<h2>Must know</h2>
<ul>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup</strong>: OpenAI has invested over $250 million in Merge Labs, a non-invasive brain-computer interface (BCI) startup co-founded by OpenAI CEO Sam Altman. This move, reported by TechCrunch, aims to leverage BCIs for AI foundation model development, despite the technology being decades away. The investment raises ethical and governance concerns due to Altman’s dual role, especially given OpenAI’s projected $74 billion operating loss by 2028 and massive infrastructure commitments. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, particularly in highly regulated sectors like healthcare. This tactic, highlighted by BleepingComputer, creates a dual extortion threat: pay the ransom or face regulatory penalties and reputational damage. Attackers are using AI to analyze stolen data for compliance gaps and even draft legal complaints, making this a rapidly adopted and effective new strategy. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical remote code execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS for Secure Email Gateway and Secure Email and Web Manager. The flaw, actively exploited since late November 2025 by the China-linked APT group UAT-9686, allows arbitrary command execution as root if the Spam Quarantine feature is internet-exposed. Cisco’s fix also removes persistence mechanisms installed by attackers, as detailed by The Hacker News. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AWS CodeBuild webhook flaw exposed cloud supply chain</strong>: Wiz security researchers discovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild due to improperly anchored regex patterns, which could have led to global-scale supply chain attacks on AWS environments by allowing unauthorized access to GitHub repositories. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot gets agentic memory</strong>: GitHub Copilot now features ‘memories’ in Visual Studio, allowing it to learn and document coding preferences and project guidelines, aiming to reduce code review friction and streamline onboarding by sharing learned patterns across development workflows. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on AI demand</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, driven by persistent AI infrastructure demand, with Nvidia reportedly surpassing Apple as its largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Raspberry Pi launches AI HAT+ 2 for on-device generative AI</strong>: Raspberry Pi released the AI HAT+ 2 add-on board, equipped with a Hailo-10H neural network accelerator, enabling local execution of smaller LLMs and computer vision models with 8GB of onboard RAM. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia partners with major AI companies</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity via Wikimedia Enterprise, monetizing AI companies’ use of Wikipedia data for training large language models. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks patches firewall DoS flaw</strong>: Palo Alto Networks issued emergency patches for CVE-2026-0227, a high-severity denial-of-service vulnerability in PAN-OS firewalls with GlobalProtect, which allows unauthenticated remote attackers to force devices into maintenance mode. <a href="https://app.daily.dev/posts/MtreEtTLc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Eurail BV discloses customer database breach</strong>: Eurail BV announced a cybersecurity incident affecting its customer database, resulting in unauthorized access to personal information including names, contact details, and passport data, with additional sensitive data exposed for DiscoverEU program participants. <a href="https://app.daily.dev/posts/SkuYRBlp7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Oracle sued over undisclosed debt for OpenAI datacenters</strong>: Oracle is facing a class action lawsuit from bondholders who claim the company failed to disclose an additional $38 billion in debt, beyond the $18 billion issued in September 2025, allegedly to fund a $300 billion deal with OpenAI. Apparently, Oracle’s ‘multi-trillion-dollar arms race’ to build AI datacenters wasn’t worth mentioning to investors. Who needs transparency when you’re chasing the AI dream? <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US imposes tariffs on AI chips to China, Nvidia ‘supports’ it</strong>: The Trump administration slapped a 25% tariff on advanced AI semiconductors, like Nvidia’s H200 and AMD’s MI325X, destined for China, if they pass through the US. Nvidia, ever the patriot, ‘supports’ this, claiming it helps maintain export controls while allowing competition. Because nothing says ‘free market’ like government-imposed tariffs and corporate cheerleading for protectionism. <a href="https://app.daily.dev/posts/BdyAfYrKk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft, Sony, Nintendo update on player safety commitment</strong>: Microsoft, Sony, and Nintendo released a joint statement on their ‘player safety initiative,’ outlining principles like prevention, partnership, and responsibility. It’s a heartwarming tale of corporate synergy, emphasizing ‘easy and intuitive’ safety controls and ‘accountability for player protection.’ Conveniently, they provided zero specific policy changes or new features, just a lot of feel-good corporate speak. Bravo, gentlemen, for the commitment to principles! <a href="https://app.daily.dev/posts/CTtMMpBVE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
