<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening victims, especially in healthcare, with regulatory reporting of compliance violations. This new tactic, detailed across multiple reports, creates a dual extortion threat: pay the ransom or face regulatory penalties and public exposure for compliance failures. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly evolving and potent threat. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical remote code execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited since late 2025 by the China-linked APT group UAT-9686, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, as reported by various security outlets. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild vulnerability exposed global cloud supply chain</strong>: Security researchers at Wiz discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild that could have led to global-scale supply chain attacks. The flaw, caused by improperly anchored regex patterns in webhook filters, allowed attackers to bypass security checks and gain admin-level access to AWS SDK repositories. AWS patched the issue within 48 hours, but the incident, highlighted by Wiz Research, underscores a widespread CI/CD pipeline security blind spot. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI participated in a $250 million seed round for Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by Sam Altman, raising potential conflict of interest concerns given Altman’s dual role. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies for data access</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity through Wikimedia Enterprise, monetizing structured access to Wikipedia data for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot gets agentic memory features</strong>: GitHub Copilot now includes ‘memories’ in public preview, allowing it to learn and document coding preferences and project guidelines, share patterns across AI agents, and provide real-time, codebase-verified recommendations. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on AI demand, Nvidia becomes top client</strong>: TSMC reported 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as its largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi releases AI HAT+ 2 for on-device generative AI</strong>: Raspberry Pi launched the AI HAT+ 2 add-on board, featuring a Hailo-10H neural network accelerator and 8GB RAM, enabling local execution of smaller LLMs and computer vision models on Raspberry Pi 5. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Taiwan to invest $250 billion in US semiconductor and AI</strong>: Taiwan will invest $250 billion in US semiconductor, energy, and AI production, along with $250 billion in credit guarantees, as part of a new trade deal aimed at reducing US reliance on foreign supply chains. <a href="https://app.daily.dev/feed-by-ids?id=6jMchY1Dx&amp;id=F3coydYNp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing advances with PQC adoption and new cooling methods</strong>: Hitachi Solutions Create launched DoMobile Ver.5 in Japan with NIST-standardized post-quantum cryptography, while MIT researchers developed a new cooling method for chip-based quantum computers using integrated photonic chips, making them more scalable. <a href="https://app.daily.dev/feed-by-ids?id=2U66SslD2&amp;id=DVTU5NL6H&amp;id=FzKtOLWjs&amp;id=MoM3tO9qY&amp;id=YjJQ2NnXc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Oracle’s debt drama: $38 billion for OpenAI, bondholders get the shaft</strong>: Oracle is facing a class action lawsuit because bondholders claim the company conveniently forgot to mention an extra $38 billion in debt it planned to incur for a $300 billion OpenAI deal. Apparently, this little oversight caused their bonds to tank. It seems Oracle is so busy in the ‘multi-trillion-dollar arms race’ for AI datacenters, they forgot about pesky things like transparency and investor trust. Who needs disclosure when you have AI? <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL’s open-source status: a legal fiction, courtesy of Oracle</strong>: According to community advocates, Oracle is maintaining MySQL’s ‘open source’ status purely for legal reasons, while actively blocking community development and running all code changes privately. They’re even accused of releasing versions plagued with data corruption and performance regressions. So, if you thought MySQL was still a vibrant open-source project, think again. MariaDB, apparently, is the ‘true’ open-source alternative. Oracle, always a friend to the community. <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI security: it’s not the model, it’s your sloppy workflows</strong>: Harmonic Security found 2.6% of 22.4 million GenAI prompts contained sensitive corporate data, with 71% of those exposures happening via ChatGPT. Meanwhile, other ‘experts’ are shifting the blame, saying the real risk isn’t the AI models themselves, but the ‘workflow security.’ So, it’s not the shiny new AI tool that’s the problem, it’s your company’s inability to use it without leaking everything. Good to know the AI is still perfect, it’s just the humans messing it up. <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
