<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, especially in highly regulated sectors like healthcare. This tactic, detailed in multiple reports, creates a dual extortion threat: pay the ransom or face regulatory penalties and reputational damage. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly evolving and potent threat. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical RCE vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited by the China-linked APT group UAT-9686 since late 2025, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, as reported by multiple security outlets. <a href="https://app.daily.dev/posts/Faoj2Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild vulnerability exposed global cloud supply chain</strong>: Security researchers at Wiz discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild that could have led to admin-level control over major AWS GitHub repositories, including the JavaScript SDK. The flaw, caused by improperly anchored regex in webhook filters, was quickly patched by AWS, which also implemented global hardening measures. This incident, highlighted by Wiz, underscores a significant CI/CD pipeline security blind spot with potential for widespread supply chain attacks. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI has invested in Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by Sam Altman, raising potential conflict-of-interest concerns given Altman’s dual roles. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on AI demand, Nvidia becomes top client</strong>: TSMC reported a 25.5% Q4 2025 revenue increase, forecasting 30% growth for 2026, driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as its largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot gets agentic memory in Visual Studio</strong>: GitHub Copilot now features ‘memories’ that learn and document coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding by sharing learned patterns across AI agents. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies for data access</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity through Wikimedia Enterprise, monetizing access to its vast content for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi releases AI HAT+ 2 for local generative AI</strong>: Raspberry Pi launched the AI HAT+ 2, an add-on board with a Hailo-10H neural network accelerator and 8GB RAM, enabling local execution of smaller LLMs and computer vision tasks on Raspberry Pi 5. <a href="https://app.daily.dev/feed-by-ids?id=nbjHwDlw3&amp;id=kkiq3XN3f" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US imposes 25% tariff on AI semiconductors to China</strong>: The Trump administration has imposed a 25% tariff on advanced AI semiconductors, including Nvidia’s H200 and AMD’s MI325X, produced outside the US but routed through the US for export to China. <a href="https://app.daily.dev/posts/BdyAfYrKk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for OpenAI deal</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt, beyond a September 2025 issuance, intended for datacenter investments supporting a $300 billion deal with OpenAI. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding assistants: now with more ‘agentic memory’ and less human thought</strong>: GitHub Copilot is getting ‘agentic memory’ to ‘learn’ your coding preferences and project guidelines, supposedly reducing code review friction. Because what every developer needs is an AI that remembers all their bad habits and propagates them across the team. And don’t worry, it’s ‘repository-scoped’ and ‘expires after 28 days’ to limit ‘security exposure.’ Sounds like a perfect recipe for subtle, hard-to-trace bugs and a new class of ‘AI-induced technical debt.’ <a href="https://app.daily.dev/feed-by-ids?id=nCmOnsQS3&amp;id=hjcDh3B5R" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Enterprise AI: just add ‘fusion teams’ and ‘AI license to drive’</strong>: IBM’s CIO is pushing an enterprise AI strategy with ‘AI fusion teams’ and an ‘AI license to drive’ certification. Because nothing says ‘agile innovation’ like more certifications and committees. Apparently, the goal is to shift rewards from ‘effort-intensive tasks’ to ‘effective AI-assisted work.’ So, if your AI does all the work, you get a promotion? Sounds like a great way to incentivize actual human thought and problem-solving. <a href="https://app.daily.dev/feed-by-ids?id=XM781gSqJ&amp;id=pjUEOTNDx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL’s open-source status: a legal fiction, courtesy of Oracle</strong>: Oracle is apparently maintaining MySQL’s ‘legal open source status’ while blocking community development and running all code changes privately. Reports suggest declining development activity, severe bugs, and performance regressions in Oracle’s releases. Meanwhile, MariaDB is positioned as the ‘true open source’ alternative. It’s almost like Oracle bought MySQL just to slowly strangle it, then point to the corpse and say, ‘See? Still open source!’ <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
