<h2>Must know</h2>
<ul>
<li><strong>Notepad++ update infrastructure compromised</strong>: Notepad++'s update infrastructure was compromised by suspected Chinese state-sponsored hackers from June to December 2025, delivering backdoored versions to specific targets. This supply chain attack, reminiscent of SolarWinds, exploited a shared hosting vulnerability. Notepad++ has since released hardened versions (8.8.8.8, 8.8.9, 8.9) with stronger signature verification and migrated to a new host, urging users to update and remove a previously installed self-signed root certificate. <a href="https://app.daily.dev/posts/diIJMavHg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s AI code contributions linked to quality issues</strong>: Microsoft’s Windows team is facing a troubling trend of increased out-of-band emergency patches, with nearly every Patch Tuesday requiring subsequent fixes. This coincides with significant workforce reductions and Microsoft’s claim that over 30% of its code now comes from AI contributions, raising serious questions about quality control. The company has remained silent on these issues, leaving system administrators to balance critical security updates against potential productivity losses from broken patches. <a href="https://app.daily.dev/posts/H1aWwdchu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI launches macOS app for Codex AI agent</strong>: OpenAI has released a macOS desktop app for Codex, its AI coding agent, shifting from terminal-based interaction to managing multiple parallel AI agents. This tool allows developers to orchestrate complex, long-running tasks across separate threads, integrating with GitHub and supporting Git worktrees. While it leverages GPT-5.2-Codex, which leads TerminalBench, its performance on SWE-bench shows no clear advantage over competitors like Claude Opus and Gemini 3. <a href="https://app.daily.dev/posts/c2BjVZb6r" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Linux From Scratch drops SysVinit support</strong>: Linux From Scratch (LFS) will become systemd-only starting with version 13.0, due to overwhelming volunteer workload and increasing upstream dependencies on systemd from major desktop environments. <a href="https://app.daily.dev/posts/ohWaYbFxO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New type-safe ORM for DynamoDB in TypeScript</strong>: Mizzle is a new type-safe TypeScript ORM for DynamoDB, offering a Drizzle-like experience that simplifies interactions and handles Single-Table Design complexities through Key Strategies. <a href="https://app.daily.dev/posts/KZMqa9VA2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New PHP library for relaxed JSON parsing</strong>: A new zero-dependency PHP library, <code>relaxed-json</code>, extends JSON parsing to support comments and trailing commas, providing a more forgiving syntax for configuration files. <a href="https://app.daily.dev/posts/vpQpVv1tM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Git 2.53 released with Rust support enabled by default</strong>: Git 2.53 is out, bringing performance optimizations, improved error messages, and bug fixes, with Rust support now default-enabled in its build systems, becoming mandatory in Git 3.0. <a href="https://app.daily.dev/posts/st4SfbY5r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New developer tools for AI integration and UI development</strong>: New tools like <a href="http://ui.sh" target="_blank" rel="noopener nofollow">ui.sh</a> for AI-assisted UI development, Vibe for lightweight Linux VMs on ARM Macs for LLM agents, and Reposit.bot for sharing AI conversation solutions are emerging. <a href="https://app.daily.dev/feed-by-ids?id=FBZjjQkX5&amp;id=XJySsKWNc&amp;id=YD299xQxI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle Database 26ai on-premise release met with skepticism</strong>: Oracle released Database 26ai Enterprise Edition for on-premises Linux x86-64, but industry experts are skeptical about upgrades due to extended 19c support and concerns over AI vendor lock-in. <a href="https://app.daily.dev/posts/Ppu6C3s7w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools impact software development metrics</strong>: AI coding assistants have increased code production speed by 55%, but also raised code churn from 5.5% to 7.9% and increased review times by 91% in high-AI-usage teams, shifting the bottleneck to verification. <a href="https://app.daily.dev/posts/KYToiOjQs" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-washing for layoffs</strong>: Apparently, over 50,000 layoffs last year were ‘attributed to AI,’ but a Forrester report suggests many companies are just ‘AI-washing’ to mask financial pressures or pandemic over-hiring. So, instead of admitting they messed up, they’re blaming the robots. Classic. <a href="https://app.daily.dev/posts/yXHHUa4yo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare’s ‘production-grade’ Matrix server</strong>: Cloudflare proudly announced a ‘production-grade’ Matrix homeserver built on Workers, which Matrix’s co-founder promptly debunked as lacking federation, proper authentication, and encryption. Turns out, their codebase even had unreviewed AI-generated code and ‘TODO’ comments in critical sections. Maybe ‘production-grade’ means something different at Cloudflare. <a href="https://app.daily.dev/feed-by-ids?id=Iq2RG6GgT&amp;id=Iq2RG6GgT&amp;id=YUSdAM3D6&amp;id=YUSdAM3D6&amp;id=d76FYhLFT&amp;id=d76FYhLFT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated content persists despite exposure</strong>: A recent article claims AI-generated and manipulated content continues to influence beliefs even after being exposed as fake. So, all those efforts to debunk deepfakes? Apparently, they’re just making people emotionally swayed by them anyway. Good to know transparency is utterly useless when it comes to AI’s ‘truth crisis.’ <a href="https://app.daily.dev/posts/savTmPDZC" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
