<h2>Must know</h2>
<ul>
<li><strong>OpenAI introduces ads and a cheaper tier amid financial struggles</strong>: OpenAI is launching targeted ads for free and $8/month ChatGPT Go users in the US, a significant shift from their previous subscription-only model. This move comes as the company faces massive losses, reportedly over $11.5 billion in Q3 2025 alone, with some analysts projecting a risk of running out of money within 18 months. While OpenAI claims ads won’t influence AI responses or compromise user data, this policy reversal highlights the immense financial pressure to monetize their widely used platform, as reported by multiple business and tech outlets. <a href="https://app.daily.dev/feed-by-ids?id=DQh9IAXNl&amp;id=ep7p1hnQy&amp;id=ArnlILqap" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools face security and quality challenges</strong>: New studies and expert reviews highlight significant flaws in AI-generated code, particularly in business logic, architectural design, and security. Tenzai’s research found 69 vulnerabilities across 15 applications built by AI agents like Claude Code and Devin, with critical failures in API authorization. Senior developers also note AI’s inability to handle Android-specific lifecycle management or SwiftUI state optimization, leading to inefficient and hard-to-maintain code. This suggests that while AI can speed up code generation, it often introduces substantial technical debt and security risks if not rigorously reviewed by human experts, as detailed by Tenzai and various developer blogs. <a href="https://app.daily.dev/feed-by-ids?id=VwQJWH3Oi&amp;id=O3swuQWEt&amp;id=Oj1MubZPP&amp;id=QjH25jlip&amp;id=J24eplQdr&amp;id=5khP9Wt37" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Gemini and ServiceNow AI agents expose critical vulnerabilities</strong>: Google Gemini had a security flaw allowing attackers to extract private calendar data via prompt injection in calendar invites, a vulnerability Google has since patched. Separately, ServiceNow’s Now Assist AI Agents and Virtual Agent API contained a critical flaw (CVE-2025-12420) that let unauthenticated attackers impersonate any user with just an email, bypassing MFA and SSO. This vulnerability, dubbed ‘BodySnatcher’ by AppOmni researchers, highlights the emerging security risks unique to LLM-powered applications and the challenges of integrating AI into existing systems without robust security guardrails. <a href="https://app.daily.dev/feed-by-ids?id=dHjNBMkFO&amp;id=j6bBmLvCW&amp;id=wzAqd15ET&amp;id=kZzcz2YmW&amp;id=mZZUloj80" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic invests in Python security, launches desktop automation</strong>: Anthropic is investing $1.5 million in the Python Software Foundation to boost PyPI security, while also launching Claude Co-work for Mac, enabling non-technical users to automate desktop tasks via chat, though it faces an unpatched file exfiltration vulnerability. <a href="https://app.daily.dev/feed-by-ids?id=yCHi0TB7q&amp;id=3e5iSak1o&amp;id=s11rN52dz&amp;id=jaKSkIh92&amp;id=rAHVvRPEj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open-sources XAML Studio, updates Intune</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation for rapid UI prototyping and is enforcing mandatory updates for Intune Mobile Application Management, blocking outdated iOS and Android apps from launching after January 19, 2026. <a href="https://app.daily.dev/feed-by-ids?id=hUJrXK08w&amp;id=PNEoUht10" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS launches European Sovereign Cloud, patches CodeBuild flaw</strong>: AWS European Sovereign Cloud is now generally available in Germany, offering data residency and operational autonomy for EU customers, while AWS also patched a critical CodeBuild regex misconfiguration that exposed repositories to supply chain attacks. <a href="https://app.daily.dev/feed-by-ids?id=DTVSjPW7g&amp;id=q7gLeN4EH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js and Ruby release security and bugfix updates</strong>: Node.js released versions 20.20.0 LTS and 25.3.0 with multiple security fixes, including a critical DoS vulnerability, while Ruby released 4.0.1 with bugfixes and is inviting project ideas for Google Summer of Code. <a href="https://app.daily.dev/feed-by-ids?id=DwsoMgMKH&amp;id=WX4br4Zyw&amp;id=Yy5NFIIOM&amp;id=Zr0Dv9dwZ&amp;id=EyLXGRUe2&amp;id=hWOQas1o5&amp;id=hszS2iZuQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New AI-powered tools for developers and enterprises</strong>: Arcjet released a Python SDK for application-layer security, GitLab launched its Duo Agent Platform for AI-orchestrated software development, and Salesforce made its generative AI Slackbot generally available for Business+ and Enterprise+ customers. <a href="https://app.daily.dev/feed-by-ids?id=Kk7M89j0h&amp;id=R9WyVAVPv&amp;id=VpXLIsjSp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel and NVIDIA enhance AI capabilities for graphics and gaming</strong>: Intel updated LLM-Scaler to improve ComfyUI and SGLang support on Arc Graphics, while NVIDIA unveiled DLSS 4.5 with Dynamic Multi Frame Generation for 240+ FPS path-traced gaming and expanded GeForce NOW cloud gaming to Linux and Fire TV. <a href="https://app.daily.dev/feed-by-ids?id=XBX3pzO5M&amp;id=jXjzYY9vI&amp;id=5ceYZHV0v" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Chrome extension malware targets enterprises and developers</strong>: A new CrashFix campaign uses fake Chrome extensions to install ModelRAT, a Python-based RAT, on enterprise machines, while Evelyn Stealer targets developers via malicious VS Code extensions to exfiltrate credentials and crypto wallets. <a href="https://app.daily.dev/feed-by-ids?id=OQ63wKgDi&amp;id=IOUku4koZ&amp;id=3ImoRkfEG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI PCs: more NPU, less actual enterprise demand</strong>: Apparently, 54% of new enterprise laptops shipped with NPUs in Q4 2025, but businesses still prioritized price, battery life, and performance over AI features. Even with 25% of laptops boasting 40+ TOPS AI hardware, adoption was minimal because, shocker, high AI hardware costs and a lack of compelling AI business applications meant no one actually cared. It’s almost like marketing hype doesn’t magically create real-world utility, as multiple sources consistently point out. <a href="https://app.daily.dev/feed-by-ids?id=oGhIGqBWf&amp;id=gpNRcxBhE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding assistants: the ultimate productivity paradox</strong>: Turns out, those shiny new AI coding assistants are generating 46% more code but making developers 19% slower, doubling bugs, and increasing PR review time by 91%. It’s a classic case of optimizing for typing speed over actual system design, leading to more technical debt and developers merging code they don’t even understand. So much for the AI revolution making us all 10x engineers; seems like it’s just making us 10x busier cleaning up its mess, according to multiple studies. <a href="https://app.daily.dev/feed-by-ids?id=jSgoQLSoF&amp;id=5khP9Wt37&amp;id=H6Mp947gD&amp;id=3sM5oeueQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA CEO: ‘doomer narrative’ is bad for business (and my stock options)</strong>: NVIDIA CEO Jensen Huang is publicly trashing AI skeptics, calling their warnings a ‘doomer narrative’ that threatens innovation. This, of course, comes from the CEO of a company whose entire business model is built on the AI boom, and who conveniently ignores the actual risks like job displacement and misinformation. It’s almost as if he’s more concerned about his company’s bottom line than, you know, the potential societal impact of unchecked AI development. Who would’ve thought? <a href="https://app.daily.dev/feed-by-ids?id=1vSR1HgdF&amp;id=JJAsCgIZe" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
