<h2>Must know</h2>
<ul>
<li><strong>GitHub Copilot gets agentic memory in Visual Studio</strong>: GitHub Copilot now features ‘memories’ in Visual Studio, designed to learn and document coding preferences and project guidelines automatically. This system detects team preferences from prompts, aims to reduce code review friction, and streamlines onboarding by organizing memories in personal user files or version-controlled repository instructions. An A/B test showed a 7% increase in pull request merge rates for users, according to the Visual Studio Blog. The feature is now in public preview for all paid plans. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Security researchers at Wiz discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild stemming from improperly anchored regex patterns in webhook filters. This flaw could have allowed attackers to bypass security checks and gain admin-level access to AWS SDK repositories, potentially leading to global supply chain attacks. AWS was notified in August 2025 and patched the vulnerability within 48 hours, implementing global hardening measures, as reported by Wiz Research. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ransomware gangs weaponize compliance violations for extortion</strong>: Ransomware groups like Anubis and RansomHub are now threatening victims, especially in highly regulated sectors like healthcare, with regulatory reporting of compliance violations. This tactic creates a dual threat: ransom demands and the risk of regulatory punishment for compliance failures. Attackers are using AI-powered tools to analyze stolen data for compliance gaps and generate formal legal complaints, increasing reputational and financial risk for victim organizations. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Shadcn/UI gains traction in React development</strong>: Shadcn/ui is a collection of React UI components that are copied directly into projects rather than installed as dependencies, built on Radix UI or Base UI and styled with Tailwind CSS, offering full ownership and control to developers. <a href="https://app.daily.dev/feed-by-ids?id=Lg371XzAr&amp;id=y2lnGMTvB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PHP and MySQL maintain relevance in 2026</strong>: PHP continues to power major web platforms like WordPress and Drupal, with PHP 8.x improvements like JIT compilation, while MariaDB is positioned as the ‘true open source’ alternative to Oracle’s MySQL, which faces criticism for declining development and technical issues. <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi releases AI HAT+ 2 for on-device generative AI</strong>: The Raspberry Pi AI HAT+ 2, equipped with a Hailo-10H neural network accelerator and 8GB RAM, enables local execution of smaller LLMs and computer vision models, eliminating cloud dependency for hobbyists and edge computing scenarios. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for AI datacenters</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt, beyond an initial $18 billion, intended for datacenter investments supporting a $300 billion deal with OpenAI, leading to bond rating downgrades and investor losses. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Taiwan to invest $250 billion in US semiconductor and AI production</strong>: Taiwan will invest $250 billion in US semiconductor, energy, and AI production, along with $250 billion in credit guarantees, as part of a trade deal with the Trump administration aimed at reducing US reliance on foreign semiconductor supply chains. <a href="https://app.daily.dev/feed-by-ids?id=6jMchY1Dx&amp;id=F3coydYNp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks patches critical firewall DoS flaw</strong>: Palo Alto Networks issued emergency patches for CVE-2026-0227, a denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect enabled, which allows unauthenticated remote attackers to force devices into maintenance mode, causing network disruptions. <a href="https://app.daily.dev/posts/MtreEtTLc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Eurail BV discloses customer database breach</strong>: Eurail BV announced a cybersecurity incident affecting its customer database, resulting in unauthorized access to personal information including names, contact details, and passport data, with DiscoverEU program customers potentially having additional sensitive data exposed. <a href="https://app.daily.dev/posts/SkuYRBlp7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI, facing projected operating losses of $74 billion by 2028 and $1.4 trillion in infrastructure commitments, just led a $250 million seed round for Merge Labs, Sam Altman’s non-invasive BCI startup. Because nothing says ‘fiscal responsibility’ like investing in a decades-away technology co-founded by your own CEO, especially when your company is bleeding cash. What could possibly go wrong with that conflict of interest? <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft, Sony, Nintendo update on player safety: principles, not progress</strong>: Microsoft, Sony, and Nintendo released a joint statement on their player safety initiative, outlining ‘principles’ like prevention, partnership, and responsibility. This update, six years after their initial commitment, offers no specific policy changes, feature additions, or technical updates. It’s a masterclass in corporate PR, reminding us they care about safety without actually doing anything new, especially for those ‘younger users.’ <a href="https://app.daily.dev/posts/CTtMMpBVE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sensitive corporate data exposed via GenAI tools: who could have seen this coming?</strong>: Harmonic Security found that 2.6% of 22.4 million prompts to generative AI tools contained company-sensitive data, with 71% of exposures via ChatGPT. Apparently, letting employees feed proprietary code, legal info, and M&amp;A data into public AI models without audit trails was a brilliant strategy. Now, the ‘security risk is shifting from protecting models to securing workflows,’ which is a fancy way of saying, ‘we’re still figuring out how to stop people from doing dumb things with AI.’ <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
