<h2>Must know</h2>
<ul>
<li><strong>GitHub Copilot gets agentic memory</strong>: GitHub Copilot is rolling out a new ‘memories’ feature in Visual Studio, designed to learn and document coding preferences and project guidelines automatically. This system, now in public preview for paid plans, aims to reduce code review friction and streamline onboarding by capturing repository-specific insights and best practices. According to the Visual Studio Blog, it even verifies code citations in real-time as the codebase evolves, ensuring recommendations are always up-to-date. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening victims, especially in highly regulated sectors like healthcare, with regulatory reporting of compliance violations. This new tactic creates a dual threat: pay the ransom or face regulatory punishment and public exposure of compliance failures. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft formal legal complaints, as detailed in recent reports. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day exploited by China-linked group</strong>: Cisco has released emergency patches for a critical remote command execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited since late November 2025 by the China-linked APT group UAT-9686, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco recommends immediate patching and implementing firewalling to mitigate risks. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AWS CodeBuild webhook flaw exposed cloud supply chain</strong>: Security researchers at Wiz discovered a critical vulnerability, dubbed ‘CodeBreach,’ in AWS CodeBuild due to improperly anchored regex patterns in webhook filters, which could have led to unauthorized access and supply chain attacks on AWS GitHub repositories. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sensitive corporate data exposed via GenAI tools</strong>: A study by Harmonic Security found that 2.6% of 22.4 million prompts to generative AI tools contained company-sensitive data, with 71% of these exposures occurring via ChatGPT, highlighting significant compliance and security risks in AI workflows. <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi launches AI HAT+ 2 for on-device AI</strong>: Raspberry Pi released the AI HAT+ 2 add-on board, equipped with a Hailo-10H neural network accelerator, enabling local execution of smaller large language models and computer vision tasks on Raspberry Pi 5, emphasizing privacy and low-latency. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity through Wikimedia Enterprise, monetizing access to Wikipedia data for training large language models and securing a new revenue stream. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces lawsuit over undisclosed debt for AI datacenters</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt intended for datacenter investments to support a $300 billion deal with OpenAI, leading to bond rating downgrades and investor losses. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Eurail BV customer database breached</strong>: Eurail BV disclosed a cybersecurity incident that exposed personal information, including names, contact details, and passport data, with DiscoverEU program customers potentially having additional sensitive data like IBANs and health information compromised. <a href="https://app.daily.dev/posts/SkuYRBlp7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks patches firewall DoS flaw</strong>: Palo Alto Networks issued emergency patches for CVE-2026-0227, a denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect enabled, which allows unauthenticated remote attackers to force devices into maintenance mode. <a href="https://app.daily.dev/posts/MtreEtTLc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Sam Altman’s BCI startup gets OpenAI cash</strong>: OpenAI, led by Sam Altman, just poured $250 million into Merge Labs, a brain-computer interface startup also co-founded by Altman. Because nothing screams ‘no conflict of interest’ like the CEO’s company investing in the CEO’s other company. They’re promising non-invasive BCIs that will take ‘decades’ to develop, but hey, at least OpenAI’s projected $74 billion operating loss by 2028 will have some interesting new line items. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI will turn you into a ‘product engineer’</strong>: Apparently, AI coding agents are so good they’ve compressed implementation time from ‘weeks to hours,’ meaning the bottleneck has shifted from building to ‘knowing what to build.’ So now, instead of just coding, you get to be a ‘Product Engineer’ and spend your days in user interviews and reviewing support tickets. Because nothing says ‘technical excellence’ like becoming a glorified customer service rep, all thanks to AI. <a href="https://app.daily.dev/posts/ruSCTD0Fh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Junior dev jobs are ‘going away’ (for the ‘unadaptable’)</strong>: Stefan Mischook and Theo from <a href="http://t3.gg" target="_blank" rel="noopener nofollow">t3.gg</a> are here to tell us that junior developer jobs are ‘disappearing’ because AI can write boilerplate code. But don’t worry, if you just ‘learn emerging technologies’ and ‘orchestrate AI tools,’ you’ll be fine. It’s almost like they’re saying if you’re not a senior engineer who can manage AI, you’re just not trying hard enough. The barrier to building software has collapsed, but the barrier to building something people care about hasn’t moved, so get to caring, juniors! <a href="https://app.daily.dev/feed-by-ids?id=BlB3n2pFk&amp;id=LCRb60bYH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
