<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, especially in highly regulated sectors like healthcare. This tactic creates a double bind: pay the ransom or face regulatory penalties and reputational damage. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, according to multiple reports. This significantly ups the ante beyond just data encryption. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked group</strong>: Cisco has released emergency patches for a critical remote command execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited by the China-linked APT group UAT-9686 since late November 2025, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, as reported by security outlets. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Security researchers at Wiz uncovered a critical vulnerability, dubbed ‘CodeBreach,’ in AWS CodeBuild that could have led to widespread supply chain attacks. The flaw, caused by improperly anchored regex patterns in webhook filters, allowed attackers to bypass security checks and gain admin-level access to AWS SDK repositories. AWS patched the vulnerability within 48 hours of notification, implementing global hardening measures, as detailed by Wiz and other tech news sources. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitHub Copilot gets agentic memory</strong>: GitHub Copilot now features ‘memories’ in Visual Studio, allowing it to learn and document coding preferences and project guidelines automatically, aiming to reduce code review friction and streamline onboarding. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on AI demand</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, primarily driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as its largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity via Wikimedia Enterprise, monetizing access to its vast content for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi releases AI HAT+ 2 for on-device generative AI</strong>: Raspberry Pi launched the AI HAT+ 2 add-on board, equipped with a Hailo-10H neural network accelerator, enabling local execution of smaller LLMs and computer vision models with 8GB onboard RAM. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for OpenAI datacenters</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt intended for datacenter investments supporting a $300 billion deal with OpenAI, leading to bond downgrades. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US imposes 25% tariff on AI semiconductors to China</strong>: The Trump administration has imposed a 25% tariff on advanced AI semiconductors, including Nvidia’s H200 and AMD’s MI325X, produced outside the US but routed through the US for export to China. <a href="https://app.daily.dev/posts/BdyAfYrKk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing advances and post-quantum cryptography adoption</strong>: Hitachi Solutions Create launched DoMobile Ver.5 in Japan, integrating NIST-standardized post-quantum cryptography, while Quandela highlights hybrid quantum-classical systems for AI and MIT researchers introduced a new cooling method for chip-based quantum computers. <a href="https://app.daily.dev/feed-by-ids?id=2U66SslD2&amp;id=DVTU5NL6H&amp;id=FzKtOLWjs&amp;id=MoM3tO9qY&amp;id=YjJQ2NnXc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI, facing projected $74 billion operating losses, decided the best use of its money was to invest in Sam Altman’s new non-invasive BCI startup, Merge Labs. Because nothing screams ‘no conflict of interest’ like the CEO’s other company getting a $250 million seed round from his main gig. Apparently, developing BCIs will take ‘decades,’ but hey, at least the valuation is $850 million now. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft, Sony, Nintendo update on player safety commitment</strong>: Microsoft, Sony, and Nintendo released a joint statement on player safety, outlining principles like ‘prevention, partnership, and responsibility.’ It’s a heartwarming display of corporate synergy, especially since it contains zero specific policy changes, feature additions, or technical updates. Just principles, folks. Because nothing says ‘we’re doing something’ like a press release full of vague promises. <a href="https://app.daily.dev/posts/CTtMMpBVE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNOME 50 Alpha removes X11 code ahead of official release</strong>: GNOME 50 Alpha has ‘gutted’ all X11 display server code, which sounds dramatic until you realize the official release is scheduled for March 2025, and the Alpha just dropped in January 2026. Time travel, or just another example of how release dates are more of a suggestion than a commitment in the open-source world? Either way, X11 is out, eventually. <a href="https://app.daily.dev/posts/SmvPruPWQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
