<h2>Must know</h2>
<ul>
<li><strong>Snap Store publisher accounts hijacked for malware distribution</strong>: Scammers are exploiting the Canonical Snap Store by registering expired domains previously used by legitimate publishers, then taking control of their accounts. This allows them to publish malicious updates to trusted snap applications, specifically targeting cryptocurrency wallet users for recovery phrase theft. This tactic, detailed in a cybersecurity report, undermines trust in Snap’s publisher reputation signals and highlights a significant security risk for users. <a href="https://app.daily.dev/posts/8RJLmL5a0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical RCE vulnerability found in n8n automation platform</strong>: A critical unauthenticated remote code execution (RCE) vulnerability (CVE-2026-21858, CVSS 10.0) has been discovered in the n8n automation platform. The flaw, residing in the Form Webhook node, allows attackers to manipulate Content-Type headers to read arbitrary files, extract sensitive data like database and encryption keys, and ultimately forge admin session cookies to execute arbitrary commands. This affects an estimated 100,000 servers globally, urging immediate upgrades to version 1.121.0 or later. <a href="https://app.daily.dev/posts/4XP5JDLv1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI solves previously unsolved mathematical problem</strong>: GPT-5.2 Pro has reportedly solved Erdos problem #281, a mathematical problem that human mathematicians had not previously cracked. Terence Tao, a highly respected mathematician, called this “perhaps the most unambiguous instance” of AI solving an open problem, marking a significant milestone for AI in mathematical research. The solution was reported on January 18, 2026, and is presented as a factual achievement without sensationalism. <a href="https://app.daily.dev/posts/pRkd3CPEF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>China files for massive 193,428-satellite constellation</strong>: China has filed ITU requests for two satellite constellations, CTC-1 and CTC-2, totaling 193,428 satellites, which is roughly four times larger than SpaceX’s Starlink plans, raising national security concerns for the US FCC. <a href="https://app.daily.dev/posts/9Dqo8zul1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Iran disrupts Starlink internet with military-grade GPS jamming</strong>: Iran used military-grade GPS jammers to disrupt Starlink satellite internet, cutting performance by up to 80% during a nationwide internet shutdown, raising concerns about Starlink’s reliability in conflict zones. <a href="https://app.daily.dev/posts/VVK9EFJ8w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Physical AI and AV industry shifts at CES 2026</strong>: CES 2026 highlighted Physical AI and autonomous vehicles, with Mobileye acquiring Mentee Robotics for $900 million, Motional shifting to an “AI-first” AV development, and New York lawmakers proposing robotaxi legislation outside NYC. <a href="https://app.daily.dev/posts/MtQzzuuIN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New CLI tool integrates AI and developers with Figma</strong>: dannote/figma-use is a new command-line tool providing full read/write access to Figma, optimized for AI agents and developers, supporting over 100 commands and JSX syntax for programmatic design creation. <a href="https://app.daily.dev/posts/DfAoRLrdU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL incident highlights security misconfiguration</strong>: A PostgreSQL database at Nixopus repeatedly crashed due to ‘trust’ authentication exposing port 5432 to the internet, allowing unauthorized connections that exhausted max_connections, revealing a security misconfiguration masquerading as a stability bug. <a href="https://app.daily.dev/feed-by-ids?id=m4he1CZCb&amp;id=J8z1YJf46" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust’s culture of semantic precision</strong>: Rust’s ecosystem prioritizes precise semantic guarantees in API design, leading to more robust software, as exemplified by efforts to disentangle inconsistent guarantees in C’s READ_ONCE/WRITE_ONCE macros for Linux kernel integration. <a href="https://app.daily.dev/posts/xl3PLfHis" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Curl drops OpenSSL-QUIC backend due to performance issues</strong>: The curl project is removing support for the OpenSSL-QUIC backend in version 8.19.0 due to its inadequate API, extremely poor performance (up to 3x slower), and excessive memory usage (up to 20x more) compared to alternatives. <a href="https://app.daily.dev/posts/As2f3e0AW" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding assistants: great for productivity, terrible for your wallet</strong>: Apparently, AI coding assistants are all the rage, but nobody’s talking about the hidden costs. While they might churn out code, they’re not exactly optimizing for your cloud bill. Third-party services like OpenAI can get prohibitively expensive at scale, and these AI tools aren’t built to consider pricing models or efficient API usage. So, enjoy that ‘productivity boost’ while your finance department weeps, as highlighted by ‘Scalability Isn’t Just About Traffic: The Hidden Cost Dimension Most Developers Ignore.’ <a href="https://app.daily.dev/posts/yaSSI8AJO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open source models: cathedral, megachurch, or just a bunch of unpaid labor?</strong>: We’re now categorizing open source into ‘cathedral,’ ‘megachurch,’ and ‘bazaar’ models, with the ‘bazaar’ being the vast majority of projects maintained by individuals. The article points out that these critical infrastructure components are severely underfunded, while ‘megachurches’ like the Linux Foundation rake in corporate cash. So, while we all benefit from these ‘bazaar’ projects, the solution seems to be… more funding models? Groundbreaking. It’s almost like we’re just rediscovering that unpaid labor isn’t sustainable, as detailed in ‘Open Source Ecosystem: Cathedral, Megachurch, and Bazaar Models.’ <a href="https://app.daily.dev/posts/rr8Vo8FaG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-driven security: because more CVEs and faster exploits are exactly what we needed</strong>: Security in 2026 is going to look ‘very different,’ apparently, with a record 48,000 CVEs in 2025 and attackers exploiting vulnerabilities within 24 hours, thanks to AI. The solution? Memory-safe languages like Rust (which, let’s be honest, we should have been using anyway) and ‘AI-driven monitoring systems.’ So, we’re fighting AI-accelerated attacks with… more AI. It’s a self-licking ice cream cone of cybersecurity, ensuring job security for everyone involved, especially those selling the ‘AI-driven’ solutions, as per ‘Security in 2026 Is Going to Look Very Different.’ <a href="https://app.daily.dev/posts/Tk2pS5qPG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
