<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, especially in highly regulated sectors like healthcare. This tactic, highlighted by multiple security reports, creates a double bind: pay the ransom or face regulatory fines and reputational damage. Attackers are using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly adopted and effective extortion method. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical remote command execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited by the China-linked APT group UAT-9686 since late 2025, allows root-level command execution if the Spam Quarantine feature is internet-exposed. Cisco’s fix also removes persistence mechanisms installed by attackers, as reported by security outlets. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook regex flaw exposed global cloud supply chain</strong>: Wiz security researchers uncovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild stemming from improperly anchored regex patterns in webhook filters. This flaw could have allowed attackers to bypass security checks, gain admin access to AWS SDK repositories, and potentially launch global supply chain attacks. AWS patched the vulnerability within 48 hours of notification, implementing global hardening measures, as detailed by Wiz and other tech outlets. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>TSMC revenue surges on AI demand, Nvidia now top client</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, primarily driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as TSMC’s largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI led a $250 million seed round for Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by Sam Altman, aiming to develop molecular neuron interfacing and ultrasound data transmission technology. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US imposes 25% tariff on AI semiconductors to China</strong>: The Trump administration implemented a 25% tariff on advanced AI semiconductors, including Nvidia’s H200 and AMD’s MI325X, produced outside the US but routed through the US for export to China, effective January 15, 2026. <a href="https://app.daily.dev/posts/BdyAfYrKk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies for data access</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity through Wikimedia Enterprise, providing structured access to Wikipedia data for training large language models and creating a new revenue stream. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces agentic memory in Visual Studio</strong>: GitHub Copilot now features ‘memories’ that learn and document coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding by sharing learned patterns across AI agents and workflows. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks patches firewall DoS flaw</strong>: Palo Alto Networks issued emergency patches for CVE-2026-0227, a denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect enabled, which allows unauthenticated remote attackers to force devices into maintenance mode. <a href="https://app.daily.dev/posts/MtreEtTLc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Eurail BV customer database breached</strong>: Eurail BV disclosed a cybersecurity incident affecting its customer database, resulting in unauthorized access to personal information including names, contact details, and passport data, with additional sensitive data exposed for DiscoverEU program customers. <a href="https://app.daily.dev/posts/SkuYRBlp7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Raspberry Pi’s ‘massive upgrade’ AI HAT+ 2: more RAM, same old performance?</strong>: Raspberry Pi just dropped the AI HAT+ 2, touting ‘massive upgrades’ with 8GB RAM and a Hailo-10H accelerator. They claim 40 TOPS for LLMs and 26 TOPS for computer vision, but some sources are already pointing out that the computer vision performance is unchanged from the previous version. So, you get more RAM for your smaller LLMs, but don’t expect a revolution for your vision tasks, despite the higher price tag. Sounds like a classic case of marketing spin. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle’s MySQL: open source in name only, apparently</strong>: According to community advocates, Oracle is maintaining MySQL’s ‘legal open source status’ while actively blocking community development and running all code changes privately. They’re even accused of releasing versions plagued with data corruption and performance regressions. Meanwhile, MariaDB is being hailed as the ‘true open source’ alternative. It’s almost as if Oracle bought MySQL just to slowly suffocate it while pretending to be a good steward. <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNOME 50 Alpha ‘guts’ X11 code, but the timeline is a bit… off</strong>: GNOME 50 Alpha just dropped, proudly announcing the removal of all X11 display server code. This is a big deal, apparently. The only catch? The official stable release of GNOME 50 is scheduled for March 2025, while this Alpha version is dated January 2026. So, they’re releasing an alpha for a version that’s already supposed to be stable? Either time travel is involved, or someone needs to check their calendar. Or maybe it’s just a typo, but it certainly makes you wonder about the attention to detail. <a href="https://app.daily.dev/posts/SmvPruPWQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
