<h2>Must know</h2>
<ul>
<li><strong>AI coding agents are getting scary good, and scary fast</strong>: AI coding agents like Claude Code are showing massive velocity gains, with one team building a web browser in Rust with over a million lines of code in about a week, as reported by Cursor. Another experiment saw LLMs generate 40 distinct exploits for a zero-day vulnerability, bypassing modern security protections, with GPT-5.2 solving the toughest scenario in 3 hours for $50 in compute, according to experimenters. Check Point Research also found the first AI-generated sophisticated malware suite, VoidLink, developed in under a week by a single person using AI agents, a task estimated to take 30 weeks for multiple human teams. This means the limiting factor for exploit generation is now LLM token throughput, not human expertise. <a href="https://app.daily.dev/feed-by-ids?id=EqMZfdLoq&amp;id=GPLZOgOgP&amp;id=J24eplQdr&amp;id=cSbwL1BS5&amp;id=WkT9zuzY1&amp;id=nLTC7GTyu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes is now the standard for enterprise AI, but culture is the new bottleneck</strong>: Kubernetes production usage has hit 82% among organizations, with 66% of AI adopters using it for inference, according to the 2025 CNCF Annual Cloud Native Survey. This establishes Kubernetes as the go-to infrastructure for modern enterprise and AI workloads. However, the survey also reveals that cultural resistance, not technical complexity, is now the primary barrier to adoption. Mature organizations are distinguishing themselves by embracing GitOps and platform engineering, suggesting that the tech is ready, but people need to catch up. <a href="https://app.daily.dev/posts/Lwsgn3lZ5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft mandates Intune security updates, or your apps get blocked</strong>: Microsoft is enforcing mandatory Intune Mobile Application Management security updates starting January 19, 2026. Enterprises must update their iOS and Android apps to the latest Intune SDK versions, or risk having them blocked from accessing corporate resources like Outlook and Teams. This update introduces new security controls such as PIN requirements and biometric authentication, and there’s no grace period, so non-compliant apps will be immediately cut off. Admins should monitor compliance status in the Intune admin center to avoid critical business disruptions. <a href="https://app.daily.dev/posts/PNEoUht10" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Taiwan and US ink AI and semiconductor supply chain deal</strong>: Taiwan and the US have finalized a strategic trade agreement focused on securing AI and semiconductor supply chains, with Taiwan committing $250 billion in investments and credit guarantees for US-based production, and Taiwanese chip makers like TSMC receiving lowered tariffs. <a href="https://app.daily.dev/posts/suaVSewS2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New EU decentralized vulnerability database launched</strong>: The EU has launched <a href="http://db.gcve.eu" target="_blank" rel="noopener nofollow">db.gcve.eu</a>, a public, decentralized cybersecurity vulnerability database aiming to reduce reliance on US systems like CVE, integrating data from over 25 sources and allowing autonomous vulnerability ID assignment. <a href="https://app.daily.dev/posts/i2uCJ3RGE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic’s Git MCP server had critical RCE vulnerabilities</strong>: Anthropic’s Git MCP server was found to have three critical vulnerabilities, including path validation bypass and argument injection, which could be chained via prompt injection to achieve remote code execution, though fixes were quietly issued by December 2025. <a href="https://app.daily.dev/posts/U6A8HrCeq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MetalBear streamlines cloud-native testing with mirrord for CI</strong>: MetalBear released mirrord for CI, a new tool that allows CI tests to run directly on shared Kubernetes clusters, proxying traffic and environment variables to simulate production conditions and save 20-30 minutes per CI run. <a href="https://app.daily.dev/posts/s2plqXXTq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>North Korean hackers target fintech developers via VS Code projects</strong>: North Korean threat actors are exploiting VS Code project configuration files to target fintech developers, tricking them into cloning malicious repositories that automatically deploy backdoors and malware upon opening, enabling remote code execution and cryptocurrency mining. <a href="https://app.daily.dev/feed-by-ids?id=1wKLyk8gG&amp;id=Q9M3WuQfH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Turbopack and Next.js 16 speed up builds</strong>: Next.js 16 stabilizes Turbopack as the default bundler, promising 2-5x faster production builds and 10x faster hot reloading by using fine-grained incremental computation and file system caching, while also introducing AI-assisted debugging via MCP integration in DevTools. <a href="https://app.daily.dev/feed-by-ids?id=91xiEmcVe&amp;id=GHFDClpAg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Python package manager ‘uv’ challenges pip</strong>: The new Python package manager ‘uv’ is gaining attention for its faster installs, reproducible environments, and improved uninstall mechanisms, offering a compelling alternative to the standard ‘pip’ for developers prioritizing workflow efficiency. <a href="https://app.daily.dev/posts/Y2d0smXfY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-powered ‘vibecoding’ startup Emergent raises $70M, execs told to get on board</strong>: Emergent, an Indian AI-powered ‘vibecoding’ startup, just bagged $70 million in Series B funding, valuing it at $300 million, claiming $50 million ARR and 5 million users. Apparently, this ‘vibecoding’ lets senior leaders build full-stack apps without those pesky engineers. An opinion piece even suggests every exec should be ‘vibecoding,’ because who needs actual coding skills when you have AI and a buzzword? <a href="https://app.daily.dev/feed-by-ids?id=AllrxKqHW&amp;id=McILqauKu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PwC says most CEOs see no ROI from AI, but don’t worry, ‘agentic AI’ is the next big thing</strong>: PwC’s survey of 4,454 CEOs found a whopping 56% saw no revenue increase or cost decrease from their AI investments, with only 12% seeing both. But fear not, because ‘agentic AI’ is here to save the day, promising 25% productivity gains and 45% processing time reduction in ERP, according to some unspecified studies. So, while current AI isn’t delivering, just wait for the next wave of hype to magically fix everything. <a href="https://app.daily.dev/feed-by-ids?id=Kov24DV15&amp;id=ogb2Wd6xs&amp;id=rEdiBiFbV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code causes memory leaks and TDD failures, but it’s fine, just ‘evolve’</strong>: Turns out, AI-generated SwiftUI code caused persistent memory leaks by strongly capturing <code>self</code> in nested closures, leading to unbounded memory growth. Also, a team’s test-driven development with SwiftUI view models resulted in UI freezes in production because their tests didn’t match real-world interactions. The solution? More human intervention, refactoring, and understanding that AI isn’t a magic bullet, despite the constant push to ‘evolve’ our coding practices with it. <a href="https://app.daily.dev/feed-by-ids?id=0Dxh8ahUn&amp;id=NOlmy6yd2&amp;id=yTmR3XbQ9" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
