<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, especially in highly regulated sectors like healthcare. This tactic, highlighted by multiple security reports, creates a dual extortion threat: pay the ransom or face regulatory penalties and reputational damage. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly evolving and potent threat. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked group</strong>: Cisco has released emergency patches for a critical remote code execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited by the China-linked APT group UAT-9686 since late November 2025, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, as reported by multiple security outlets. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook regex flaw exposed global cloud supply chain</strong>: Security researchers at Wiz discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild stemming from improperly anchored regex patterns in webhook filters. This flaw could have allowed attackers to bypass security checks and gain admin-level access to AWS GitHub repositories, including the JavaScript SDK, potentially leading to global supply chain attacks. AWS was notified in August 2025 and patched the vulnerability within 48 hours, implementing global hardening measures, according to Wiz and other tech outlets. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI invests in Sam Altman’s brain-computer interface startup</strong>: OpenAI participated in a $250 million seed round for Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by OpenAI CEO Sam Altman, raising potential conflict of interest concerns despite the long-term nature of BCI development. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia Foundation partners with major AI companies for data access</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity through Wikimedia Enterprise, monetizing structured access to Wikipedia content for training large language models and securing a new revenue stream. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces agentic memory in Visual Studio</strong>: GitHub Copilot now features ‘memories’ that learn and document coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding by sharing learned patterns across AI agents and validating them against the active codebase. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on persistent AI demand</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, driven by strong AI infrastructure demand, with Nvidia reportedly surpassing Apple as its largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US imposes 25% tariff on AI semiconductors to China</strong>: The Trump administration has imposed a 25% tariff on advanced AI semiconductors, including Nvidia’s H200 and AMD’s MI325X, produced outside the US but routed through the US for export to China, aiming to reduce reliance on foreign supply chains. <a href="https://app.daily.dev/posts/BdyAfYrKk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing advances and post-quantum cryptography adoption</strong>: Hitachi Solutions Create launched DoMobile Ver.5 in Japan, integrating NIST-standardized post-quantum cryptography, while Quandela highlights hybrid quantum-classical systems for AI and MIT researchers introduced a new cooling method for chip-based quantum computers. <a href="https://app.daily.dev/feed-by-ids?id=2U66SslD2&amp;id=DVTU5NL6H&amp;id=FzKtOLWjs&amp;id=MoM3tO9qY&amp;id=YjJQ2NnXc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks issues emergency patch for firewall DoS flaw</strong>: Palo Alto Networks released emergency patches for CVE-2026-0227, a high-severity denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect enabled, which allows unauthenticated remote attackers to force devices into maintenance mode. <a href="https://app.daily.dev/posts/MtreEtTLc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Raspberry Pi’s AI HAT+ 2: Massive upgrade or just more RAM?</strong>: Raspberry Pi just dropped the AI HAT+ 2, boasting ‘massive upgrades’ and on-device generative AI. Apparently, 8GB of RAM is a ‘significant upgrade’ for running LLMs, even if it’s still limiting for larger models. And with conflicting performance figures and prices, it sounds like they’re still figuring out if it’s a game-changer or just another accessory for hobbyists to tinker with. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle sued over undisclosed debt for OpenAI datacenter investments</strong>: Oracle is facing a class-action lawsuit from bondholders who claim the company failed to disclose an additional $38 billion in debt, allegedly for a $300 billion deal with OpenAI. Apparently, Oracle’s ‘multi-trillion-dollar arms race’ to build datacenters is so important they forgot to tell investors about the massive borrowing. Transparency? Who needs it when you’re chasing AI glory? <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sensitive corporate data exposed through GenAI tools: Who could have seen that coming?</strong>: Harmonic Security found that 2.6% of 22.4 million prompts to generative AI tools contained company-sensitive data, with 71% of those exposures happening via ChatGPT. Who knew that feeding proprietary information into public AI models could lead to data leaks? And apparently, the real risk is now ‘workflow security,’ not just the models themselves. Shocking, truly shocking. <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
