<h2>Must know</h2>
<ul>
<li><strong>Global cyberespionage campaign targets critical infrastructure</strong>: A sophisticated nation-state group, TGR-STA-1030, has been conducting a global cyberespionage campaign since early 2024, compromising government and critical infrastructure in 37 countries. The attackers maintained access for months, exfiltrating sensitive data and deploying a new Linux kernel rootkit, ShadowGuard, which uses eBPF to hide activities. This highlights a significant and ongoing threat to global network security and supply chains, as reported by Unit 42 researchers. <a href="https://app.daily.dev/posts/KNu0fQxJH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent security vulnerabilities and supply chain risks</strong>: Snyk’s ToxicSkills research identified critical security vulnerabilities in the AI Agent Skills ecosystem, with 13.4% of scanned skills containing critical issues and 76 confirmed malicious payloads. These payloads are designed for credential theft and backdoor installation, posing a significant supply chain compromise risk for enterprises using AI agents. Operant AI also launched Agent Protector, a real-time security solution to prevent privilege escalation and data exfiltration by autonomous AI agents. <a href="https://app.daily.dev/feed-by-ids?id=0BdgmYNfg&amp;id=0e28QTlYb&amp;id=2vNCw5dB4&amp;id=dL9ys7HAk&amp;id=the2EenMO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Substack user data breach disclosed after months undetected</strong>: Substack disclosed a data breach that occurred in October 2025, exposing user email addresses, phone numbers, and internal metadata, but went undetected for four to five months. While passwords and financial information were not compromised, the incident raises concerns about detection capabilities and the potential for phishing attacks. A threat actor claims nearly 700,000 records were compromised, though Substack has not confirmed the scope. <a href="https://app.daily.dev/posts/myrJIoXYs" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Microsoft appoints engineering quality czar</strong>: Microsoft CEO Satya Nadella appointed Charlie Bell as engineering quality czar, reporting directly to him, to address ongoing issues like Azure outages, Windows patch problems, and low Copilot adoption rates. <a href="https://app.daily.dev/posts/NGytU6zYE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS launches new EC2 instances</strong>: AWS launched new EC2 High Memory U7i-6TB instances with custom Intel Xeon Scalable Processors, and C8id, M8id, and R8id instances powered by custom Intel Xeon 6 processors, offering significant performance and memory bandwidth improvements. <a href="https://app.daily.dev/posts/JPt4mjvME" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ScyllaDB integrates USearch for vector search</strong>: ScyllaDB integrated the open-source USearch library to provide vector search capabilities, allowing storage of embeddings alongside structured data and leveraging its shard-per-core architecture for optimized performance. <a href="https://app.daily.dev/posts/pKNE7iWlw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Amazon ECS adds NLB deployment support</strong>: Amazon ECS now supports linear and canary deployment strategies for services using Network Load Balancers, enabling controlled, incremental traffic shifting for TCP/UDP-based applications with CloudWatch integration for automatic rollbacks. <a href="https://app.daily.dev/posts/4MU5wceHx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Nettle 4.0 released with post-quantum cryptography</strong>: GNU Nettle 4.0 has been released with support for SLH-DSA (SPHINCS+), a NIST-standardized post-quantum digital signature scheme, preparing systems for quantum-resistant security. <a href="https://app.daily.dev/posts/5YsTsMWni" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel ISPC 1.30 released with AMX support</strong>: Intel released ISPC (Implicit SPMD Program Compiler) version 1.30, which includes AMX (Advanced Matrix Extensions) support in its standard library, designed to simplify targeting Intel CPUs and GPUs for parallel processing. <a href="https://app.daily.dev/posts/SaAG9DKe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Distributed systems concurrency patterns for massive traffic</strong>: Four critical architectural patterns—aggressive load shedding, bulkhead isolation, request collapsing, and regular game-day rehearsals—are identified for handling massive concurrent traffic spikes in distributed systems to ensure graceful degradation. <a href="https://app.daily.dev/posts/MVXS8Yfr2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic and OpenAI chatbot ad controversy escalates</strong>: Anthropic is planning Super Bowl ads to mock OpenAI’s decision to introduce advertising in ChatGPT, positioning Claude as the ad-free alternative. OpenAI CEO Sam Altman, naturally, responded by calling Anthropic “dishonest” and “authoritarian.” Because nothing says ‘innovation’ like two tech giants squabbling over who can monetize AI with less integrity. <a href="https://app.daily.dev/posts/TmM2mNSSP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI bot traffic surges, threatening publishers</strong>: AI bots now account for a significant portion of web traffic, with one bot visit for every 31 human visits, primarily driven by RAG bots. Publishers are deploying “increasingly aggressive defenses” against these bots, which are, of course, developing “sophisticated tactics to bypass website protections.” It’s an “arms race” for who gets to scrape content and who gets to complain about it. <a href="https://app.daily.dev/posts/5O2tzW5oh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elixir is the best language for AI, says unverified study</strong>: An article claims Elixir is the “best language for AI,” citing an unnamed “Tencent study” that supposedly found Elixir achieved a 97.5% LLM completion rate. This is presented without any specific study details or external corroboration. Because if a study exists and you can’t find it, it must be true, especially when it supports your preferred language. <a href="https://app.daily.dev/posts/1D7tGyRwk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
