<h2>Must know</h2>
<ul>
<li><strong>AMD Zen CPUs vulnerable to StackWarp attack</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen 1-5 CPUs, allowing privileged attackers to bypass SEV-SNP confidential VM protections. By manipulating an undocumented control bit, attackers can corrupt the stack pointer and hijack control flow, even without reading encrypted VM memory. AMD has released microcode updates, with more firmware patches expected in April 2026, and advises disabling hyperthreading on critical systems as a mitigation. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious Chrome extensions steal enterprise session tokens</strong>: Five Chrome extensions, disguised as productivity tools, were found stealing authentication session tokens from enterprise HR and ERP platforms like Workday and NetSuite. These extensions exfiltrated cookies, bypassing credentials and MFA, allowing attackers full access to compromised accounts. Socket.dev reported the issue to Google, but not before thousands of users were affected. This highlights a significant threat to enterprise security, as reported by Socket.dev. <a href="https://app.daily.dev/posts/3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA allegedly sought pirated books for AI training</strong>: An amended lawsuit claims NVIDIA executives contacted Anna’s Archive, a known pirate library, to access millions of copyrighted books for AI model training. The lawsuit alleges NVIDIA was warned about the illegal nature of the content but proceeded, also using other piracy sources like Books3 and Sci-Hub. This raises serious questions about intellectual property and the ethics of AI training data acquisition, as reported by TorrentFreak. <a href="https://app.daily.dev/posts/2IcgLruSE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitLab 18.8 launches AI-orchestrated DevOps platform</strong>: GitLab 18.8 introduces the Duo Agent Platform, enabling AI agents to orchestrate software development lifecycle tasks, including a Planner Agent for work items and a Security Analyst Agent for vulnerability triage. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio under .NET Foundation</strong>: Microsoft has open-sourced XAML Studio, a lightweight prototyping tool for WinUI and UWP, under the .NET Foundation, aiming for community contributions and a redesigned UI in version 2.0. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Windows 11 23H2 emergency patch for shutdown and RDP bugs</strong>: Microsoft released an emergency update (KB5077797) for Windows 11 23H2 to fix critical bugs preventing proper shutdown/restart and causing persistent Remote Desktop credential prompts. <a href="https://app.daily.dev/posts/u2UYa6XNM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.0 stable release brings major technical upgrades</strong>: Wine 11.0 stable is out with over 6,300 changes, including NTSYNC kernel module support, a completed WoW64 architecture, and EGL as the default OpenGL backend. <a href="https://app.daily.dev/posts/5LDn1X8et" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust-analyzer 0.3.2761 improves stability and accuracy</strong>: Rust-analyzer version 0.3.2761 fixes 13 issues, enhancing flycheck triggers, cast checks, and symbol indexing for macro-generated imports. <a href="https://app.daily.dev/posts/kEIknGK9T" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0.0 released with modernization focus</strong>: jQuery 4.0.0, marking its 20th anniversary, focuses on removing deprecated features, dropping IE10 support, and rewriting the codebase as ES modules, reducing library size. <a href="https://app.daily.dev/posts/5SOCKxGlX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 6.19-rc6 released with bug fixes</strong>: Linux 6.19-rc6 is out with fixes for USB issues on Apple M1/M2 Macs and sound workarounds for ASUS ROG Ally X, with a stable 6.19 release expected in February. <a href="https://app.daily.dev/posts/h2CMY5teT" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agents: the new psychosis or just bad engineering?</strong>: Changelog News is apparently worried about ‘AI agent psychosis,’ a fancy term for when AI agents act erratic in production. Meanwhile, <a href="http://Monday.com" target="_blank" rel="noopener nofollow">Monday.com</a> engineers are just quietly fixing LLM hallucinations with server-side pre-computation and human-in-the-loop approvals. Maybe it’s not psychosis, but just good old-fashioned engineering problems that need solving, not sensationalizing. <a href="https://app.daily.dev/feed-by-ids?id=AJzG7x8FZ&amp;id=AS53pzdrZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: the productivity panacea that needs human babysitting</strong>: AI coding tools are supposedly reshaping development, with some developers seeing ‘measurable productivity advantages.’ Yet, hands-on experiments show they generate ‘lower-quality code for nuanced or complex tasks,’ requiring ‘substantial human correction.’ So, we’re trading one type of work for another, and now developers need ‘managerial’ skills to babysit their AI assistants. Progress, right? <a href="https://app.daily.dev/feed-by-ids?id=3DI7vnha4&amp;id=ATZPMmQn8&amp;id=DdiXGTqPN&amp;id=L2hSWhbgY&amp;id=LJqUceZbE&amp;id=Y8gY63ibF&amp;id=aGFVTrinz&amp;id=aKVj0i6Bm&amp;id=j91dGf3TP&amp;id=tJZLXej6S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sequoia Capital: because conflicting interests are so last decade</strong>: Sequoia Capital is investing in Anthropic’s $25 billion round, despite already holding stakes in OpenAI and xAI—Anthropic’s direct competitors. Apparently, the old VC norm of avoiding portfolio conflicts is out the window. OpenAI’s Sam Altman even warned investors would lose access to confidential info if they funded rivals. But hey, when there’s enough AI hype, who needs norms or non-competes? <a href="https://app.daily.dev/posts/yuiHTajaU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
