<h2>Must know</h2>
<ul>
<li><strong>Notepad++ supply chain attack by Chinese APT</strong>: Notepad++, the popular open-source text editor, was compromised in a supply chain attack by Chinese state-sponsored hackers from June to December 2025. The attackers hijacked the hosting provider’s infrastructure to deliver custom malware, including the ‘Chrysalis’ backdoor, to specific users and organizations. This incident, reminiscent of the SolarWinds attack, highlights the critical need for robust update verification and supply chain security, especially for widely used open-source tools. Notepad++ has since patched the vulnerability and migrated hosting providers. <a href="https://app.daily.dev/posts/diIJMavHg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes Ingress NGINX retirement creates security risk</strong>: Kubernetes is retiring Ingress NGINX in March 2026, impacting approximately 50% of cloud-native environments. After this date, no further security patches or bug fixes will be released, leaving users vulnerable to critical security flaws like the ‘IngressNightmare’ set. Organizations are urged to immediately migrate to alternatives like Gateway API or other third-party controllers, as remaining on Ingress NGINX post-retirement poses severe security risks. <a href="https://app.daily.dev/posts/EdFbm39PB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s AI investment faces investor skepticism</strong>: Microsoft’s massive AI spending, totaling $37.5 billion quarterly, is raising investor concerns despite strong profit growth. Only 3.3% of Microsoft 365 Copilot users are paying for the service, and Wall Street remains skeptical about AI startups generating sufficient returns to justify the infrastructure investments. This contrasts with Alphabet, which is seen as an AI leader with 750 million Gemini users and a 48% cloud revenue increase, leading to a significant market cap difference. <a href="https://app.daily.dev/posts/MX9EHxImu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Apple acquires Israeli AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a></strong>: Apple acquired Israeli AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a> for nearly $2 billion, specializing in silent speech technology that interprets facial micro-movements and subtle audio cues, aiming to redefine human-computer interaction in future Apple products like AirPods and Vision Pro. <a href="https://app.daily.dev/posts/PknWg8Xks" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SpaceX acquires xAI, plans space-based AI data centers</strong>: SpaceX acquired xAI in a deal valued at $250 billion, with plans to build solar-powered AI data centers in space to reduce computing costs for model training, consolidating Grok, X, Starlink, and SpaceX under one corporation. <a href="https://app.daily.dev/posts/wMYF638eZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mobile carriers access precise location data, Apple adds privacy feature</strong>: Mobile carriers can access precise GPS location data from devices via cellular protocols, a capability used by law enforcement and intelligence agencies, prompting Apple to introduce a new privacy feature in iOS 26.3 to limit precise location sharing with cellular networks on devices with Apple’s in-house modem. <a href="https://app.daily.dev/posts/dHAAR9RjY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NIST shifts focus to autonomous AI agent security</strong>: NIST released a Request for Information (RFI) on AI Agent Systems, signaling a shift from conversational AI to autonomous agents capable of real-world actions, focusing on security standards for systems that use scaffolding software and introduce risks beyond misinformation. <a href="https://app.daily.dev/posts/0Tee7bX06" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI bot traffic surges, threatening publishers</strong>: AI bots now constitute a significant portion of web traffic, primarily for retrieval augmented generation (RAG), leading to a sharp decline in clickthrough rates to source websites and threatening publishers’ financial viability. <a href="https://app.daily.dev/posts/5O2tzW5oh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Russian APT28 exploits Microsoft Office zero-day</strong>: Russian state-sponsored hacking group APT28 is actively exploiting CVE-2026-21509, a critical Microsoft Office zero-day vulnerability, targeting Ukrainian government agencies and EU organizations within days of its disclosure. <a href="https://app.daily.dev/posts/7E37fbDrv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FBI seizes RAMP cybercrime forum</strong>: The FBI, in coordination with the US Attorney’s Office and DOJ, seized the RAMP (Russian Anonymous Marketplace) cybercrime forum, a major platform used by ransomware-as-a-service gangs and extortionists, disrupting a core piece of criminal infrastructure. <a href="https://app.daily.dev/posts/4aHMt3dht" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X under international scrutiny following Paris office raid</strong>: French police raided X’s Paris office as part of an expanded criminal investigation into alleged child sexual abuse material, privacy violations, and algorithmic manipulation. Apparently, Elon Musk’s ‘free speech absolutism’ doesn’t extend to basic legal compliance, and his Grok AI chatbot is now accused of generating millions of nonconsensual sexualized deepfakes. Who could have possibly seen that coming from a platform that actively dismantled its content moderation? <a href="https://app.daily.dev/posts/i3FTaaYRg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nvidia-OpenAI investment status: it’s complicated</strong>: Nvidia CEO Jensen Huang initially refuted reports of scaling back a $100 billion investment in OpenAI, calling it ‘such a good investment.’ Then, five months after a letter of intent, the $100 billion infrastructure investment failed to materialize, with Huang stating it was ‘never a commitment.’ Meanwhile, OpenAI is reportedly seeking alternatives to Nvidia chips due to dissatisfaction with inference performance. It seems the ‘AI race’ is less about groundbreaking innovation and more about who can spin the most convoluted narrative around their ‘partnerships.’ <a href="https://app.daily.dev/posts/isSX8DfZa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubisoft unions call for international strike and CEO resignation</strong>: Five French unions at Ubisoft are organizing an international strike, protesting a mandatory five-day return-to-office policy and €200 million in cost cuts, while calling for CEO Yves Guillemot to resign. Unions claim management disregarded remote work agreements and announced restructuring through press releases. It’s almost as if treating employees like disposable assets and making decisions without consultation leads to, you know, <em>discontent</em>. Shocking, I know. <a href="https://app.daily.dev/posts/Ko8v1dV9o" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
