<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, especially in highly regulated sectors like healthcare. This tactic, detailed in multiple reports, creates a double bind: pay the ransom or face regulatory penalties and reputational damage. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly evolving and potent threat. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical remote code execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, with a CVSS score of 10.0, has been actively exploited since late November 2025 by the China-linked APT group UAT-9686, allowing arbitrary command execution as root. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, as reported by various security outlets. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Wiz security researchers uncovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild stemming from improperly anchored regex patterns in webhook filters. This flaw could have allowed attackers to bypass security checks and gain admin-level access to AWS SDK repositories, potentially leading to global supply chain attacks. AWS patched the vulnerability within 48 hours of notification and found no evidence of in-the-wild exploitation, according to Wiz and AWS statements. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>TSMC revenue surges on AI demand, Nvidia now top client</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as TSMC’s largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI led a $250 million seed round for Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by Sam Altman, raising questions about potential conflicts of interest given Altman’s dual roles. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi AI HAT+ 2 brings on-device generative AI</strong>: Raspberry Pi released the AI HAT+ 2 add-on board, featuring a Hailo-10H neural network accelerator for 40 TOPS inference performance and 8GB RAM, enabling local execution of smaller LLMs and computer vision tasks. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies for data access</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity via Wikimedia Enterprise, monetizing structured access to Wikipedia data for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces agentic memory in Visual Studio</strong>: GitHub Copilot now includes ‘memories,’ a feature that learns and documents coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding by sharing learned patterns across AI agents. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing advances and post-quantum cryptography adoption</strong>: Hitachi Solutions Create launched DoMobile Ver.5 in Japan, integrating NIST-standardized post-quantum cryptography, while Quandela highlights hybrid quantum-classical systems for AI and MIT researchers developed a new cooling method for chip-based quantum computers. <a href="https://app.daily.dev/feed-by-ids?id=2U66SslD2&amp;id=DVTU5NL6H&amp;id=FzKtOLWjs&amp;id=MoM3tO9qY&amp;id=YjJQ2NnXc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Eurail BV discloses customer database breach</strong>: Eurail BV announced a cybersecurity incident exposing personal information, including names, contact details, and passport data, with DiscoverEU participants potentially having additional sensitive data like IBANs and health information compromised. <a href="https://app.daily.dev/posts/SkuYRBlp7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Oracle’s debt drama: $300 billion OpenAI deal, $38 billion undisclosed debt</strong>: Oracle is facing a class-action lawsuit from bondholders who claim the company failed to disclose an additional $38 billion in debt, allegedly tied to a $300 billion deal with OpenAI. Apparently, Oracle’s ‘multi-trillion-dollar arms race’ to build AI datacenters is so important, they forgot to mention it to investors. Who needs transparency when you’re trying to keep up with the AI Joneses, right? The market, however, wasn’t amused, leading to lower bond ratings and higher yields. Shocking. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI in enterprise: 50% of projects stall, 95% zero ROI</strong>: A survey reveals over half of enterprise AI projects are delayed or canceled due to ‘infrastructure complexity,’ with 95% of generative AI initiatives yielding ‘zero measurable returns.’ So, after all the hype, it turns out throwing AI at everything without a coherent strategy or proper infrastructure is, well, not working. Maybe the solution isn’t more AI, but actually understanding what you’re doing before you jump on the next buzzword bandwagon. Who would’ve thought? <a href="https://app.daily.dev/posts/k12AAd1Ej" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL’s open-source status: a legal fiction?</strong>: Oracle is reportedly maintaining MySQL’s ‘legal open source status’ while blocking community development and running all code changes privately. Critics claim this has led to declining development, severe bugs, and performance regressions, making its open-source label a ‘nominal’ one. Apparently, Oracle’s idea of ‘open source’ is more like a one-way mirror: they can see you, but you can’t see them. MariaDB, meanwhile, is happily chugging along as the ‘true open source’ alternative. Go figure. <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
