<h2>Must know</h2>
<ul>
<li><strong>Ransomware gangs weaponize compliance violations</strong>: Ransomware groups like Anubis and RansomHub are now threatening to report victims’ compliance violations to regulators, especially in highly regulated sectors like healthcare. This tactic, highlighted by multiple sources, creates a double bind: pay the ransom or face regulatory penalties and reputational damage. They’re even using AI to analyze stolen data for compliance gaps and draft legal complaints, making this a rapidly evolving and serious threat to organizational security and data management. <a href="https://app.daily.dev/posts/OsQyB9bxn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cisco patches critical zero-day RCE exploited by China-linked APT</strong>: Cisco has released emergency patches for a critical remote command execution (RCE) vulnerability (CVE-2025-20393) in AsyncOS, actively exploited by the China-linked APT group UAT-9686 since late 2025. The flaw, with a CVSS score of 10.0, allows root-level command execution if the Spam Quarantine feature is internet-exposed. Cisco’s fix also aims to remove persistence mechanisms installed by attackers, emphasizing the need for immediate updates and robust network security. <a href="https://app.daily.dev/posts/Faoj4Wg3E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild webhook flaw exposed global cloud supply chain</strong>: Wiz security researchers uncovered ‘CodeBreach,’ a critical vulnerability in AWS CodeBuild stemming from improperly anchored regex patterns in webhook filters. This flaw could have allowed attackers to gain admin-level access to AWS GitHub repositories, including the JavaScript SDK, posing a significant supply chain risk. AWS quickly patched the issue, but the incident, reported by multiple outlets, underscores the pervasive security blind spots in CI/CD pipelines and the need for rigorous regex validation. <a href="https://app.daily.dev/feed-by-ids?id=q7gLeN4EH&amp;id=MZnlHztN0&amp;id=PTMQTWkW2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Sensitive corporate data exposed through GenAI workflows</strong>: Harmonic Security found that 2.6% of 22.4 million prompts to generative AI tools contained company-sensitive data, with 71% of exposures via ChatGPT, highlighting the critical need for AI workflow security. <a href="https://app.daily.dev/feed-by-ids?id=F9SzKFotn&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces agentic memory for coding workflows</strong>: GitHub Copilot now features ‘memories’ in Visual Studio, learning coding preferences and project guidelines to reduce code review friction and streamline onboarding, with a new cross-agent memory system for shared knowledge. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TSMC revenue surges on persistent AI demand</strong>: TSMC reported a 25.5% year-over-year revenue growth in Q4 2025, forecasting 30% growth for FY 2026, driven by sustained AI infrastructure demand, with Nvidia reportedly surpassing Apple as its largest client. <a href="https://app.daily.dev/posts/aTc9ls9yL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikimedia Foundation partners with major AI companies</strong>: The Wikimedia Foundation has launched commercial partnerships with Amazon, Meta, Microsoft, Mistral AI, and Perplexity via Wikimedia Enterprise, monetizing its vast data for AI model training and securing a new revenue stream. <a href="https://app.daily.dev/posts/QmEAqVcYI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oracle faces class action over undisclosed debt for OpenAI investments</strong>: Oracle is being sued by bondholders for allegedly failing to disclose an additional $38 billion in debt intended for datacenter investments supporting a $300 billion deal with OpenAI, causing bond value declines. <a href="https://app.daily.dev/posts/9fgRHJtn9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agentic AI and non-human identity security challenges</strong>: The rapid adoption of agentic AI systems for managing non-human identities (NHIs) in cloud authentication creates new security challenges, requiring unified control planes and robust secrets management to mitigate ‘shadow agent’ risks. <a href="https://app.daily.dev/feed-by-ids?id=NCcbuPG8X&amp;id=NVsuaRFG5&amp;id=UAGIEGe4I" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing advances and post-quantum cryptography adoption</strong>: Hitachi Solutions Create launched DoMobile Ver.5 in Japan, integrating NIST-standardized post-quantum cryptography, while MIT researchers developed a new cooling method for scalable chip-based quantum computers, pushing quantum tech towards practical adoption. <a href="https://app.daily.dev/feed-by-ids?id=2U66SslD2&amp;id=DVTU5NL6H&amp;id=FzKtOLWjs&amp;id=MoM3tO9qY&amp;id=YjJQ2NnXc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Raspberry Pi’s ‘massive upgrade’ AI HAT+ 2: more RAM, same old performance?</strong>: Raspberry Pi just dropped the AI HAT+ 2, touting ‘massive upgrades’ with 8GB RAM and Hailo-10H. Apparently, it delivers 40 TOPS for LLMs and 26 TOPS for computer vision, though some sources can’t quite agree on the numbers. But hey, it runs small LLMs locally, so you can finally escape the cloud for your 1.5B parameter models. Just don’t expect miracles for larger ones, and some are already questioning if it’s worth the $130 when a beefier Pi 5 might do better. <a href="https://app.daily.dev/posts/nbjHwDlw3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI invests in Altman’s brain-computer interface startup: because conflicts of interest are so last year</strong>: OpenAI, facing a projected $74 billion operating loss by 2028 and $1.4 trillion in infrastructure commitments, just led a $250 million seed round for Merge Labs—a non-invasive BCI startup co-founded by its own CEO, Sam Altman. The company claims this ‘circular investment’ will speed up BCI development, which is expected to take ‘decades.’ Nothing to see here, just a perfectly normal investment by a struggling company into its CEO’s side hustle, with absolutely no ethical implications. <a href="https://app.daily.dev/posts/rYkFwNLz3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL’s open-source status: Oracle’s ‘legal’ fiction</strong>: Apparently, Oracle is still legally calling MySQL ‘open source’ while simultaneously blocking community development and running all code changes privately. Critics claim it’s plagued by data corruption and performance regressions, with Oracle disclosing 123 CVEs in 2025 compared to MariaDB’s eight. So, if you’re looking for a ‘true open source’ database, you might want to check out MariaDB, because Oracle’s version seems to be more of a ‘trust us, it’s open’ situation. <a href="https://app.daily.dev/feed-by-ids?id=WleLTp3IY&amp;id=kQKpHAixM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
