<h2>Must know</h2>
<ul>
<li><strong>AI agents are changing software development and operations</strong>: AI agents are rapidly transforming software development, shifting the focus from writing code to managing and orchestrating AI-generated outputs. Tools like Cursor’s Bugbot are automating code reviews, while new multi-agent platforms enable full-stack application generation and autonomous code refactoring. This shift, however, introduces new challenges in code review, quality assurance, and the need for robust infrastructure to handle parallel AI-generated pull requests, as highlighted by multiple industry reports and developer experiences. The Model Context Protocol (MCP) is emerging as a key standard for AI agents to interact with services, but its adoption also brings security concerns around tool access and API key sprawl, as noted by The Hacker News. <a href="https://app.daily.dev/feed-by-ids?id=6k9ppA468&amp;id=BIveqqqj1&amp;id=p3khbP8jU&amp;id=1lxfdifYi&amp;id=hOkZZEdlQ&amp;id=Mn0fWeNUD&amp;id=5HyjOECow&amp;id=AM0JrslAM&amp;id=vDNLW1Xlk&amp;id=CrTkLDrZx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Intune enforces critical mobile app updates</strong>: Microsoft is mandating updates to its Intune Mobile Application Management service, effective January 19, 2026. Unupdated iOS-wrapped apps, iOS SDK-integrated apps, and the Intune Company Portal for Android will be blocked from launching. This enforcement, which includes Microsoft’s own Outlook and Teams, aims to enhance security with features like PIN enforcement and biometric authentication. Organizations failing to comply face immediate outages, impacting corporate productivity and communication tools, as reported by BleepingComputer. <a href="https://app.daily.dev/posts/PNEoUht10" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mandiant publishes NTLMv1 rainbow tables to force deprecation</strong>: Mandiant, a Google-owned cybersecurity firm, has released comprehensive rainbow tables for Net-NTLMv1 authentication credential cracking. This move, intended to force organizations to abandon the 20-year-old insecure protocol, allows NTLMv1 credential recovery in under 12 hours using consumer-grade hardware. Despite Microsoft removing NTLMv1 support from Windows Server 2025 and Windows 11, many legacy systems remain vulnerable, posing a significant risk for Active Directory environments, according to Krebs on Security. <a href="https://app.daily.dev/posts/2q2phjvWS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Google Gemini calendar prompt injection exposed private data</strong>: A security vulnerability in Google Gemini allowed attackers to extract private calendar data by embedding malicious natural language prompts in Google Calendar invitations, which Gemini processed, bypassing privacy controls. <a href="https://app.daily.dev/posts/dHjNBMkFO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic invests $1.5 million in Python Software Foundation for security</strong>: Anthropic is investing $1.5 million over two years in the Python Software Foundation (PSF) to enhance PyPI ecosystem security through proactive malware detection and the development of a malware dataset for detection tool training. <a href="https://app.daily.dev/posts/yCHi0TB7q" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild regex misconfiguration exposed repositories to supply chain attacks</strong>: A critical vulnerability named CodeBreach in AWS CodeBuild, caused by improperly anchored regex patterns, allowed attackers to bypass security controls and potentially gain admin-level access to repositories like the AWS JavaScript SDK, posing a supply chain risk. <a href="https://app.daily.dev/posts/q7gLeN4EH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open sources XAML Studio for .NET UI prototyping</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation, providing a tool for rapid prototyping and fast feedback loops for XAML-based UI development, with features like a Monaco-based code editor and live XAML rendering. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js releases address multiple CVEs with security fixes</strong>: Node.js released versions 20.20.0 LTS and 25.3.0, addressing multiple CVEs with security fixes including disabling futimes with the permission model, adding a default error handler for TLSSocket, and requiring full read/write permissions for symlink APIs. <a href="https://app.daily.dev/posts/DwsoMgMKH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Crystal 1.19.0 released with multithreading roadmap</strong>: Crystal 1.19.0 introduces execution contexts as a preview feature, aiming for default multi-threading in Crystal 1.20, alongside new synchronization primitives and ARM664 Linux binary support. <a href="https://app.daily.dev/posts/QEQMgHoGA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Python 3.15.0 alpha 4 and alpha 5 releases</strong>: Python 3.15.0 alpha 4 and alpha 5 have been released, introducing PEP 799 (a new statistical sampling profiler), PEP 686 (UTF-8 as default encoding), and significant JIT compiler upgrades for performance improvements. <a href="https://app.daily.dev/posts/LYvLDH678" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding assistants are making developers slower (the data is brutal)</strong>: Apparently, AI coding assistants are generating 46% more code but making developers 19% slower, with 1.7x more bugs and 91% longer PR review times. So, all that hype about boosting productivity? Turns out, it’s just creating more technical debt and code that nobody understands, as reported by The Serious CTO. Who knew that blindly trusting a machine to write your code might lead to problems? <a href="https://app.daily.dev/posts/5khP9Wt37" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Enterprise PC purchases in 2025 shaped by traditional priorities, not AI features</strong>: Despite 54% of new laptops having NPUs, enterprise buyers in Q4 2025 prioritized price, battery life, and performance over AI-specific hardware. It seems businesses aren’t falling for the ‘AI PC’ hype, with minimal adoption of next-gen AI hardware due to high costs and a lack of compelling applications. So much for the AI revolution in your spreadsheet, eh? <a href="https://app.daily.dev/posts/oGhIGqBWf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI introduces targeted ads in ChatGPT free and Go tiers amid financial pressures</strong>: OpenAI, after losing over $11.5 billion in Q3 2025, is now rolling out targeted ads in ChatGPT’s free and Go tiers. CEO Sam Altman once called ads a ‘last resort,’ but apparently, $45 billion in projected cash burn by 2028 changes priorities. They promise ads won’t influence AI responses or appear on sensitive topics, but let’s be real, when money talks, principles often take a backseat. <a href="https://app.daily.dev/posts/DQh9IAXNl" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
