<h2>Must know</h2>
<ul>
<li><strong>Snap Store domain hijacking for malware distribution</strong>: Scammers are exploiting the Canonical Snap Store by registering expired domains previously used by legitimate publishers, then using these hijacked accounts to distribute malicious updates to trusted snap applications. This new tactic, detailed in a cybersecurity report, specifically targets cryptocurrency wallet users, allowing attackers to steal recovery phrases. It significantly undermines trust in the Snap Store’s publisher reputation system and highlights critical vulnerabilities in account verification. <a href="https://app.daily.dev/posts/8RJLmL5a0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical RCE in n8n automation platform</strong>: A critical unauthenticated remote code execution vulnerability (CVE-2026-21858) has been discovered in the n8n automation platform, allowing attackers to gain full control over affected servers. The flaw, with a CVSS score of 10.0, enables file reading and arbitrary command execution by manipulating Content-Type headers in the Form Webhook node. Users are urged to upgrade to version 1.121.0 or later immediately to mitigate the risk. <a href="https://app.daily.dev/posts/4XP5JDLv1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI solves a previously unsolved math problem</strong>: GPT-5.2 Pro has reportedly solved Erdos problem #281, a mathematical challenge that had eluded human mathematicians. Terence Tao, a highly respected mathematician, called this “perhaps the most unambiguous instance” of AI solving an open problem, marking a significant milestone for AI in mathematical research. This achievement, reported on X, suggests a new era for AI’s capabilities in complex problem-solving. <a href="https://app.daily.dev/posts/pRkd3CPEF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Open source models: cathedral, megachurch, and bazaar</strong>: An analysis categorizes open source projects into three models: exclusive ‘cathedrals,’ large ‘megachurches’ like the Linux Foundation, and the vast majority of ‘bazaar’ projects maintained by individuals, highlighting the urgent need for sustainable funding for these critical but under-resourced bazaar projects. <a href="https://app.daily.dev/posts/rr8Vo8FaG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>China files for massive satellite constellation</strong>: China has filed ITU requests for two satellite constellations, CTC-1 and CTC-2, totaling 193,428 satellites—four times larger than SpaceX’s Starlink plans—raising national security concerns for the US FCC, despite China’s slow deployment history. <a href="https://app.daily.dev/posts/9Dqo8zul1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Iran disrupts Starlink internet with GPS jamming</strong>: Iran successfully used military-grade GPS jammers to disrupt Starlink internet services, cutting performance by up to 80% during a nationwide internet shutdown, raising concerns about Starlink’s reliability in conflict zones. <a href="https://app.daily.dev/posts/VVK9EFJ8w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Physical AI and AV industry shifts at CES 2026</strong>: CES 2026 highlighted Physical AI and autonomous vehicles, with Chinese companies dominating and Mobileye acquiring Mentee Robotics for $900 million, while U.S. automakers were notably absent and regulatory tensions persist. <a href="https://app.daily.dev/posts/MtQzzuuIN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New CLI tool for Figma and AI integration</strong>: dannote/figma-use is a new command-line tool offering full read/write access to Figma, optimized for AI agents and developers with over 100 commands and JSX syntax support, enabling programmatic design creation and modification. <a href="https://app.daily.dev/posts/DfAoRLrdU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>FluentAI: low-code platform for LLM workflows</strong>: fluentAI is an open-source, low-code/no-code platform built with ReactFlow and Supabase, allowing users to visually build custom workflows with large language models directly in their browser, inspired by Node-RED. <a href="https://app.daily.dev/posts/T2Zh09ohU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Hugging Face releases massive multilingual dataset</strong>: Hugging Face has released FineTranslations, a dataset with over 1 trillion tokens of parallel text across English and 500+ languages, created by translating non-English content from FineWeb2 using Gemma3 27B to improve machine translation for lower-resource languages. <a href="https://app.daily.dev/posts/ILBHxXjto" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated navigation: the invisible coupling strikes again</strong>: Apparently, some genius thought using boolean flags for AI-generated navigation was ‘elegant’ until it caused unpredictable back button behavior months later. Who knew that invisible coupling, a concept developers have been battling for decades, would still bite you when AI is involved? It’s almost like understanding fundamental software design patterns is still important, even if an LLM wrote the initial draft. <a href="https://app.daily.dev/posts/5NyDqJTPW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-assisted coding needs RFCs? Shocking!</strong>: govctl is a new CLI tool that ‘enforces RFC-driven development workflows for AI-assisted coding’ because, apparently, AI-generated code is so undisciplined it needs a babysitter. It’s designed for teams who want ‘structured, spec-first development rather than rapid prototyping.’ So, after all the hype about AI speeding everything up, we’re back to writing specs and enforcing phase gates. Progress, right? <a href="https://app.daily.dev/posts/oBJvqLGNT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The Python VS Code extension: still the most downloaded, somehow</strong>: In a world obsessed with AI and shiny new tools, the Python extension for VS Code is still the ‘most downloaded VS Code extension EVER’ with 200 million downloads. It’s almost as if developers still need basic IntelliSense, debugging, and formatting for a language that’s been around forever. Who needs groundbreaking innovation when you can just keep doing the fundamentals really well? <a href="https://app.daily.dev/posts/Kt6jX78eK" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
