<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening victims, especially in healthcare, with regulatory reporting of compliance violations. This tactic creates a dual threat: ransom demands and the risk of regulatory penalties. Attackers are reportedly using AI to analyze stolen data for compliance gaps and even draft legal complaints, as detailed in recent reports. This significantly escalates the stakes for organizations in highly regulated sectors. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical remote command execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. This flaw, actively exploited by the China-linked APT group UAT-9686 since late 2025, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, according to multiple security advisories. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Security researchers at Wiz discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild stemming from improperly anchored regex patterns in webhook filters. This flaw could have allowed attackers to bypass security checks and gain admin-level access to AWS GitHub repositories, including the JavaScript SDK, posing a significant supply chain risk. AWS quickly patched the vulnerability and implemented global hardening measures, with no evidence of in-the-wild exploitation, as reported by Wiz and other outlets. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>TSMC revenue surges on AI demand, Nvidia becomes top client</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, primarily driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as TSMC’s largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for OpenAI datacenters</strong>: Oracle is being sued by bondholders who allege the company failed to disclose an additional $38 billion in debt, beyond a September 2025 issuance, intended for datacenter investments supporting a $300 billion deal with OpenAI. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces agentic memory for coding preferences</strong>: GitHub Copilot now features ‘memories’ in Visual Studio, learning and documenting coding preferences and project guidelines automatically, aiming to reduce code review friction and streamline onboarding by sharing learned patterns across AI agents. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia Foundation partners with major AI companies for data access</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity through Wikimedia Enterprise, monetizing structured access to Wikipedia data for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US imposes 25% tariff on AI semiconductors to China</strong>: The Trump administration has imposed a 25% tariff on advanced AI semiconductors, including Nvidia’s H200 and AMD’s MI325X, produced outside the US but routed through the US for export to China, effective January 15, 2026. <a href="https://app.daily.dev/posts/BdyAfYrKk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Eurail BV discloses customer database breach</strong>: Eurail BV has disclosed a cybersecurity incident affecting its customer database, resulting in unauthorized access to personal information including names, contact details, and passport data, with additional sensitive data exposed for DiscoverEU program customers. <a href="https://app.daily.dev/posts/SkuYRBlp7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks patches firewall denial-of-service flaw</strong>: Palo Alto Networks issued emergency patches for CVE-2026-0227, a denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect enabled, which allows unauthenticated remote attackers to force devices into maintenance mode. <a href="https://app.daily.dev/posts/MtreEtTLc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI, facing projected $74 billion operating losses and $1.4 trillion in infrastructure commitments, just led a $250 million seed round for Merge Labs, a non-invasive BCI startup co-founded by Sam Altman. Because nothing says ‘sound financial strategy’ like investing in a decades-long speculative venture run by your own CEO, especially when you’re bleeding cash. Conflict of interest? Nah, just ‘synergy’ for future AI foundation models, apparently. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi’s ‘massive upgrade’ AI HAT+ 2</strong>: Raspberry Pi released the AI HAT+ 2, boasting a Hailo-10H accelerator and 8GB RAM for ‘on-device generative AI.’ They claim 40 TOPS for LLMs and 26 TOPS for computer vision, which is a bit confusing, but hey, it runs small LLMs locally! Never mind that the price is inconsistent, and some sources are already questioning its value compared to a beefier Pi 5. ‘Massive upgrade’ seems to be doing a lot of heavy lifting here. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNOME 50 Alpha guts X11 code, but when is it actually out?</strong>: GNOME 50 Alpha, released January 16, 2026, proudly announced it’s removed all X11 display server code. Bold move. The official release is scheduled for… March 2025? So, they released an alpha version a year after the stable release? Either time travel is real, or someone needs to check their calendar. Details are scarce, but at least they’re committed to removing old code, even if the timeline is a bit, shall we say, ‘fluid.’ <a href="https://app.daily.dev/posts/SmvPruPWQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
