<h2>Must know</h2>
<ul>
<li><strong>Critical Node.js vulnerability impacts major frameworks</strong>: A critical denial-of-service vulnerability (CVE-2025-59466) in Node.js affects versions 8.x through 24.x, causing process crashes if <code>async_hooks</code> or <code>AsyncLocalStorage</code> are enabled. This impacts widely used frameworks like Next.js and React Server Components, as well as APM tools such as Datadog, New Relic, and OpenTelemetry. Patches have been released for supported versions 20.20.0, 22.22.0, 24.13.0, and 25.3.0, and immediate upgrades are recommended to prevent service downtime, as reported by Node.js release notes and Datadog. <a href="https://app.daily.dev/posts/EyLXGRUe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Patch Tuesday addresses critical zero-day and Secure Boot flaws</strong>: Microsoft’s January 2026 Patch Tuesday includes fixes for 112-114 vulnerabilities, with eight critical ones. Notably, CVE-2026-20805, a zero-day in Desktop Window Manager, is actively exploited to bypass ASLR, leading to information disclosure. CISA has added this to its Known Exploited Vulnerabilities catalog, mandating federal patching by February 3, 2026. Additionally, patches address certificate expiration issues in Secure Boot from 2011 and upcoming expirations in 2026, crucial for preventing boot process compromises, according to Krebs on Security and The Hacker News. <a href="https://app.daily.dev/posts/Kwy6WAbQP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical AI agent authentication flaw in ServiceNow Virtual Agent</strong>: AppOmni and ServiceNow confirmed a critical vulnerability (CVE-2025-12420, ‘BodySnatcher’) in ServiceNow’s Virtual Agent AI platform. This flaw allowed unauthenticated attackers to impersonate any user with just an email address, bypassing passwords and MFA. The vulnerability, rooted in weak authentication combined with new AI capabilities, could enable attackers to create rogue AI agents, access sensitive modules, and escalate privileges. ServiceNow has since issued a patch, rotated credentials, and removed the exploited AI agent functionality, emphasizing the growing risks of AI agent integration, as detailed by both AppOmni and ServiceNow. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>U.S. federal agencies prepare for quantum security migration</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving from awareness to implementation of quantum security practices, focusing on migrating to post-quantum cryptography (PQC) to counter ‘harvest now, decrypt later’ attacks. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 enhances video playback and privacy</strong>: Firefox 147 introduces automatic Picture-in-Picture video playback, reorganized tab settings, enhanced WebGPU support for Apple Silicon Macs, zero-copy hardware video playback for AMD GPUs on PC, and improved privacy with tightened Enhanced Tracking Protection. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks partners for AI-driven data insights and retail solutions</strong>: Databricks is expanding its AI capabilities through partnerships, integrating with Atlassian Rovo for natural language queries on enterprise data and collaborating with Algonomy to deliver RetailAI for agentic AI-driven retail planning. <a href="https://app.daily.dev/feed-by-ids?id=2XKWuVI4o&amp;id=8pU7lXz1A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Compute Runtime adds support for new GPUs</strong>: Intel’s Compute Runtime version 26.01.36711.4 introduces initial support for Crescent Island and Nova Lake S graphics hardware, continuing support for Level Zero and OpenCL APIs. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum dot breakthrough for telecom C-band communication</strong>: Researchers have developed a single-photon source using InAs quantum dots operating in the telecom C-band, achieving 91.7% two-photon interference visibility, a new high for solid-state sources in this range, aiming for practical quantum networks. <a href="https://app.daily.dev/posts/woujp8xYd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bandcamp bans substantially AI-generated music</strong>: Bandcamp has announced a ban on music and audio created wholly or substantially by AI, effective January 2026, to protect human artists and ensure authenticity, diverging from platforms like Spotify. <a href="https://app.daily.dev/feed-by-ids?id=LZT0kWKSj&amp;id=wgoMt7tqL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rails engine monitors LLM API usage and costs</strong>: RubyLLM::Monitoring is a new Rails engine that tracks LLM API usage, costs, performance, and error rates within Rails applications, providing a dashboard and configurable alerts for cost management and optimization. <a href="https://app.daily.dev/feed-by-ids?id=oYtsCmpWz&amp;id=ypxl4mcW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated books: the new frontier of technical misinformation</strong>: Apparently, HiTeX Press has managed to churn out over 800 technical books in a single year, all ‘created entirely by AI without human oversight.’ These masterpieces, available on Amazon for a mere 8€, are reportedly filled with ‘fabricated code examples’ and ‘non-existent programming features.’ So, if you’re looking to learn something truly useless, or perhaps how to debug a phantom bug, HiTeX Press has you covered. Who needs actual knowledge when you have industrial-scale AI spam? <a href="https://app.daily.dev/posts/PmK6l9z8J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: still not replacing senior engineers, shocker</strong>: Senior developers are still scratching their heads over the supposed productivity gains from LLM agentic coding tools, finding them ‘slow, requiring significant supervision, and not markedly improving productivity.’ While some claim AI ‘improves development speed and client project throughput,’ others point out that AI-generated Kotlin code is ‘functionally correct but architecturally deficient,’ mishandling coroutines and lifecycle management. So, it seems we’re still stuck with the messy reality of actual engineering, rather than the AI-fueled utopia some ‘insecure evangelists’ keep promising. <a href="https://app.daily.dev/feed-by-ids?id=IcLyTC7xk&amp;id=O3swuQWEt&amp;id=WndZlg59o&amp;id=XTzlp2ZQd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum camera promises 20x resolution, 1000x faster processing. Sure, Jan.</strong>: Diffraqtion, a spinout from MIT and the University of Maryland, just secured $4.2 million to develop a ‘quantum camera’ that supposedly offers ‘20× higher resolution and 1,000× faster processing’ for satellite constellations. While they’ve won some awards and plan demonstrations for early 2026, these claims are, of course, directly from the company. No independent verification, just a lot of big numbers. Sounds like another quantum leap in marketing, if nothing else. <a href="https://app.daily.dev/posts/A9H2rpmDZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
