<h2>Must know</h2>
<ul>
<li><strong>Critical Node.js DoS vulnerability impacts major frameworks</strong>: A critical denial-of-service vulnerability (CVE-2025-59466) in Node.js affects versions 8.x through 24.x, causing process crashes if <code>async_hooks</code> or <code>AsyncLocalStorage</code> are enabled. This impacts major frameworks like Next.js and React Server Components, as well as APM tools such as Datadog, New Relic, and OpenTelemetry. Node.js has released patches for supported versions, and immediate upgrades are recommended to prevent service downtime, as reported by Node.js release notes and Datadog. <a href="https://app.daily.dev/posts/EyLXGRUe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ServiceNow AI agent vulnerability allowed full impersonation</strong>: A critical vulnerability, dubbed BodySnatcher (CVE-2025-12420), was discovered in ServiceNow’s Virtual Agent AI platform. This flaw allowed unauthenticated attackers to impersonate any user with just an email address, bypassing passwords and MFA. The exploit could lead to admin account creation, access to connected modules, and privilege escalation across integrations, as confirmed by AppOmni and ServiceNow. While no active exploitation was found, ServiceNow promptly issued a patch and removed the exploited AI agent functionality. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Patch Tuesday addresses critical zero-day and 100+ vulnerabilities</strong>: Microsoft’s January 2026 Patch Tuesday includes critical security updates for 112-114 vulnerabilities. Notably, CVE-2026-20805, a zero-day in Desktop Window Manager, is actively exploited to bypass ASLR, increasing risk in exploit chains. CISA has added this to its Known Exploited Vulnerabilities catalog, mandating federal patching by February 3, 2026. The updates also fix multiple Office RCE flaws and Secure Boot certificate issues, as detailed by Krebs on Security and BleepingComputer. <a href="https://app.daily.dev/posts/Kwy6WAbQP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agents still need human engineers for robust architecture</strong>: While AI agents like Claude Opus 4.5 can execute tasks within well-architected systems, they lack the senior-level judgment and abstraction skills required for innovative engineering solutions, emphasizing that they amplify good infrastructure but don’t replace architects. <a href="https://app.daily.dev/feed-by-ids?id=GMZHoSF60&amp;id=Jj0H2b0XQ&amp;id=SMEJx6ENk&amp;id=Z1R08OC6I&amp;id=ZBZXWSG4p&amp;id=ZsPWeN0Lt&amp;id=dl9u8nkjK&amp;id=IcLyTC7xk&amp;id=O3swuQWEt&amp;id=WndZlg59o" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor AI editor optimizes token usage with dynamic context discovery</strong>: Cursor, an AI code editor, introduced dynamic context discovery to reduce LLM token consumption by 46.9% by accessing code context only when needed, aiming for lower operational costs and faster AI response times. <a href="https://app.daily.dev/feed-by-ids?id=gz0G04ehE&amp;id=nGGCLLBtk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks partnerships enhance AI-driven data insights and retail planning</strong>: Atlassian Rovo now integrates with Databricks AI/BI Genie for natural language queries on enterprise data, while Algonomy launched RetailAI on Databricks for agentic AI-driven retail planning, both aiming to democratize data access and move towards predictive operations. <a href="https://app.daily.dev/feed-by-ids?id=2XKWuVI4o&amp;id=8pU7lXz1A" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rails engine launched for LLM API monitoring</strong>: RubyLLM::Monitoring is a new Rails engine that tracks LLM API usage, cost, performance, and error rates within Rails applications, providing a dashboard and configurable alerts for cost optimization and performance management. <a href="https://app.daily.dev/feed-by-ids?id=oYtsCmpWz&amp;id=ypxl4mcW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Trends and Kaggle enhance AI usability and evaluation</strong>: Google Trends now integrates Gemini AI for identifying related search trends and supports up to eight simultaneous terms, while Kaggle released Community Benchmarks for custom, community-driven AI model evaluation tasks with leaderboards and multi-model support. <a href="https://app.daily.dev/feed-by-ids?id=WhUrXR4tI&amp;id=XLEr4o2U6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>U.S. federal agencies advance quantum security preparations</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving from awareness to implementation of quantum security practices, focusing on migrating to post-quantum cryptography to counter ‘harvest now, decrypt later’ threats. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel Compute Runtime adds support for new GPUs</strong>: Intel’s Compute Runtime version 26.01.36711.4 introduces initial support for Crescent Island and Nova Lake S graphics hardware, continuing Level Zero and OpenCL API support for GPUs back to Tiger Lake. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated technical books: the new frontier of garbage content</strong>: Apparently, HiTeX Press has managed to churn out over 800 technical books in a single year, all 'created entirely by AI without human oversight.' These masterpieces feature fabricated code, non-existent programming features, and are generally meaningless, yet they’re being sold on major platforms like Amazon. So, if you’re looking for reliable technical knowledge, just sift through hundreds of AI-generated spam books first. What a time to be alive! <a href="https://app.daily.dev/posts/PmK6l9z8J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bandcamp bans AI music, because human creativity is still a thing</strong>: Bandcamp, bless their hearts, has decided to ban music 'created wholly or substantially by AI,' citing the protection of human musicians and authenticity. This is a bold move, especially when AI-generated songs are apparently topping charts and getting record deals elsewhere. It’s almost as if some platforms still care about actual artists, unlike others who are happy to drown in a sea of algorithmic noise. <a href="https://app.daily.dev/feed-by-ids?id=LZT0kWKSj&amp;id=wgoMt7tqL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Congressional inaction: because cybersecurity can wait</strong>: U.S. federal agencies are apparently struggling with leadership gaps and budget cuts, while critical cybersecurity legislation like the Cybersecurity Information Sharing Act is set to expire. Despite bipartisan support, Congress is too busy doing… well, not much, to secure the nation’s digital infrastructure. It’s almost like they’re actively trying to make it easier for ‘Salt Typhoon’ and other state-sponsored actors to have a field day. <a href="https://app.daily.dev/feed-by-ids?id=kmmZ7HC0B&amp;id=t3I4SX3d8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
