsoft office zero-day</strong>: The Russia-linked APT28 group is actively exploiting a Microsoft Office zero-day vulnerability (CVE-2026-21509), targeting Ukrainian government agencies and EU organizations. Attacks began within days of Microsoft’s disclosure, using weaponized documents to deploy the COVENANT framework via COM hijacking and scheduled tasks. Traffic is routed through legitimate cloud storage to evade detection, with CERT-UA warning of increased attacks due to slow update cycles. <a href="https://app.daily.dev/posts/7E37fbDrv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Linux from scratch ends sysvinit support</strong>: Linux From Scratch (LFS) will become systemd-only starting with version 13.0, dropping SysVinit support due to overwhelming volunteer workload and increasing upstream dependencies on systemd from major desktop environments. <a href="https://app.daily.dev/posts/ohWaYbFxO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry pi price hikes due to memory costs</strong>: Raspberry Pi announced price increases up to $60 on several single-board computers, including the Pi 4 and Pi 5, driven by increased LPDDR4 memory costs due to demand from AI infrastructure. <a href="https://app.daily.dev/posts/Rk4TtZc2A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New cpu hardware and linux support developments</strong>: Intel ISH firmware for Panther Lake processors was upstreamed to the Linux kernel for upcoming Dell XPS laptops, while China’s Loongson 3B6000 processor was benchmarked against AMD Zen 5 and Intel Arrow Lake CPUs. <a href="https://app.daily.dev/feed-by-ids?id=DUa6sPBrf&amp;id=QCcJuER8O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Git 2.53 released with rust support, 1gb huge pages for linux kernel</strong>: Git 2.53 was released with performance optimizations and default-enabled Rust support, which will become mandatory in Git 3.0, while experimental Linux kernel patches for 1GB PUD-level Transparent Huge Pages show faster memory access times. <a href="https://app.daily.dev/feed-by-ids?id=st4SfbY5r&amp;id=tPbz1g571&amp;id=xWwOyitRt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenTelemetry appoints new community managers</strong>: Adriana Villela (Dynatrace) and Reese Lee (New Relic) were appointed OpenTelemetry community managers, tasked with organizing events, managing social media, and growing the OpenTelemetry community. <a href="https://app.daily.dev/posts/xafQ1cS0K" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vintage computing revival and reverse engineering</strong>: PicoIDE, an open-source IDE/ATAPI emulator, was announced for vintage computers, while a Motorola 68000-based system and a Casio Business Navigator BN-20 pocket organizer were successfully reverse-engineered. <a href="https://app.daily.dev/feed-by-ids?id=aKGrk7LwR&amp;id=cY5iNKtcH&amp;id=va93OYRCa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New developer tools for ai integration and ui development</strong>: New tools like <a href="http://ui.sh" target="_blank" rel="noopener nofollow">ui.sh</a> for AI-assisted UI development, Vibe for lightweight Linux VMs on ARM Macs, and Reposit.bot for sharing AI conversation solutions are emerging to streamline developer workflows. <a href="https://app.daily.dev/feed-by-ids?id=FBZjjQkX5&amp;id=XJySsKWNc&amp;id=YD299xQxI" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cloudflare’s ‘production-grade’ matrix homeserver: more like a proof of concept</strong>: Cloudflare proudly announced a ‘production-grade’ Matrix homeserver built on Workers, only for Matrix co-founder Matthew Hodgson to point out it lacked critical features like federation, proper authentication, and encryption. Turns out, their codebase had unreviewed AI-generated code and ‘TODO’ comments in critical sections. Cloudflare later added a disclaimer, reclassifying it as a proof of concept. So much for ‘production-grade’—seems like they’re just AI-washing their way through technical blogging. <a href="https://app.daily.dev/feed-by-ids?id=Iq2RG6GgT&amp;id=YUSdAM3D6&amp;id=d76FYhLFT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-related layoffs: blaming the robots for bad business decisions</strong>: Over 50,000 layoffs in 2025 were attributed to AI, but a Forrester report suggests many companies are just ‘AI-washing’—blaming AI for job cuts actually driven by financial pressures or pandemic over-hiring. Apparently, ‘we over-hired and now we’re broke’ isn’t as investor-friendly as ‘AI is so good it replaced half our workforce.’ It’s a convenient excuse, but the robots aren’t <em>that</em> good yet. <a href="https://app.daily.dev/posts/yXHHUa4yo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI’s macos app for codex: managing agents, not coding</strong>: OpenAI launched a macOS app for Codex, their AI coding agent, shifting focus from terminal interaction to managing ‘multiple parallel AI agents.’ They claim it allows building sophisticated software in hours, but it’s designed for supervising autonomous agents, not direct code editing. So, instead of writing code, you get to babysit AI agents. Progress! <a href="https://app.daily.dev/posts/c2BjVZb6r" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
