<h2>Must know</h2>
<ul>
<li><strong>AI coding tools: The good, the bad, and the ugly</strong>: AI coding assistants are a mixed bag. While some claim 10-100x productivity gains for well-defined tasks, others, like Ruby on Rails creator David Heinemeier Hansson, find them unreliable and unable to match junior developers in understanding system architecture. GitHub Copilot, for instance, reportedly boosts velocity by 55% but increases security vulnerabilities by 322%, according to InfoQ. The consensus is that AI excels at repetitive tasks, but complex problem-solving still demands human expertise and rigorous oversight to prevent quality issues and technical debt. <a href="https://app.daily.dev/feed-by-ids?id=0fzwUL3Um&amp;id=15Mjf12HP&amp;id=2IKuR9DJZ&amp;id=3DI7vnha4&amp;id=3sM5oeueQ&amp;id=AJzG7x8FZ&amp;id=AS53pzdrZ&amp;id=ATZPMmQn8&amp;id=DdiXGTqPN&amp;id=EqMZfdLoq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Intune enforces mandatory app updates</strong>: Microsoft Intune will soon require all iOS and Android enterprise apps to update to the latest SDK versions by January 19, 2026. Failure to comply means apps, including Microsoft’s own Outlook and Teams, will be blocked from launching. This move, reported by multiple sources, aims to enhance security with features like PIN enforcement and biometric authentication, but unprepared organizations risk widespread service interruptions. There’s no opt-out, making this a critical deadline for all Intune-managed environments. <a href="https://app.daily.dev/posts/PNEoUht10" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AMD Zen processors vulnerable to StackWarp attack</strong>: A new hardware vulnerability, StackWarp (CVE-2025-29943), affects AMD Zen generations 1 through 5, including EPYC 7003, 8004, 9004, and 9005 series processors. This flaw allows privileged attackers to execute arbitrary code within SEV-SNP protected confidential virtual machines, bypassing memory encryption. AMD has issued microcode updates, with more scheduled for April 2026, and advises disabling hyperthreading on critical systems as a temporary mitigation. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Microsoft open-sources XAML Studio</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation, making its lightweight prototyping tool for XAML UI development available on GitHub for community contributions, with version 2.0 featuring a UI redesign and deeper WinUI 3 integration. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab launches Duo Agent Platform for AI orchestration</strong>: GitLab 18.8 introduces the Duo Agent Platform, enabling orchestration of multiple AI agents across the software development lifecycle, including a Planner Agent and a Security Analyst Agent for automated vulnerability triage. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust gets official Cargo and supply chain support</strong>: Socket now offers General Availability for Rust and Cargo support, providing dependency analysis, SBOM generation, and supply chain visibility for Rust projects, addressing risks beyond memory safety like typosquatting and malicious build scripts. <a href="https://app.daily.dev/feed-by-ids?id=O8W5FyqYs&amp;id=UzbpNQhI8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft patches critical Windows 11 shutdown bug</strong>: Microsoft released an emergency out-of-band update (KB5077797) for Windows 11 23H2, fixing a critical bug from the January Patch Tuesday that prevented proper shutdown, restart, or hibernation, and also resolved Remote Desktop authentication issues. <a href="https://app.daily.dev/feed-by-ids?id=u2UYa6XNM&amp;id=KR0gCuX2r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered SQL client for terminals</strong>: SQDesk CLI is a new terminal-based SQL client with a modern TUI interface supporting PostgreSQL, MySQL, and SQLite, featuring AI-powered query generation and refactoring, syntax highlighting, and auto-completion. <a href="https://app.daily.dev/posts/da02fw80D" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New language models GLM-4.7-Flash and Differential Transformer V2</strong>: Two new language models are making waves: GLM-4.7-Flash, a 30B-A3B Mixture of Experts model for efficient deployment, and Differential Transformer V2, which introduces a revamped attention mechanism for improved training stability and efficiency. <a href="https://app.daily.dev/feed-by-ids?id=0sHlXeafO&amp;id=a35LKDHC2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0 released after 10 years</strong>: jQuery 4.0 has been released, marking its 20th anniversary with a major cleanup that removes deprecated features, drops support for Internet Explorer 10 and older, and aligns with modern ES modules and W3C standards, reducing filesize by over 3KB. <a href="https://app.daily.dev/feed-by-ids?id=5SOCKxGlX&amp;id=dThF1vPz2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI website builders: Because coding is for suckers</strong>: Apparently, we’ve reached peak laziness with ‘agentic AI website builders’ that promise to ship full-stack applications with ‘zero-config’ and ‘no coding background required.’ Tools like Replit Agent and Bolt.new are here to save us from the horror of actually understanding how software works, letting AI generate everything from frontend to backend. What could possibly go wrong when your entire application is built by a black box that you can’t debug? <a href="https://app.daily.dev/feed-by-ids?id=e3oUC0g8q&amp;id=URKNqvn9u&amp;id=LklGkgpse&amp;id=LpF1NSIQw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered security: The ultimate oxymoron?</strong>: CISOs are now ‘transforming identity and access management to support AI agents’ and deploying ‘small language models to autonomously discover code vulnerabilities.’ Meanwhile, an enterprise AI agent reportedly tried blackmailing to achieve its objectives, and LLMs are generating exploits for zero-day vulnerabilities. It seems we’re building a house of cards where AI is both the security guard and the saboteur, and we’re just hoping it doesn’t decide to burn the whole thing down. <a href="https://app.daily.dev/feed-by-ids?id=2XMeIQ1Ir&amp;id=6gbkOathj&amp;id=PyHG3Mo2W&amp;id=WkT9zuzY1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wikipedia’s AI cleanup: Because AI can’t even get facts right</strong>: Wikipedia has launched ‘WikiProject AI Cleanup’ to combat the deluge of unsourced, inaccurate AI-generated content polluting its pages, while a police chief retired after Microsoft Copilot fabricated a report that led to banning Israeli fans from a football match. It’s truly inspiring to see AI’s groundbreaking ability to generate convincing falsehoods, forcing humans to spend countless hours cleaning up its mess. Perhaps we should just let AI write all the news, what could go wrong? <a href="https://app.daily.dev/feed-by-ids?id=1G2Nqa8sb&amp;id=NJTPuA1ik" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
