<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, particularly in highly regulated sectors like healthcare. This tactic, detailed in multiple reports, creates a dual extortion threat: pay the ransom or face regulatory penalties and reputational damage. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly evolving and potent threat. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical RCE vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager, with a CVSS score of 10.0. This flaw, actively exploited by the China-linked APT group UAT-9686 since late November 2025, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, according to various security outlets. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Security researchers at Wiz discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild stemming from improperly anchored regex patterns in webhook filters. This flaw could have allowed attackers to gain admin-level access to AWS SDK repositories and potentially launch global supply chain attacks, impacting 66% of cloud environments. AWS was notified in August 2025 and patched the vulnerability within 48 hours, confirming no in-the-wild exploitation, as reported by multiple tech outlets. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI participated in a $250 million seed round for Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by Sam Altman, raising potential conflict of interest concerns given Altman’s dual role. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot gets agentic memory features</strong>: GitHub Copilot now includes ‘memories’ in Visual Studio, allowing it to learn and document coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding for developers. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies for data access</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity via Wikimedia Enterprise, monetizing structured access to Wikipedia data for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for AI datacenters</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt intended for datacenter investments to support a $300 billion deal with OpenAI, leading to bond downgrades. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi releases AI HAT+ 2 for on-device generative AI</strong>: Raspberry Pi launched the AI HAT+ 2 add-on board, featuring a Hailo-10H neural network accelerator for 40 TOPS inference, enabling local execution of smaller LLMs and computer vision models on Raspberry Pi 5. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Taiwan to invest $250 billion in US semiconductor and AI</strong>: Taiwan will invest $250 billion in US semiconductor, energy, and AI production, with an additional $250 billion in credit guarantees, as part of a trade deal aimed at reducing US reliance on foreign supply chains. <a href="https://app.daily.dev/feed-by-ids?id=6jMchY1Dx&amp;id=F3coydYNp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing advances and post-quantum cryptography adoption</strong>: Hitachi Solutions Create launched DoMobile Ver.5 in Japan, integrating NIST-standardized post-quantum cryptography, while Quandela highlights hybrid quantum-classical systems for AI and MIT researchers developed a new cooling method for chip-based quantum computers. <a href="https://app.daily.dev/feed-by-ids?id=2U66SslD2&amp;id=DVTU5NL6H&amp;id=FzKtOLWjs&amp;id=MoM3tO9qY&amp;id=YjJQ2NnXc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI security is about workflows, not just models</strong>: Harmonic Security found 2.6% of 22.4 million GenAI prompts contained sensitive corporate data, with 71% of exposures via ChatGPT. Apparently, the real risk isn’t the AI model itself, but the ‘workflow security’—because who needs secure models when your Chrome extensions are busy stealing ChatGPT data from 900,000 users, or prompt injections are making IBM’s coding assistant execute malware? It’s almost like the ‘probabilistic’ nature of AI workflows makes traditional security ‘ineffective,’ as The Hacker News so eloquently puts it. <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL’s open-source status is a joke, PHP is still alive</strong>: Oracle is reportedly blocking community development for MySQL, running all code changes privately, leading to declining activity and severe bugs like data corruption and performance regressions in 2025. Critics, likely MariaDB advocates, claim MySQL’s open-source status is ‘nominal, not practical.’ Meanwhile, PHP, the language everyone loves to hate, is still powering WordPress and Drupal, with Perforce Zend specialists insisting its 8.x improvements make it competitive. So, MySQL is dying a slow, proprietary death, but PHP, like a cockroach, just keeps on ticking. <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Shadcn/UI: the copy-paste component library for React</strong>: Shadcn/ui is apparently the new hotness for React developers, letting you ‘copy-paste’ components directly into your project instead of installing them as dependencies. Built with Radix UI and Tailwind CSS, it promises full ownership and control, and apparently, AI coding tools are ‘well-trained’ on its patterns. So, instead of learning how to build things, you can just copy-paste and let the AI do the rest. What could possibly go wrong with a component library that encourages you to literally copy-paste code from the internet? <a href="https://app.daily.dev/feed-by-ids?id=Lg371XzAr&amp;id=y2lnGMTvB" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
