<h2>Must know</h2>
<ul>
<li><strong>Critical Node.js vulnerability impacts major frameworks and APM tools</strong>: A critical denial-of-service vulnerability (CVE-2025-59466) in Node.js, affecting versions 8.x through 24.x, can cause process crashes if <code>async_hooks</code> or <code>AsyncLocalStorage</code> are enabled. This impacts widely used frameworks like Next.js and React Server Components, as well as APM tools such as Datadog, New Relic, and OpenTelemetry. Node.js has released patches for supported versions, and immediate upgrades are crucial to prevent server termination and service downtime, as confirmed by Node.js release notes and Datadog advisories. <a href="https://app.daily.dev/posts/EyLXGRUe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ServiceNow AI agent vulnerability allowed full user impersonation</strong>: A critical vulnerability, dubbed BodySnatcher (CVE-2025-12420), was discovered in ServiceNow’s Virtual Agent AI platform. This flaw allowed unauthenticated attackers to impersonate any user with just an email address, bypassing passwords and MFA. The exploit could lead to admin account creation, access to connected modules (HR, customer service), and privilege escalation across integrations. While no active exploitation was found, ServiceNow promptly issued a patch, rotated credentials, and removed the exploited AI agent functionality, highlighting the systemic risks of rapidly integrating AI agents into enterprise workflows, according to AppOmni and ServiceNow. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>U.S. federal agencies ramp up quantum security preparations</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving from awareness to active implementation of quantum security practices. Their focus is on mitigating “harvest now, decrypt later” attacks by mandating cryptographic migration across federal organizations. NIST has finalized initial standards for post-quantum cryptography (PQC), and agencies are urged to inventory cryptographic assets immediately. This multi-year effort emphasizes hybrid cryptographic solutions and securing quantum research and supply chains, as detailed in official statements from these agencies. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cursor AI editor optimizes token usage with dynamic context discovery</strong>: Cursor, an AI code editor, introduced dynamic context discovery, a technique that reduces LLM token consumption by 46.9% by allowing AI agents to retrieve code context only when needed, leading to lower operational costs and faster response times. <a href="https://app.daily.dev/feed-by-ids?id=gz0G04ehE&amp;id=nGGCLLBtk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks partners for AI-driven data insights and retail planning</strong>: Databricks is expanding its AI ecosystem through partnerships with Atlassian Rovo for natural language queries on enterprise data and Algonomy for AI-driven retail planning solutions, aiming to democratize data access and optimize retail operations. <a href="https://app.daily.dev/feed-by-ids?id=2XKWuVI4o&amp;id=8pU7lXz1A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New open-source framework for LLM long-term memory</strong>: MemOS is an open-source Memory Operating System for LLMs and AI agents, providing unified long-term memory management with graph-structured storage, multi-modal support, and significant accuracy improvements and token savings. <a href="https://app.daily.dev/posts/bjqQdB8fJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents port Rust to Go with minimal human intervention</strong>: An experienced developer successfully used AI agents to port a Rust-based Jinja2 template engine (MiniJinja) to native Go in just 45 minutes of active guidance and 10 hours of autonomous work, highlighting AI’s potential for cross-language porting. <a href="https://app.daily.dev/posts/VOMBPE1Xs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bandcamp bans substantially AI-generated music</strong>: Bandcamp announced a ban on music and audio created wholly or substantially by AI, effective January 2026, aiming to protect human artists and ensure authenticity, a move that diverges from streaming platforms like Spotify. <a href="https://app.daily.dev/feed-by-ids?id=LZT0kWKSj&amp;id=wgoMt7tqL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Compute Runtime adds support for new GPUs</strong>: Intel released Compute Runtime version 26.01.36711.4, introducing initial support for Crescent Island and Nova Lake S graphics hardware while maintaining Level Zero and OpenCL API support. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 and Thunderbird 147 released with new features</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon, and zero-copy hardware video playback for AMD GPUs, while Thunderbird 147 adds a ‘Show Full Path’ option and optional folder-name localization. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated technical books: the new spam frontier</strong>: Apparently, HiTeX Press has managed to churn out over 800 technical books in a single year, all thanks to AI and zero human oversight. These masterpieces are reportedly filled with fabricated code and non-existent features, yet they’re happily sold on major platforms like Amazon. It’s not just bad content; it’s industrial-scale spam polluting the technical publishing landscape, making it even harder for actual learners to find reliable information. <a href="https://app.daily.dev/posts/PmK6l9z8J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: still not replacing senior engineers (surprise!)</strong>: Senior developers are still scratching their heads, wondering why LLM agentic coding tools are so slow and require constant babysitting, barely boosting productivity for anyone who knows what they’re doing. While some claim AI is great for documentation or junior devs, the ‘insecure evangelism of LLM maximalists’ continues to ignore the fact that AI-generated code often lacks architectural sense and introduces subtle bugs, especially in complex domains like Android development. So much for the AI revolution making everyone a 10x engineer. <a href="https://app.daily.dev/feed-by-ids?id=IcLyTC7xk&amp;id=O3swuQWEt&amp;id=WndZlg59o&amp;id=XTzlp2ZQd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI governance: the new corporate buzzword for ‘we have no idea what we’re doing’</strong>: AI governance has suddenly become the top IT concern, with 54% of leaders rating it as core, nearly doubling since 2024. This isn’t because they’ve suddenly become ethical gurus; it’s because rapid AI agent deployment is outpacing their capacity to oversee security and manage unstructured data. So, instead of building robust systems from the start, we’re now scrambling to put ‘guardrails’ on autonomous agents, treating them like junior partners who need constant supervision, as if that’s a scalable solution. <a href="https://app.daily.dev/feed-by-ids?id=GMZHoSF60&amp;id=Jj0H2b0XQ&amp;id=SMEJx6ENk&amp;id=Z1R08OC6I&amp;id=ZBZXWSG4p&amp;id=ZsPWeN0Lt&amp;id=dl9u8nkjK" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
