<h2>Must know</h2>
<ul>
<li><strong>AI is eating open-source revenue models</strong>: Tailwind CSS, a widely used framework, laid off 75% of its engineering staff due to an 80% revenue decline, despite record-high usage. The culprit? AI tools generating code and answering developer questions, eliminating the need to visit Tailwind’s documentation—their primary monetization channel. This highlights a critical challenge for open-source projects: AI leverages free community content without compensation, threatening the sustainability of foundational software, as reported by multiple tech outlets and Tailwind’s founder. <a href="https://app.daily.dev/feed-by-ids?id=RuMhQtj6W&amp;id=f3fYMXuKZ&amp;id=WagqERKHJ&amp;id=eugOrAHSX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-assisted development: productivity gains vs. knowledge erosion</strong>: Integrating AI tools into software development can speed up early ideation and simple code changes, but it introduces new risks. A software consultancy found that AI-generated suggestions can lead to ‘anchoring effects,’ limiting creative solutions, and rapid AI iteration creates review bottlenecks. More critically, over-reliance on AI risks ‘knowledge erosion’ among developers, making software harder to maintain and evolve, as discussed in a recent report. This echoes Peter Naur’s theory that true software understanding resides in developers’ minds, not just the code. <a href="https://app.daily.dev/feed-by-ids?id=DRTczTJyG&amp;id=K8Q8uNU3E&amp;id=Kf8FXuyo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>North Korean hackers weaponize QR codes, Russian APT28 targets strategic organizations</strong>: The FBI warns that North Korean state-sponsored hackers (Kimsuky/APT43) are using malicious QR codes in spear-phishing campaigns against U.S. institutions, exploiting the lack of security on personal mobile devices. Simultaneously, Russian APT28 (Fancy Bear) conducted credential theft operations from February to September 2025, targeting organizations in the Balkans, Middle East, and Europe with localized phishing emails. Both campaigns highlight a reliance on social engineering and off-the-shelf tools to bypass traditional security, as detailed by the FBI and various cybersecurity reports. <a href="https://app.daily.dev/feed-by-ids?id=XmPhFlPf5&amp;id=bNDY7v5ay" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>VS Code introduces agent skills for AI-assisted workflows</strong>: Visual Studio Code (VS Code) has launched ‘Agent Skills,’ an experimental feature allowing AI agents like GitHub Copilot to load specialized instructions and resources on demand for domain-specific developer tasks, enhancing automation and context-aware workflows. <a href="https://app.daily.dev/posts/xn90KJxf1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Claude Code 2.1 boosts developer productivity</strong>: Anthropic released Claude Code 2.1, featuring asynchronous sub-agents for parallel task execution, automatic skill hot reloading, session teleportation between environments, and Chrome browser integration for web testing, all aimed at optimizing developer efficiency. <a href="https://app.daily.dev/feed-by-ids?id=WChBmOscl&amp;id=nDBQDaZMg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Snowflake acquires Observe for AIops observability</strong>: Snowflake is acquiring Observe, an AI-driven SRE platform, to enhance observability for production AI systems by providing integrated visibility across data pipelines, AI model behavior, and infrastructure health, potentially making observability more cost-effective than traditional tools. <a href="https://app.daily.dev/posts/XlAd95QPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Kubernetes database management and cloud database bundles</strong>: Percona is donating its database management platform, now OpenEverest, to the CNCF for vendor-neutral Kubernetes database management, while Amazon Lightsail introduced larger managed database bundles for production workloads, supporting MySQL and PostgreSQL. <a href="https://app.daily.dev/feed-by-ids?id=MhqrMxmeE&amp;id=waU9VD2zd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React and Python ecosystems see major early 2026 updates</strong>: The React core team reported on React 19.2 and the React Compiler’s progress, while the Python ecosystem saw the public beta of Astral’s ty type checker, Django 6’s release, and a fix for Python 3.14’s tail-calling interpreter optimization. <a href="https://app.daily.dev/feed-by-ids?id=D2DOQ44q3&amp;id=Golang+Weekly+Issue+584%3A+January+9%2C+2026&amp;id=caNcWqICw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flock Safety’s surveillance network exposes critical vulnerabilities</strong>: Digital privacy advocates and security researchers found hundreds of Flock Safety cameras with publicly exposed admin interfaces and hardcoded ArcGIS API keys, exposing sensitive surveillance data due to systemic credential management failures. <a href="https://app.daily.dev/feed-by-ids?id=3fnWhL9Fd&amp;id=rFxdWrNGg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GPU-accelerated simulations in upcoming games and tech demos</strong>: Independent developer Zolden is creating ‘Simulario,’ a physics sandbox game using a custom GPU-based engine for fluid and particle simulations, while Unity’s ‘Time Ghost’ tech demo showcases new real-time graphics features like advanced hair systems and large-scale environments. <a href="https://app.daily.dev/feed-by-ids?id=Ie1ynbbMv&amp;id=qHlkEVUn8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cursor AI editor ‘disrupts’ coding, Stack Overflow ‘plummets’ (again)</strong>: Apparently, Cursor, an AI-native code editor built by four MIT students, has ‘disrupted’ the coding ecosystem and caused Stack Overflow’s question volume to collapse to 2008 levels. While AI tools are certainly changing how developers work, the ‘death of Stack Overflow’ has been predicted more times than the end of the world. Let’s not forget Stack Overflow was already struggling with ‘toxic moderation’ and ‘poor user experience’ long before AI became the convenient scapegoat. So, is it disruption or just another nail in a self-dug coffin? <a href="https://app.daily.dev/feed-by-ids?id=LbaA6unww&amp;id=qjJ5kf4y2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LLM-generated Java code quality: a mixed bag of ‘meh’ and ‘oh no’</strong>: SonarSource, in a completely unbiased assessment, tells us that LLM-generated Java code quality varies wildly, with some models introducing ‘security vulnerabilities’ like SQL injection. They also found that 96% of developers ‘distrust’ AI-generated code, yet 48% don’t bother to verify it before committing. So, we’re all using AI to write code we don’t trust and don’t check. What could possibly go wrong? But hey, at least we’re saving time on ‘developer toil,’ which has apparently shifted from debugging our own mistakes to fixing the AI’s. <a href="https://app.daily.dev/feed-by-ids?id=E02dc9OJZ&amp;id=q2sjuwRsf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google expands AI in Gmail, because you needed more AI in your emails</strong>: Google is rolling out new AI-powered features for Gmail, including ‘AI Overviews’ that summarize long email threads and ‘Help Me Write’ for enhanced writing assistance. These features, powered by Gemini 3, are now available to all users, with advanced options requiring paid subscriptions. Google assures us that email content won’t be used for training and AI processing happens in ‘isolated environments.’ Because nothing says ‘privacy’ like a giant tech company processing all your communications with an AI that’s definitely not learning from it. <a href="https://app.daily.dev/posts/8lOS5k1vH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
