<h2>Must know</h2>
<ul>
<li><strong>TSMC sees endless AI chip demand, plans massive investment</strong>: TSMC reported record Q4 earnings for 2025, with revenue up 25.5% year-over-year, and forecasts 30% growth for 2026, driven by what its CEO calls “endless” AI-related chip demand. The company plans $52-56 billion in capital expenditures for 2026, with up to 80% dedicated to advanced process nodes (7nm and smaller) for AI chips. TSMC expects its 2nm manufacturing process to ramp up faster than previous nodes, with about 30% of that production slated for the USA, as reported by TSMC’s official financial statements. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical WordPress plugin vulnerability grants admin access</strong>: A critical privilege escalation vulnerability (CVE-2026-23550) in the Modular DS WordPress plugin, affecting versions 2.5.1 and below, allows unauthenticated attackers to gain instant admin access. The flaw, with a CVSS score of 10.0, is due to faulty API routing logic. Active exploitation has been detected, and over 40,000 WordPress sites are estimated to be vulnerable. Site administrators are urged to update to version 2.5.2 immediately and audit for unauthorized accounts, according to vulnerability reports. <a href="https://app.daily.dev/posts/D6wKV3WK1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks patches critical DoS flaw in PAN-OS</strong>: Palo Alto Networks released patches for CVE-2026-0227, a high-severity denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect enabled. Unauthenticated attackers can exploit this flaw to force firewalls into maintenance mode, potentially causing network outages. Public proof-of-concept code exists, increasing the urgency for patching. Prisma Access cloud customers are mostly automatically patched, but NGFW users must apply updates manually, as stated by Palo Alto Networks. <a href="https://app.daily.dev/posts/MtreEtTLc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>ClickHouse acquires Langfuse, launches native Postgres service</strong>: ClickHouse acquired Langfuse, an open-source LLM observability platform, to enhance its AI application monitoring capabilities, and launched a native Postgres service in partnership with Ubicloud for unified transactional and analytical workloads. <a href="https://app.daily.dev/feed-by-ids?id=7DDF3YQda&amp;id=kU2RvmlCw&amp;id=BqVJ6XPkS&amp;id=Ycyvr9ct2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DuckDB simplifies data processing with in-process OLAP</strong>: DuckDB is gaining traction as a preferred data processing tool due to its 100-1000x performance improvements over OLTP databases, zero-dependency installation, direct file querying, and advanced SQL features, making it ideal for local data analysis without distributed system complexity. <a href="https://app.daily.dev/posts/SX7GGLwxx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces agentic memory in public preview</strong>: GitHub Copilot now features agentic memory in public preview for paid plans, allowing it to learn and retain repository-specific insights to improve code assistance, with memories expiring after 28 days and configurable by users and organizations. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google previews BigQuery AI for natural language to SQL</strong>: Google is testing a “Comments to SQL” feature in BigQuery, powered by Gemini, which translates natural-language instructions within SQL comment blocks into executable queries, aiming to accelerate data analysis. <a href="https://app.daily.dev/posts/5AcBUpc2i" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare enhances resilience, acquires Astro Technology</strong>: Cloudflare launched “Code Orange: Fail Small” to prevent global outages through phased configuration rollouts and acquired Astro Technology Company, an open-source framework for content-centric websites, which will remain MIT-licensed. <a href="https://app.daily.dev/feed-by-ids?id=OdNHxfcwg&amp;id=Q4Q57JyYL&amp;id=yRAOJZmiR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Datadog shares Cilium deployment best practices</strong>: Datadog detailed its operational practices for deploying Cilium across hundreds of Kubernetes clusters, emphasizing native routing, IPAM tuning, and BPF map monitoring for reliability and efficiency at enterprise scale. <a href="https://app.daily.dev/posts/QzUGYBGCW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agentic AI advances in non-human identity and secrets management</strong>: Agentic AI systems are increasingly used to autonomously manage and secure non-human identities (NHIs) and secrets, reducing breach risks and improving compliance through anomaly detection and continuous monitoring. <a href="https://app.daily.dev/feed-by-ids?id=NCcbuPG8X&amp;id=UAGIEGe4I" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI to introduce targeted ads in ChatGPT</strong>: OpenAI is rolling out targeted ads for free and Go tier ChatGPT users in the U.S., claiming it’s to support free access and generate revenue. They assure us ads won’t influence responses and user data won’t be sold, which is exactly what every ad-driven platform says right before it starts influencing responses and selling user data. But hey, at least they’re expanding the Go tier to the U.S. for a mere $8/month, because nothing says ‘free access’ like a new paid tier with ads. <a href="https://app.daily.dev/posts/DQh9IAXNl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered coding tools are creating ‘vibe coding’ and micro apps</strong>: Apparently, Linus Torvalds used “vibe coding” (getting mostly unedited AI-generated code) for a hobby project, and now everyone’s doing it for “micro apps.” While some claim productivity gains, others are finding AI-generated code is a maintainability nightmare, especially for production. It’s almost like relying on a black box to write your critical systems might have some downsides, but don’t worry, the hype machine is already comparing it to Shopify and social media democratization. <a href="https://app.daily.dev/feed-by-ids?id=H6Mp947gD&amp;id=h6ZJabZ0D&amp;id=laMxMdAYV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Enterprise AI projects are failing because of… complexity?</strong>: A survey found over half of enterprise AI projects are delayed or canceled due to “infrastructure issues” and “excessive complexity,” with 95% reporting zero measurable ROI. Who would’ve thought that throwing AI at a mountain of technical debt and poorly managed infrastructure wouldn’t magically solve everything? The solution, apparently, is to modernize applications and integrate security, which is exactly what we’ve been telling them for years, but now with more AI buzzwords. <a href="https://app.daily.dev/feed-by-ids?id=k12AAd1Ej&amp;id=tr8ZpGHVk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
