<h2>Must know</h2>
<ul>
<li><strong>GitHub Copilot gets agentic memory</strong>: GitHub Copilot now features “memories” in Visual Studio, allowing it to learn and document coding preferences and project guidelines automatically. This system detects team preferences, provides citations, and verifies recommendations in real-time as the codebase evolves, aiming to reduce code review friction and streamline onboarding, according to the Visual Studio Blog. An A/B test showed a 7% increase in pull request merge rates for users, suggesting a tangible impact on developer productivity. The feature is now in public preview for all paid plans. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening victims, especially in highly regulated sectors like healthcare, with regulatory reporting of compliance violations. This new tactic creates a dual threat: a ransom demand and the risk of regulatory punishment for compliance failures. Attackers are reportedly using AI-powered tools to analyze stolen data for compliance gaps and even generate formal legal complaints, according to multiple reports. This significantly increases reputational and financial risk for victim organizations. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked group</strong>: Cisco has released emergency patches for a critical remote command execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. The flaw, with a CVSS score of 10.0, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Exploitation has been attributed to the China-linked APT group UAT-9686, which has been actively using the vulnerability since late November 2025, deploying tunneling tools and backdoors, Cisco reports. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Wiz security researchers discovered “CodeBreach,” a critical vulnerability in AWS CodeBuild due to improperly anchored regex patterns, which could have led to unauthorized access and supply chain attacks on AWS environments, affecting 66% of global cloud environments. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on AI demand, Nvidia surpasses Apple as top client</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026 driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as TSMC’s largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI participated in a $250 million seed funding round for Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by OpenAI CEO Sam Altman, raising potential conflict of interest concerns. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia Foundation partners with major AI companies</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity through Wikimedia Enterprise, monetizing access to Wikipedia data for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi releases AI HAT+ 2 for on-device generative AI</strong>: Raspberry Pi launched the AI HAT+ 2 add-on board, equipped with a Hailo-10H neural network accelerator, enabling local execution of smaller LLMs and computer vision models on Raspberry Pi 5 with 8GB onboard RAM. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for OpenAI datacenters</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt intended for datacenter investments supporting a $300 billion deal with OpenAI, causing bond value to drop. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Svelte ecosystem patches multiple security vulnerabilities</strong>: The Svelte team released patches for five security vulnerabilities across devalue, svelte, @sveltejs/kit, and @sveltejs/adapter-node, including several Denial-of-Service issues and an XSS vulnerability, urging users to upgrade. <a href="https://app.daily.dev/posts/ZGaFJyQW3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-powered DevOps: because manual errors are so last season</strong>: A four-month live DevOps course is now offering to teach you “AI-powered DevOps tools,” because apparently, we can’t even automate our automation without AI anymore. The curriculum promises to integrate AI for productivity, suggesting that soon, even the most mundane tasks of managing servers will require a neural network to tell us what to do. Just what we needed: more layers of abstraction and potential points of failure, all under the guise of “productivity.” <a href="https://app.daily.dev/posts/SptJXtiZK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Junior developers: now officially obsolete, unless you’re an AI whisperer</strong>: Stefan Mischook claims junior developer roles focused on boilerplate code are disappearing because AI can handle it. So, if you’re a junior, your only hope is to become an “AI-assisted development” guru or master low-code platforms. Apparently, understanding code, design patterns, and refactoring is still essential, but actually writing the code? That’s for the machines now. Good luck with that career pivot, kids. <a href="https://app.daily.dev/posts/BlB3n2pFk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: the new babysitters for your codebase</strong>: MetalBear’s engineering team found AI most valuable for understanding unfamiliar code and exploring architectural alternatives, but it “struggles with complex architectures and long-running reasoning tasks.” So, AI is great for the easy stuff, but when things get tough, you still need a human. It seems we’re just trading tedious coding for tedious prompt engineering and context management. Progress! <a href="https://app.daily.dev/posts/cFlscGQW4" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
