<h2>Must know</h2>
<ul>
<li><strong>Node.js vulnerability impacts major frameworks and APM tools</strong>: A critical denial-of-service vulnerability (CVE-2025-59466) in Node.js, affecting versions 8.x through 24.x, can crash applications using <code>async_hooks</code> or <code>AsyncLocalStorage</code>. This impacts major frameworks like Next.js and React Server Components, as well as APM tools such as Datadog, New Relic, and OpenTelemetry. Node.js has released patches for supported versions, and immediate upgrades are recommended to prevent service downtime, as confirmed by Node.js release notes and Datadog advisories. <a href="https://app.daily.dev/posts/EyLXGRUe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical AI agent vulnerability found in ServiceNow</strong>: AppOmni discovered a critical vulnerability (CVE-2025-12420, aka BodySnatcher) in ServiceNow’s Virtual Agent AI platform, allowing unauthenticated attackers to impersonate any user with just an email address, bypassing passwords and MFA. This flaw, rooted in weak authentication combined with new AI capabilities, could enable attackers to create rogue AI agents, access sensitive modules, and escalate privileges. ServiceNow has since issued a patch and removed the exploited AI agent functionality, as reported by AppOmni and ServiceNow. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Patch Tuesday addresses critical zero-day</strong>: Microsoft’s January 2026 Patch Tuesday includes fixes for 112-114 vulnerabilities, with eight critical ones. Notably, CVE-2026-20805, a zero-day in Desktop Window Manager, is actively exploited to bypass ASLR and leak memory addresses, increasing risk in exploit chains. CISA has added this to their Known Exploited Vulnerabilities catalog, mandating federal patching by February 3, 2026, according to Krebs on Security and The Hacker News. <a href="https://app.daily.dev/posts/Kwy6WAbQP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cursor AI editor optimizes token usage with dynamic context</strong>: Cursor, an AI code editor, introduced dynamic context discovery to reduce LLM token consumption by 46.9% by only accessing code context when needed, aiming for faster AI responses and lower operational costs. <a href="https://app.daily.dev/feed-by-ids?id=gz0G04ehE&amp;id=nGGCLLBtk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks partners for AI-driven data insights and retail solutions</strong>: Databricks is expanding its AI capabilities through partnerships with Atlassian Rovo for natural language queries on enterprise data and Algonomy for AI-driven retail planning solutions, aiming to democratize data access and optimize retail operations. <a href="https://app.daily.dev/feed-by-ids?id=2XKWuVI4o&amp;id=8pU7lXz1A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Multi-agent architectures for complex AI workflows</strong>: LangChain outlines four multi-agent architecture patterns—subagents, skills, handoffs, and routers—to manage context and distributed development, each with distinct tradeoffs for latency, token usage, and parallelization. <a href="https://app.daily.dev/posts/Qb5ngrz3J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 enhances video, privacy, and platform support</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon, zero-copy hardware video playback for AMD GPUs on PC, and XDG Base Directory support for Linux, alongside security fixes and Google Safe Browsing v5. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Boost adds AI prompts and Livewire v4 support</strong>: Laravel Boost v1.8.10 now includes AI-powered prompts for code simplification and an upgrade assistant for Livewire v4, aiming to improve developer experience without breaking changes. <a href="https://app.daily.dev/posts/TQr7IJii0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rails engine for LLM API monitoring released</strong>: RubyLLM::Monitoring is a new Rails engine that tracks LLM API usage, costs, performance, and errors, providing a dashboard and configurable alerts for cost management and optimization within Rails applications. <a href="https://app.daily.dev/feed-by-ids?id=oYtsCmpWz&amp;id=ypxl4mcW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel adds support for new graphics hardware</strong>: Intel’s Compute Runtime version 26.01.36711.4 introduces initial support for Crescent Island and Nova Lake S graphics hardware, continuing its commitment to Level Zero and OpenCL APIs. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated technical books flood Amazon: because quality is overrated</strong>: HiTeX Press has apparently churned out over 800 AI-generated technical books in a single year, complete with fabricated code and non-existent features, all available on major platforms like Amazon. It seems the race to the bottom for content quality is in full swing, making it even harder for actual technical learners to find reliable information. Who needs human expertise when you have an algorithm that can hallucinate an entire library? <a href="https://app.daily.dev/posts/PmK6l9z8J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bandcamp bans AI music: a bold stand against the inevitable?</strong>: Bandcamp has decided to ban music “wholly or substantially” created by AI, citing a desire to protect human artists and ensure authenticity. This is a stark contrast to platforms like Spotify, which are drowning in AI-generated tracks. While it’s a nice sentiment, one has to wonder if this is less about protecting art and more about Bandcamp’s niche revenue model not being compatible with the inevitable flood of AI-generated noise. Good luck enforcing that, Bandcamp. <a href="https://app.daily.dev/feed-by-ids?id=LZT0kWKSj&amp;id=wgoMt7tqL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Senior developers unimpressed by AI coding tools: shocker!</strong>: Turns out, senior developers aren’t exactly falling over themselves to praise LLM-based coding tools, calling them slow, supervision-heavy, and architecturally inept for production-grade mobile development. While some find them useful for documentation or for less experienced devs, the idea that these tools are a productivity panacea for seasoned engineers seems to be, shall we say, a bit overhyped. Maybe the “insecure evangelism of LLM maximalists” needs a reality check. <a href="https://app.daily.dev/feed-by-ids?id=IcLyTC7xk&amp;id=O3swuQWEt&amp;id=WndZlg59o&amp;id=XTzlp2ZQd" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
