<h2>Must know</h2>
<ul>
<li><strong>AI coding tools: productivity gains vs. quality and trust issues</strong>: While AI coding tools like GitHub Copilot can boost developer velocity by 55%, they also lead to 7.2% lower delivery stability and 322% more security vulnerabilities, according to recent research. Only one-third of developers trust AI output accuracy. Experienced open-source developers report negligible or negative productivity gains due to the time spent verifying AI output and maintaining quality standards. This highlights a critical need for human-in-the-loop approval and robust quality gates to manage the trade-offs between speed and code integrity. <a href="https://app.daily.dev/feed-by-ids?id=0fzwUL3Um&amp;id=15Mjf12HP&amp;id=2IKuR9DJZ&amp;id=3DI7vnha4&amp;id=3sM5oeueQ&amp;id=AJzG7x8FZ&amp;id=AS53pzdrZ&amp;id=ATZPMmQn8&amp;id=DdiXGTqPN&amp;id=EqMZfdLoq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Intune enforces mandatory app updates for security</strong>: Microsoft Intune will require administrators to update iOS and Android enterprise apps to the latest SDK versions by January 19, 2026. Apps failing to meet these requirements will be blocked from launching, impacting both Microsoft and third-party applications. This enforcement, which includes new security features like PIN and biometric authentication, has no opt-out and acts as an effective ‘kill switch’ for non-compliant apps, according to reports. Organizations risk immediate service interruptions if they don’t update. <a href="https://app.daily.dev/posts/PNEoUht10" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Major security flaws found in cloud and AI platforms</strong>: Several critical vulnerabilities have been discovered, including a Google Gemini flaw allowing private Calendar data extraction via prompt injection, and three CVSS 9.9+ rated vulnerabilities in n8n enabling authenticated remote code execution. Cloudflare also patched an ACME validation logic flaw that could bypass WAF processing. These incidents highlight systemic risks in privilege boundaries and the challenges of securing dynamic code execution and AI-driven logic in enterprise workflows, as reported by various security disclosures. <a href="https://app.daily.dev/feed-by-ids?id=2bAKVKxWo&amp;id=GCruF60Ei&amp;id=u8zXtOxA2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Intel updates LLM-Scaler-Omni for Arc Graphics</strong>: Intel released an update to its LLM-Scaler-Omni product, enhancing support for ComfyUI and SGLang on Intel Arc Graphics hardware, targeting multi-modal generative AI capabilities for image, voice, and video generation. <a href="https://app.daily.dev/posts/XBX3pzO5M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab releases Duo Agent Platform for AI orchestration</strong>: GitLab 18.8 introduces the Duo Agent Platform, enabling orchestration of multiple AI agents across the software development lifecycle, including a Planner Agent and a Security Analyst Agent for automated vulnerability triage. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation, making the lightweight prototyping tool for XAML UI development available on GitHub for community contributions, with version 2.0 featuring a UI redesign and deeper WinUI 3 integration. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AMD Zen processors vulnerable to StackWarp flaw</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen generations 1-5, allowing privileged attackers to execute arbitrary code inside SEV-SNP protected confidential VMs by exploiting an undocumented control bit. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong><a href="http://Pythagora.ai" target="_blank" rel="noopener nofollow">Pythagora.ai</a> generates full-stack apps from prompts</strong>: <a href="http://Pythagora.ai" target="_blank" rel="noopener nofollow">Pythagora.ai</a> is an AI coding tool that generates full-stack applications from textual prompts, creating specifications in seconds, front-end code in minutes, and back-end code in hours, with built-in deployment features. <a href="https://app.daily.dev/feed-by-ids?id=LklGkgpse&amp;id=LpF1NSIQw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0 released after 10 years</strong>: jQuery 4.0.0 has been released, marking its 20th anniversary with a major cleanup that removes deprecated features, drops support for Internet Explorer 10 and older, and aligns with ES modules and W3C event specifications. <a href="https://app.daily.dev/feed-by-ids?id=5SOCKxGlX&amp;id=dThF1vPz2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust gains official Cargo support from Socket</strong>: Socket announced General Availability of Rust and Cargo support, offering dependency analysis, SBOM generation, and supply chain visibility for Rust projects, addressing risks beyond memory safety like malicious code and typosquatting. <a href="https://app.daily.dev/feed-by-ids?id=O8W5FyqYs&amp;id=UzbpNQhI8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-powered website builders: because we needed more ways to generate generic sites</strong>: Apparently, the market is now flooded with ‘AI-powered website builders’ like Replit Agent, Lovable, and Bolt.new, all promising to create full-stack applications from thin air. Because, you know, the real problem with web development was the lack of tools to churn out more boilerplate. It’s almost as if these tools are designed to make everyone a ‘developer’ without actually understanding anything, ensuring a future filled with even more mediocre, AI-generated websites. <a href="https://app.daily.dev/posts/e3oUC0g8q" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-driven DevOps: because YAML was the real bottleneck</strong>: The idea that YAML is the ‘universal configuration language for modern DevOps’ and that AI is now needed to generate and refactor SQL queries in a terminal client is just peak absurdity. We’re told AI will streamline everything from Kubernetes to CI/CD, but let’s be real, the complexity isn’t in writing the YAML, it’s in designing robust, scalable systems. This just sounds like another layer of abstraction to hide the actual engineering challenges, while making us all dependent on AI for basic tasks. <a href="https://app.daily.dev/feed-by-ids?id=da02fw80D&amp;id=Hq0xAj8si" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI for customer onboarding: because humans were too efficient</strong>: Remote is apparently using LangChain and LangGraph to ‘automate onboarding for thousands of customers’ with an AI Code Execution Agent. They claim it reduces data migration times from days to hours and ‘bypasses hallucination risks.’ Because, clearly, the human touch and careful verification in compliance-critical operations were just slowing things down. I’m sure nothing will go wrong when an LLM decides how to transform your HR and payroll data. <a href="https://app.daily.dev/posts/LVS7zKWbX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
