<h2>Must know</h2>
<ul>
<li><strong>AWS CodeBuild vulnerability exposed global cloud supply chain</strong>: Security researchers at Wiz uncovered a critical flaw, dubbed ‘CodeBreach,’ in AWS CodeBuild. This vulnerability, stemming from improperly anchored regex patterns in webhook filters, could have allowed attackers to gain admin-level access to AWS SDK repositories and potentially launch supply chain attacks across 66% of global cloud environments. AWS patched the issue within 48 hours and found no evidence of in-the-wild exploitation, as reported by Wiz Research. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening victims, especially in highly regulated sectors like healthcare, with regulatory reporting of compliance failures. This new tactic creates a dual threat: a ransom demand and the risk of regulatory penalties. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, according to multiple reports. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day exploited by China-linked group</strong>: Cisco has released emergency patches for a critical remote code execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. The flaw, actively exploited by the China-linked APT group UAT-9686 since late November 2025, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco recommends immediate patching and additional mitigation measures. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitHub Copilot gets agentic memory</strong>: GitHub Copilot now features ‘memories’ that learn and document coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding, now in public preview for all paid plans. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel agent offers on-demand code reviews</strong>: Vercel Agent now provides on-demand code reviews, manually triggered from GitHub pull request deployment tables, with an option for automatic reviews in team settings. <a href="https://app.daily.dev/posts/EobTrupL9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle sued over undisclosed debt for OpenAI datacenter investments</strong>: Oracle faces a class action lawsuit from bondholders alleging the company failed to disclose an additional $38 billion in debt intended for datacenter investments supporting a $300 billion deal with OpenAI. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity via Wikimedia Enterprise, monetizing access to its vast content for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Raspberry Pi AI HAT+ 2 for on-device generative AI</strong>: Raspberry Pi released the AI HAT+ 2 add-on board, equipped with a Hailo-10H neural network accelerator and 8GB RAM, enabling local execution of smaller LLMs and computer vision tasks without cloud dependency. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source form backend built with Next.js and React</strong>: Formbase is a new open-source form backend solution, built with Next.js, TypeScript, React, and SQLite, offering self-hostable form submission handling, notifications, and secure file uploads. <a href="https://app.daily.dev/posts/aYqnONOC9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Webflow integrates React code components</strong>: Webflow now allows developers to embed React components directly into the Webflow Canvas, extending design capabilities with custom interactivity and advanced functionality. <a href="https://app.daily.dev/posts/rfQGcAnds" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: Sam Altman’s OpenAI just led a $250 million seed round for Merge Labs, his <em>other</em> startup, which is developing non-invasive brain-computer interfaces. Because nothing says ‘no conflict of interest’ like your CEO’s primary company funding his side hustle, especially when the tech is ‘decades away’ and OpenAI is bleeding cash. What could possibly go wrong? <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sensitive corporate data exposed through GenAI tools</strong>: Harmonic Security found 2.6% of 22.4 million prompts to generative AI tools contained sensitive company data, with 71% of those exposures happening via ChatGPT. Apparently, people are just dumping code, legal docs, and M&amp;A secrets into public AI models, then acting surprised when their ‘private’ data isn’t so private. Who knew using free tools for corporate secrets was a bad idea? <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL’s open-source status is a joke, says community</strong>: Oracle is reportedly blocking community development for MySQL, running all code changes privately, leading to declining activity and severe bugs. Critics claim its ‘open source’ status is nominal, not practical, while MariaDB is touted as the ‘true’ alternative. So, Oracle bought MySQL, then effectively killed its open-source spirit. Classic move. <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
