<h2>Must know</h2>
<ul>
<li><strong>Critical Node.js vulnerability impacts major frameworks</strong>: A critical denial-of-service vulnerability (CVE-2025-59466) in Node.js affects versions 8.x through 24.x, causing process crashes if <code>async_hooks</code> or <code>AsyncLocalStorage</code> are enabled. This impacts widely used frameworks like Next.js and React Server Components, as well as APM tools such as Datadog, New Relic, and OpenTelemetry. Node.js has released patches for supported versions, and immediate upgrades are recommended to prevent service downtime, as confirmed by Node.js release notes and Datadog advisories. <a href="https://app.daily.dev/posts/EyLXGRUe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ServiceNow AI agent vulnerability allowed full impersonation</strong>: A critical vulnerability, dubbed BodySnatcher (CVE-2025-12420), was discovered in ServiceNow’s Virtual Agent AI platform. This flaw allowed unauthenticated attackers to impersonate any user, bypassing password and MFA, simply by knowing an email address. The exploit could lead to admin account creation, access to connected modules, and privilege escalation across integrations. ServiceNow has since issued a patch, rotated credentials, and removed the exploited AI agent functionality, as reported by AppOmni and ServiceNow. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Patch Tuesday addresses critical zero-day</strong>: Microsoft’s January 2026 Patch Tuesday includes fixes for 112-114 vulnerabilities, with eight critical ones. Notably, CVE-2026-20805, a zero-day in Desktop Window Manager, is actively exploited to bypass ASLR and leak memory addresses. CISA has added this to its Known Exploited Vulnerabilities catalog, mandating federal patching by February 3, 2026. Other fixes address Office RCEs and Secure Boot certificate expirations, according to Krebs on Security and The Hacker News. <a href="https://app.daily.dev/posts/Kwy6WAbQP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Google Trends and Kaggle enhance AI usability</strong>: Google Trends now integrates Gemini AI to identify and compare related search trends, while Kaggle released Community Benchmarks for custom AI model evaluation tasks, supporting multi-model inputs and leaderboards. <a href="https://app.daily.dev/feed-by-ids?id=WhUrXR4tI&amp;id=XLEr4o2U6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks expands AI partnerships for data insights</strong>: Atlassian Rovo now integrates with Databricks AI/BI Genie for natural language queries, and Algonomy launched RetailAI on Databricks for agentic retail planning, aiming to democratize data access and optimize operations. <a href="https://app.daily.dev/feed-by-ids?id=2XKWuVI4o&amp;id=8pU7lXz1A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor AI editor optimizes token usage with dynamic context</strong>: Cursor, an AI code editor, introduced dynamic context discovery to reduce LLM token consumption by 46.9% by accessing code context only when needed, aiming for faster AI responses and lower operational costs. <a href="https://app.daily.dev/feed-by-ids?id=gz0G04ehE&amp;id=nGGCLLBtk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 and Thunderbird 147 released with new features</strong>: Firefox 147 adds automatic Picture-in-Picture, enhanced WebGPU support for Apple Silicon, and zero-copy hardware video playback for AMD GPUs, while Thunderbird 147 introduces a ‘Show Full Path’ option and optional folder-name localization. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Rails engine monitors LLM API usage and costs</strong>: RubyLLM::Monitoring is a new Rails engine that tracks LLM API usage, costs, performance, and error rates within applications, providing a dashboard and configurable alerts for cost management and optimization. <a href="https://app.daily.dev/feed-by-ids?id=oYtsCmpWz&amp;id=ypxl4mcW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Compute Runtime adds Crescent Island and Nova Lake S support</strong>: Intel’s Compute Runtime version 26.01.36711.4 introduces initial support for its new Crescent Island and Nova Lake S graphics hardware, continuing to support Level Zero and OpenCL APIs. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum dot breakthrough for telecom C-band</strong>: Researchers developed a single-photon source using InAs quantum dots operating in the telecom C-band, achieving 91.7% two-photon interference visibility, a record for solid-state sources in this range, promising secure quantum communication. <a href="https://app.daily.dev/posts/woujp8xYd" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents: Still not senior engineers, apparently</strong>: Turns out, Claude Opus 4.5 is great at debugging Sentry and migrating AWS ECS, but don’t expect it to architect your next big thing. Senior developers are still needed for ‘judgment and abstraction skills,’ which is a polite way of saying AI can’t actually innovate. So, while it ‘amplifies well-designed infrastructure,’ it’s not replacing the folks who actually design it, despite what the ‘agentic AI’ hype machine wants you to believe. <a href="https://app.daily.dev/feed-by-ids?id=GMZHoSF60&amp;id=Jj0H2b0XQ&amp;id=SMEJx6ENk&amp;id=Z1R08OC6I&amp;id=ZBZXWSG4p&amp;id=ZsPWeN0Lt&amp;id=dl9u8nkjK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated books: The new frontier of technical spam</strong>: HiTeX Press, a true innovator, has managed to churn out over 800 ‘technical books’ in a single year, all ‘entirely by AI without human oversight.’ Apparently, these masterpieces feature ‘fabricated code examples’ and ‘non-existent programming features.’ So, if you’re looking for meaningless content and unreliable information, Amazon’s got you covered for a mere 8€ a pop. Who needs actual experts when you have industrial-level AI spam? <a href="https://app.daily.dev/posts/PmK6l9z8J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bandcamp bans AI music: Protecting artists or just bad business?</strong>: Bandcamp, bless their hearts, has decided to ban ‘wholly or substantially AI-generated music’ to ‘protect human musicians’ and ensure ‘authenticity.’ This, of course, is a stark contrast to Spotify, which is apparently drowning in AI-generated tracks. It’s almost as if Bandcamp’s direct-to-fan model can’t handle the sheer volume of AI-generated noise, so they’re just going to pretend it doesn’t exist. Good luck with that, Bandcamp. <a href="https://app.daily.dev/feed-by-ids?id=LZT0kWKSj&amp;id=wgoMt7tqL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
