<h2>Must know</h2>
<ul>
<li><strong>Critical Node.js vulnerability impacts major frameworks</strong>: A critical denial-of-service vulnerability (CVE-2025-59466) in Node.js affects versions 8.x through 24.x, causing process crashes if <code>async_hooks</code> or <code>AsyncLocalStorage</code> are enabled. This impacts major frameworks like Next.js and React Server Components, as well as APM tools such as Datadog, New Relic, and OpenTelemetry. Patches have been released for supported versions, and immediate upgrades are recommended to prevent service downtime, as reported by Node.js release notes and Datadog. <a href="https://app.daily.dev/posts/EyLXGRUe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ServiceNow AI agent vulnerability allowed full impersonation</strong>: A critical vulnerability, dubbed BodySnatcher (CVE-2025-12420), was discovered in ServiceNow’s Virtual Agent AI platform. This flaw allowed unauthenticated attackers to impersonate any user, bypassing password and MFA, simply with an email address and a universal credential. The exploit could lead to admin account creation, access to connected modules, and privilege escalation across integrations. ServiceNow has issued a patch and removed the exploited AI agent functionality, confirming the severity of the issue. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Patch Tuesday addresses critical zero-day</strong>: Microsoft released its January 2026 Patch Tuesday updates, fixing 112-114 vulnerabilities, including eight critical ones. A zero-day vulnerability (CVE-2026-20805) in Desktop Window Manager is actively exploited to bypass ASLR, leaking memory addresses. CISA has added this to its Known Exploited Vulnerabilities catalog, mandating federal patching by February 3, 2026. This highlights the urgent need for organizations to apply these fixes, as detailed by Krebs on Security and The Hacker News. <a href="https://app.daily.dev/posts/Kwy6WAbQP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Angular v21 brings signal-based forms and accessibility</strong>: Angular v21 introduces signal-based forms for easier data model-UI reconciliation, headless Angular Aria components for built-in accessibility, and official Vitest support with browser mode, focusing on developer experience and AI tooling integration. <a href="https://app.daily.dev/feed-by-ids?id=7wfH8AbQP&amp;id=3cHOXEugq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React ecosystem updates and performance boosts</strong>: The React ecosystem sees updates including Next.js 16.1 with filesystem cache improvements, Immer 11.1 performance enhancements, and React Router security fixes, alongside new tools like Voltra 1.0 for Live Activities and Widgets with JSX. <a href="https://app.daily.dev/posts/oWHYd6BqQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 enhances privacy and performance</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU support for Apple Silicon, zero-copy hardware video playback for AMD GPUs on PC, and improved privacy features like Google Safe Browsing v5 and tightened Tracking Protection. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New open-source project management tool Plane</strong>: Plane is a free, open-source project management tool, self-hostable via Docker, offering features like issues, epics, cycles, analytics, and AI integration for summarizing work, built with React, TypeScript, Django, and PostgreSQL. <a href="https://app.daily.dev/posts/Hng4rFIwx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks partners for AI-driven data insights</strong>: Databricks is expanding its AI capabilities through partnerships with Atlassian Rovo for natural language queries on enterprise data and Algonomy for RetailAI, aiming to democratize data access and enhance retail planning with agentic AI. <a href="https://app.daily.dev/feed-by-ids?id=2XKWuVI4o&amp;id=8pU7lXz1A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elixir 1.19 speeds up builds and improves types</strong>: Elixir 1.19 significantly improves compilation speeds by up to 4x, refines its type system for better bug detection without annotations, and enhances interoperability with other ecosystems like Python, C++, and JavaScript. <a href="https://app.daily.dev/posts/0z5pHaJQi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor AI editor optimizes token usage</strong>: Cursor, an AI code editor, introduced dynamic context discovery to reduce LLM token consumption by 46.9% by accessing code context only when needed, aiming for faster AI response times and lower operational costs. <a href="https://app.daily.dev/feed-by-ids?id=gz0G04ehE&amp;id=nGGCLLBtk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding tools: still not replacing senior engineers, apparently</strong>: Senior developers are still out here complaining that LLM-based coding tools are slow, require too much supervision, and don’t actually boost productivity for experienced programmers. Meanwhile, the AI evangelists are busy dismissing this skepticism as mere aversion to change. It seems AI is great for documentation and junior devs, but for anyone who actually knows what they’re doing, it’s just another tool that needs constant babysitting, as highlighted by critiques of AI-generated Android code. <a href="https://app.daily.dev/feed-by-ids?id=IcLyTC7xk&amp;id=O3swuQWEt&amp;id=WndZlg59o&amp;id=XTzlp2ZQd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated books: the new frontier of technical spam</strong>: Apparently, HiTeX Press has managed to churn out over 800 AI-generated technical books in a single year, complete with fabricated code and non-existent features. These masterpieces are flooding Amazon, making it even harder for actual humans to find reliable information. Because nothing says ‘quality technical education’ like a book written by an algorithm with two pseudonymous authors, as detailed in the investigation. <a href="https://app.daily.dev/posts/PmK6l9z8J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bandcamp bans AI music, because authenticity still matters (to some)</strong>: Bandcamp, bless their hearts, has decided to ban music created ‘wholly or substantially’ by AI, effective January 2026. Their reasoning? To protect human artists and ensure authenticity for fans. This is a stark contrast to Spotify, which is apparently fine with being deluged by AI-generated tracks. It’s almost as if some platforms still care about the ‘art’ part of ‘artist,’ unlike others who are just chasing the next big (AI-generated) buck. <a href="https://app.daily.dev/feed-by-ids?id=LZT0kWKSj&amp;id=wgoMt7tqL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
