<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, especially in highly regulated sectors like healthcare. This tactic, highlighted by multiple security reports, creates a dual extortion threat: pay the ransom or face regulatory penalties and reputational damage. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly evolving and potent threat. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical remote code execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited since late November 2025 by the China-linked APT group UAT-9686, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, as reported by security outlets. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for OpenAI datacenters</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt, beyond the $18 billion issued in September 2025, intended for datacenter investments supporting a $300 billion deal with OpenAI. This alleged lack of transparency led to bond downgrades and investor losses. The lawsuit claims Oracle is in a ‘multi-trillion-dollar arms race’ for AI infrastructure, according to financial news. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Wiz researchers discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild due to improperly anchored regex in webhook filters, which could have allowed attackers to gain admin access to AWS GitHub repositories and launch supply chain attacks. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sensitive corporate data exposed via GenAI tools</strong>: Harmonic Security found that 2.6% of 22.4 million prompts to generative AI tools contained company-sensitive data, with 71% of exposures occurring via ChatGPT, highlighting risks in AI workflows rather than just models. <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on AI demand, Nvidia surpasses Apple as top client</strong>: TSMC reported 25.5% YOY revenue growth in Q4 2025, forecasting 30% growth for FY 2026, driven by persistent AI infrastructure demand, with Nvidia reportedly becoming its largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces agentic memory in Visual Studio</strong>: GitHub Copilot now features ‘memories’ that learn and document coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding by sharing learned patterns across AI agents. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia Foundation partners with major AI companies</strong>: Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity via Wikimedia Enterprise, monetizing AI companies’ use of Wikipedia data for training LLMs and securing a new revenue stream. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US imposes 25% tariff on AI semiconductors to China</strong>: The Trump administration has imposed a 25% tariff on advanced AI semiconductors, including Nvidia’s H200 and AMD’s MI325X, produced outside the US but routed through the US for export to China, effective January 15, 2026. <a href="https://app.daily.dev/posts/BdyAfYrKk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNOME 50 Alpha removes X11 code</strong>: The GNOME 50 Alpha release, intended for testing, has removed all X11 display server code from the desktop environment, signaling a significant shift ahead of the official release scheduled for March 2025 (though the Alpha is dated January 2026, which is a bit confusing). <a href="https://app.daily.dev/posts/SmvPruPWQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI, facing projected operating losses of $74 billion by 2028 and $1.4 trillion in infrastructure commitments, just led a $250 million seed round for Merge Labs, a non-invasive BCI startup co-founded by Sam Altman. Because nothing says ‘sound financial strategy’ like investing in a decades-long speculative venture run by your own CEO, especially when you’re bleeding cash. Conflict of interest? Nah, just ‘synergy’ and ‘collaborative AI foundation model development.’ <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi’s ‘massive upgrade’ AI HAT+ 2</strong>: Raspberry Pi released the AI HAT+ 2, boasting a Hailo-10H accelerator and 8GB RAM for ‘on-device generative AI.’ They claim 40 TOPS for LLMs and 26 TOPS for computer vision, which is a bit of a performance identity crisis. It’s supposed to run 1-1.5B parameter LLMs locally, but some sources are already questioning its value, suggesting a regular Pi 5 with more RAM might be better. So, ‘massive upgrade’ or just a slightly more expensive hat? <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL’s open-source status: a legal fiction?</strong>: Apparently, Oracle is maintaining MySQL’s ‘legal open source status’ while blocking community development and running all code changes privately. With declining development activity, severe bugs, and 123 CVEs in 2025 (compared to MariaDB’s 8), it seems Oracle’s idea of ‘open source’ is more of a suggestion than a practice. Critics are calling it nominal, not practical. But hey, at least it’s ‘legal’! <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
