<h2>Must know</h2>
<ul>
<li><strong>AMD Zen processors vulnerable to StackWarp attack</strong>: A new hardware vulnerability, CVE-2025-29943, dubbed StackWarp, affects AMD Zen 1 through 5 processors, including EPYC 7003, 8004, 9004, and 9005 series. This flaw allows privileged attackers to execute arbitrary code inside SEV-SNP protected confidential virtual machines by exploiting an undocumented control bit in the CPU’s stack engine. While AMD has issued microcode updates, additional patches are expected in April 2026, and disabling hyperthreading is advised for critical systems, as reported by technical vulnerability disclosures. <a href="https://app.daily.dev/posts/9DURDnZX3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitLab launches Duo Agent Platform for AI-driven DevSecOps</strong>: GitLab has released its Duo Agent Platform, enabling orchestration of multiple AI agents across the software development lifecycle. This platform includes a Planner Agent for project management and a Security Analyst Agent for automated vulnerability triage, which can dismiss irrelevant vulnerabilities using natural language. The platform also features a central AI Catalog for agent management and supports user-defined workflows, aiming to boost operational efficiency and security automation, according to GitLab’s official announcement. <a href="https://app.daily.dev/posts/R9WyVAVPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Intune mandates app updates for security</strong>: Microsoft Intune will require administrators to update iOS and Android enterprise apps to the latest SDK versions by January 19, 2026. Apps failing to meet these requirements will be blocked from launching, impacting both Microsoft and third-party applications. This enforcement, which includes new security features like PIN and biometric authentication, aims to enhance security but risks service interruptions for unprepared organizations, as stressed by multiple reports. <a href="https://app.daily.dev/posts/PNEoUht10" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Kubernetes rewriting big data processing at Pinterest</strong>: Pinterest has migrated its large-scale data processing from Hadoop to Moka, a Kubernetes-based platform on Amazon EKS using Apache Spark, addressing scalability, security, and cost while leveraging OpenTelemetry for metrics and Terraform for infrastructure-as-code. <a href="https://app.daily.dev/posts/YFV8rOL2r" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel to get SPDX SBOM generation tool</strong>: A proposed patch for the Linux kernel introduces an optional SPDX SBOM generation tool to create JSON documents detailing build outputs, source files, licensing, and the build process, enhancing supply chain transparency and vulnerability management. <a href="https://app.daily.dev/posts/bEhz0HuSD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust gains official Cargo support from Socket</strong>: Socket has announced General Availability for Rust and Cargo support, offering dependency analysis, SBOM generation, and supply chain visibility for Rust projects, addressing risks beyond memory safety like typosquatting and malicious build scripts. <a href="https://app.daily.dev/posts/O8W5FyqYs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Linux kernel feature to boost container performance</strong>: Linux 7.0 will introduce OPEN_TREE_NAMESPACE, a new flag for the open_tree() system call, significantly improving container launch performance by eliminating wasteful mount namespace copying and enhancing security. <a href="https://app.daily.dev/posts/BXw4sMehQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>High-cardinality metrics: Prometheus vs ClickHouse</strong>: Prometheus and ClickHouse handle high-cardinality metrics differently: Prometheus incurs costs at write time, while ClickHouse defers them to query time, with both systems having distinct failure modes and requiring careful design decisions for label management. <a href="https://app.daily.dev/posts/O0Heii5KY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java now running on VisionFive 2 Lite RISC-V board</strong>: The VisionFive 2 Lite, an affordable RISC-V development board, successfully runs OpenJDK 25.0.1 and basic Java applications on Ubuntu 24.04.3 LTS, offering a practical platform for exploring Java on open-standard RISC-V architecture. <a href="https://app.daily.dev/posts/HNAArH5zp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS launches European Sovereign Cloud</strong>: AWS has announced the general availability of its European Sovereign Cloud, designed to meet strict data sovereignty requirements for organizations needing regional data control, alongside new EC2 X8i instances with custom Intel Xeon 6 processors for memory-intensive workloads. <a href="https://app.daily.dev/posts/6F5cf2Iqb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation, placing the lightweight prototyping tool for XAML UI development on GitHub for community contributions, with version 2.0 featuring a UI redesign and deeper WinUI 3 integration. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding assistants: the new junior dev, but worse</strong>: Apparently, AI coding assistants like GitHub Copilot boost developer velocity by 55% but also increase security vulnerabilities by 322% and lower delivery stability. So, we’re trading speed for a mountain of technical debt and security nightmares. It’s almost like these tools are just really good at generating plausible-looking garbage that still needs a human to fix, making us all ‘context architects’ for our digital overlords. <a href="https://app.daily.dev/feed-by-ids?id=0fzwUL3Um&amp;id=15Mjf12HP&amp;id=2IKuR9DJZ&amp;id=3DI7vnha4&amp;id=3sM5oeueQ&amp;id=AJzG7x8FZ&amp;id=AS53pzdrZ&amp;id=ATZPMmQn8&amp;id=DdiXGTqPN&amp;id=EqMZfdLoq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered forms: because basic analytics are too hard</strong>: Tally Forms, lauded for its ‘clean design,’ is being criticized for lacking ‘advanced AI functionalities’ like AI-driven form generation and submission analysis. Because apparently, a form builder isn’t truly modern unless it can hallucinate your next marketing campaign. And who needs basic analytics when you can have AI-based insights that probably just tell you what you already know, but with more buzzwords? <a href="https://app.daily.dev/feed-by-ids?id=4DaA2hUcX&amp;id=FHPlhOODZ&amp;id=SUKdsn07p&amp;id=Tbetobia7&amp;id=g8aoW1UKG&amp;id=wPemCJixB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubisoft’s HR masterclass: constructive dismissal edition</strong>: Ubisoft is being sued by a former Assassin’s Creed lead for constructive dismissal, after allegedly demoting him and then claiming he left voluntarily. It’s a classic move: make someone’s job unbearable, then pretend they quit to avoid severance and keep that non-compete clause. Because nothing says ‘we value our talent’ like forcing them out and then trying to silence them. Good luck with that, Ubisoft. <a href="https://app.daily.dev/posts/LIV91KSqU" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
