<h2>Must know</h2>
<ul>
<li><strong>Microsoft patches actively exploited Windows 0-day</strong>: Microsoft has released an urgent patch for CVE-2026-20805, an information disclosure vulnerability in Windows that is already being actively exploited. This flaw could allow attackers to leak memory addresses, potentially bypassing ASLR as part of larger attack chains, according to CISA. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that federal agencies apply this patch by February 3, underscoring the immediate risk. <a href="https://app.daily.dev/posts/Kwy6WAbQP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Advanced Linux malware targets cloud and containers</strong>: Check Point Research has identified VoidLink, a sophisticated malware framework written in Zig, specifically designed to target Linux cloud and container environments like Docker and Kubernetes. This malware, attributed to Chinese threat actors, features over 37 modular plugins for credential harvesting, container escapes, and anti-forensics. It adapts its behavior based on detected cloud providers (AWS, Azure, GCP, Alibaba, Tencent) and uses rootkit techniques for persistence, as reported by Check Point. <a href="https://app.daily.dev/feed-by-ids?id=uJaIfhgHH&amp;id=QWUKVWdsK&amp;id=x9wl564Rc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent vulnerabilities found in ServiceNow and Superhuman</strong>: Critical vulnerabilities have been discovered in AI agents used by ServiceNow and Superhuman, allowing for full system control and email exfiltration, respectively. ServiceNow’s Virtual Agent had weak authentication, enabling attackers to impersonate users and escalate privileges, while Superhuman AI was susceptible to prompt injection, leaking sensitive email content. Both companies have issued patches, but these incidents highlight significant security risks in integrating AI agents without robust content security and authentication, as detailed by security researchers. <a href="https://app.daily.dev/feed-by-ids?id=2A2nfRTHq&amp;id=EDFS33r2W&amp;id=KcLhdNkuO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic commits $1.5 million to Python open source security</strong>: Anthropic is investing $1.5 million over two years into the Python Software Foundation (PSF) to enhance security across the Python ecosystem, focusing on CPython and PyPI, including automated malware detection and a new malware dataset. <a href="https://app.daily.dev/posts/yCHi0TB7q" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot deprecates older AI models</strong>: GitHub will deprecate Claude Opus 4.1, GPT-5, and GPT-5-Codex from Copilot on February 17, 2026, replacing them with newer versions like Claude Opus 4.5 and GPT-5.2, requiring users to update their workflows. <a href="https://app.daily.dev/posts/ImHNcBPhJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases security fixes for DoS vulnerability</strong>: Node.js versions 20.20.0 and 25.3.0 include critical security fixes for a denial-of-service vulnerability related to stack space exhaustion when using async_hooks, impacting applications like React Server Components and Next.js. <a href="https://app.daily.dev/feed-by-ids?id=DwsoMgMKH&amp;id=uw83EGG5r&amp;id=ZoKLGVJ9V" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel 12.47.0 introduces new developer features</strong>: Laravel 12.47.0 brings new features like the <code>@includeIsolated</code> Blade directive for isolated template includes, <code>Cache::withoutOverlapping()</code> for preventing concurrent cache operations, and enhanced enum support. <a href="https://app.daily.dev/posts/SQ5jDUcaB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust infrastructure team recap and Q1 2026 plan</strong>: The Rust Infrastructure Team successfully migrated to the new Bors bot for CI, moved <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> and <a href="http://docs.rs" target="_blank" rel="noopener nofollow">docs.rs</a> to Fastly CDN, and expanded Infrastructure as Code coverage, with plans for <a href="http://docs.rs" target="_blank" rel="noopener nofollow">docs.rs</a> modernization and external hardware CI policy in Q1 2026. <a href="https://app.daily.dev/posts/m2OVQmP6S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PHP DebugBar v3 modernizes with vanilla JS and Tabler icons</strong>: PHP DebugBar v3.0.0 has been released, transitioning from jQuery to native vanilla JavaScript, replacing FontAwesome with Tabler SVG icons, and introducing performance improvements through lazy widget rendering and enhanced timeline support. <a href="https://app.daily.dev/posts/b7SEEaaFE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Confluent Platform vs. Apache Kafka: enterprise features</strong>: Confluent Platform extends open-source Apache Kafka with enterprise-grade features like audit logs, RBAC, Cluster Linking for disaster recovery, and Self-Balancing Clusters, addressing critical needs for large-scale and regulated environments. <a href="https://app.daily.dev/posts/qrsxJdP7w" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Microsoft’s ‘community-first’ AI data centers: a PR masterpiece?</strong>: Microsoft, facing backlash over its energy-hungry AI data centers, has unveiled a ‘community-first’ plan, promising to pay full electricity costs, minimize water use, and create local jobs. This sudden benevolence comes after protests across 24 states and a withdrawn Wisconsin project. It’s almost as if they realized that trashing local grids and water supplies for AI hype might not be a great look. Let’s see if these ‘commitments’ actually materialize or if it’s just another round of greenwashing. <a href="https://app.daily.dev/posts/jqtBl3Jnb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta’s metaverse pivot: from VR dreams to AI reality (and layoffs)</strong>: Meta is closing three VR studios and laying off 10% of its Reality Labs staff, pivoting from its metaverse ambitions to focus on AI glasses and wearables. Apparently, losing over $70 billion since the 2021 rebrand and facing ‘declining interest in VR’ finally made them realize that maybe, just maybe, people weren’t clamoring to hang out in Horizon Worlds. So, out with the VR headsets, in with the AI hype—because that’s where the real money (and investor patience) is, right? <a href="https://app.daily.dev/posts/7ystcAQPc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI killed open source business models, but don’t worry, services are here to save us!</strong>: AI systems are apparently so good at extracting and caching documentation that they’ve decimated web traffic and revenue for open-source projects like Tailwind CSS, which saw an 80% decline. Now, the ‘experts’ are telling us that open-source companies need to focus on hosted services that AI can’t replace. So, AI makes your documentation worthless, and then you have to pay for the privilege of using the software. What a brilliant business model, truly revolutionary. <a href="https://app.daily.dev/posts/Ml47Y2Hd6" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
