<h2>Must know</h2>
<ul>
<li><strong>Notepad++ update infrastructure compromised by state-sponsored hackers</strong>: Notepad++'s update infrastructure was compromised by suspected Chinese state-sponsored hackers from June to December 2025, delivering backdoored versions to specific targets. This supply chain attack, reminiscent of SolarWinds, exploited a shared hosting vulnerability, leading to the release of hardened versions and a migration to a new hosting provider. Users are urged to update and remove previously installed self-signed root certificates. <a href="https://app.daily.dev/posts/diIJMavHg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>APT28 exploits Microsoft Office zero-day</strong>: The Russia-linked APT28 group is actively exploiting a Microsoft Office zero-day vulnerability (CVE-2026-21509) to target Ukrainian government agencies and EU organizations. Attacks began shortly after Microsoft’s disclosure, using weaponized documents to deploy the COVENANT framework via WebDAV connections and COM hijacking. CERT-UA warns that slow update cycles will likely increase successful attacks, emphasizing the urgency of applying available patches. <a href="https://app.daily.dev/posts/7E37fbDrv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Windows emergency patch frequency increases</strong>: Microsoft has been releasing emergency out-of-band patches with increasing frequency, often following every Patch Tuesday update. This trend, coinciding with workforce reductions and claims of 30% AI-generated code, raises concerns about Microsoft’s quality control. System administrators face the dilemma of delaying critical security fixes or risking productivity losses from potentially broken updates. <a href="https://app.daily.dev/posts/H1aWwdchu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI launches macOS app for Codex AI agent</strong>: OpenAI released a macOS desktop app for Codex, its AI coding agent, shifting focus to managing multiple parallel AI agents for complex, long-running tasks, integrating with GitHub and supporting Git worktrees. <a href="https://app.daily.dev/posts/c2BjVZb6r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New developer tools for AI integration and UI development</strong>: New tools like <a href="http://ui.sh" target="_blank" rel="noopener nofollow">ui.sh</a> for AI-assisted UI development, Vibe for lightweight Linux VMs on ARM Macs for LLM agents, and Reposit.bot for sharing AI conversation solutions are emerging to streamline developer workflows. <a href="https://app.daily.dev/feed-by-ids?id=FBZjjQkX5&amp;id=XJySsKWNc&amp;id=YD299xQxI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI enhances non-human identity management and software supply chain security</strong>: AI is being leveraged to enhance Non-Human Identity (NHI) management, which accounts for 68% of IT security incidents, by automating monitoring, predictive threat detection, and secrets rotation, while Chainguard launched Factory 2.0, an AI-powered, self-healing system for software supply chain security. <a href="https://app.daily.dev/feed-by-ids?id=4nlzVZMEL&amp;id=oAoGgXAAn&amp;id=vsMZre13v" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New CPU hardware and Linux support developments</strong>: Intel ISH firmware for Panther Lake processors was upstreamed to the Linux kernel, supporting upcoming Dell XPS laptops, while China’s Loongson 3B6000 processor showed competitive Linux performance against AMD Zen 5 and Intel Arrow Lake CPUs. <a href="https://app.daily.dev/feed-by-ids?id=DUa6sPBrf&amp;id=QCcJuER8O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux From Scratch ends SysVinit support</strong>: Linux From Scratch (LFS) will become systemd-only starting with version 13.0, dropping SysVinit support due to overwhelming volunteer workload and increasing upstream dependencies on systemd from major desktop environments. <a href="https://app.daily.dev/posts/ohWaYbFxO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Git 2.53 released with Rust support, 1GB THP patches for Linux kernel</strong>: Git 2.53 was released with performance optimizations and default Rust support, which will become mandatory in Git 3.0, while experimental Linux kernel patches for 1GB PUD-level Transparent Huge Pages show faster memory access but slower page fault allocation. <a href="https://app.daily.dev/feed-by-ids?id=st4SfbY5r&amp;id=tPbz1g571&amp;id=xWwOyitRt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS services announce new features and cost allocation options</strong>: AWS HealthImaging now supports JPEG XL for medical images, Amazon Connect introduced new APIs for automated contact center testing, and AWS Network Firewall offers flexible cost allocation via Transit Gateway attachments in GovCloud regions. <a href="https://app.daily.dev/feed-by-ids?id=AlDvfa64l&amp;id=IXQflAT6d&amp;id=LWsmZj1tc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-related layoffs: just ‘AI-washing’ for financial woes?</strong>: A Forrester report suggests that over 50,000 layoffs attributed to AI in 2025 are actually ‘AI-washing,’ a convenient excuse for companies facing financial pressures or over-hiring during the pandemic. Apparently, most companies blaming AI don’t even have mature AI applications ready to replace roles. So, AI is now the scapegoat for bad business decisions? How convenient. <a href="https://app.daily.dev/posts/yXHHUa4yo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare’s ‘production-grade’ matrix homeserver: more like a proof of concept</strong>: Cloudflare proudly announced a ‘production-grade’ Matrix homeserver built on Workers, only for the Matrix co-founder to point out it lacked critical features like federation, authentication, and encryption. Turns out, it was full of unreviewed AI-generated code and ‘TODO’ comments. Cloudflare later added a disclaimer, reclassifying it as a proof of concept. Guess ‘production-grade’ means something different when AI is involved. <a href="https://app.daily.dev/feed-by-ids?id=Iq2RG6GgT&amp;id=YUSdAM3D6&amp;id=d76FYhLFT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI manipulated content persists despite exposure: because facts are overrated</strong>: Turns out, AI-generated and manipulated content continues to influence beliefs even after being exposed as fake. The ‘truth crisis’ isn’t about preventing initial confusion, but combating persistent influence. So, even when you know it’s fake, your brain still kinda believes it. Adobe’s transparency tools are failing, and research shows people remain emotionally swayed by deepfakes. Who needs reality when you have emotionally resonant AI-generated content? <a href="https://app.daily.dev/posts/savTmPDZC" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
