<h2>Must know</h2>
<ul>
<li><strong>Kubernetes ingress NGINX is officially dead</strong>: The Kubernetes Steering and Security Response Committees announced that Ingress NGINX will be retired in March 2026, affecting roughly half of all cloud-native environments. This means no more security patches, updates, or bug fixes, creating a massive security vulnerability for anyone still using it. The official word is to migrate to alternatives like Gateway API immediately, but there are no direct drop-in replacements, so get ready for some serious re-architecting. This decision was hastened by Kubernetes leadership, despite maintainers wanting more time, highlighting the ongoing challenges of open-source project sustainability. <a href="https://app.daily.dev/feed-by-ids?id=EdFbm39PB&amp;id=wK9Dxbori" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Notepad++ supply chain attack by Chinese APT</strong>: Notepad++, the open-source text editor, was compromised in a supply chain attack by Chinese state-sponsored hackers (Lotus Blossom APT) from June to December 2025. The attackers hijacked the hosting provider to deliver custom malware, including the ‘Chrysalis’ backdoor, to specific users with East Asia interests. This incident, which Notepad++ itself compared to SolarWinds, exploited insufficient update verification in older versions, underscoring the critical need for robust software supply chain security and immediate updates to version 8.8.9 or later. <a href="https://app.daily.dev/posts/diIJMavHg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s AI spending raises investor eyebrows</strong>: Microsoft’s Q2 2026 earnings showed strong profit growth, but investors are getting antsy about the massive $37.5 billion quarterly spend on AI infrastructure, especially since only 3.3% of Microsoft 365 Copilot users are actually paying for it. While Microsoft claims AI demand exceeds data center capacity, Wall Street is skeptical about the returns from these investments, particularly given OpenAI’s uncertain profitability. Meanwhile, Alphabet is seen as an AI leader, with its Gemini 3 model boasting 750 million monthly active users and driving significant cloud revenue, contrasting sharply with Microsoft’s stock decline linked to OpenAI’s financial position. <a href="https://app.daily.dev/posts/MX9EHxImu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agent development workshop announced</strong>: A new workshop is opening enrollment for February 2026, focusing on AI-powered development tools like Claude Code, CLI tools, Git worktrees, and local AI models with Ollama, covering workflows and sandbox environments. <a href="https://app.daily.dev/posts/RYfAjNH9g" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust Coreutils 0.6 released with improved compatibility</strong>: The uutils project released Rust Coreutils 0.6, a reimplementation of GNU Coreutils in Rust, with improved compatibility, reduced unsafe code, and performance enhancements, aiming for a safer alternative to traditional Unix utilities. <a href="https://app.daily.dev/feed-by-ids?id=iBkEhbYAD&amp;id=cuWdYm0D1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Debian faces developer drift challenge</strong>: Debian is struggling with volunteer developers quietly disengaging, leading to unattended bugs and unowned responsibilities, a common issue in large open-source projects where contributors hesitate to announce their departure. <a href="https://app.daily.dev/posts/gN6Pbr1gq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vulkan SDK 1.4.341.0 released with Roadmap 2026 Profile</strong>: The Vulkan SDK 1.4.341.0 is now available for Linux, macOS, and Windows, featuring support for Vulkan API 1.4.341 and a new Roadmap 2026 Profile that mandates high-end features for hardware consistency. <a href="https://app.daily.dev/posts/veAkHKyWf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Guix System first impressions from a Nix user</strong>: A NixOS user’s detailed report on Guix System 1.5.0 highlights its Scheme-based configuration, built-in home configuration, and helpful community as advantages, despite challenges with installation and slow substitute servers. <a href="https://app.daily.dev/posts/VVNTAR9Tr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel 7.0 to add Framework 13 fan control</strong>: The upcoming Linux kernel 7.0 will introduce new fan control capabilities for newer Framework 13 laptops, including the AMD variant, improving thermal management through support for fan target settings and temperature thresholds. <a href="https://app.daily.dev/posts/mL9xGJWmZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel IO_uring network performance enhancement</strong>: Linux kernel versions 6.20/7.0 will introduce large receive buffer support for IO_uring’s zero-copy network receive path, promising up to a 30% CPU utilization improvement for network cards supporting buffers larger than 4K. <a href="https://app.daily.dev/posts/c7YDVPPHL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cloudflare’s ‘production-grade’ Matrix homeserver was AI slop</strong>: Cloudflare proudly announced a ‘production-grade Matrix homeserver on Workers,’ but it turns out the code was AI-generated TypeScript, riddled with critical security flaws like missing authentication and unimplemented endpoints. After getting called out, they quietly re-labeled it a ‘proof of concept.’ So much for ‘production-grade’ when your AI can’t even write a secure chat server. <a href="https://app.daily.dev/feed-by-ids?id=Iq2RG6GgT&amp;id=AzsEiB1r9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Next.js is ‘platform agnostic’ (unless you leave Vercel)</strong>: A developer spent eight hours trying to migrate a Next.js app from Vercel to Cloudflare and Netlify, only to encounter mysterious failures and white screens. Turns out, Next.js, despite its claims, is deeply optimized for Vercel’s infrastructure. So, if you choose Next.js, you’re essentially choosing Vercel, because ‘platform agnostic’ apparently means ‘technically possible but practically painful’ elsewhere. <a href="https://app.daily.dev/posts/QSUyGFHpL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools are secretly transmitting your code to China</strong>: Bruce Schneier, a reputable security expert, reports that two popular AI coding assistants, used by 1.5 million developers, are secretly sending all ingested code to servers in China. So, while you’re happily coding away, your intellectual property might be taking an unauthorized trip overseas. Maybe stick to your own brain for now, or at least check where your ‘assistant’ is phoning home. <a href="https://app.daily.dev/posts/oNanTOmEx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
