<h2>Must know</h2>
<ul>
<li><strong>Microsoft Intune enforces critical mobile app updates</strong>: Microsoft is mandating updates to its Intune Mobile Application Management service by January 19, 2026. Unupdated iOS and Android apps, including Microsoft Outlook and Teams, will be blocked from launching. This move introduces enhanced security features like PIN enforcement and biometric authentication, but unprepared organizations face immediate outages. This is a critical deadline for all enterprise mobile users leveraging Intune management, as reported by multiple tech news outlets. <a href="https://app.daily.dev/posts/PNEoUht10" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js patches critical DoS vulnerability</strong>: Node.js released versions 20.20.0 LTS and 25.3.0, patching a critical denial-of-service (DoS) vulnerability (CVE-2025-59466) affecting versions 8.x through 24.x. This flaw, triggered when <code>async_hooks</code> or <code>AsyncLocalStorage</code> are enabled, causes servers to exit on stack overflow, bypassing error handling. Major frameworks like Next.js and React Server Components are impacted. Node.js and Datadog advisories urge immediate upgrades. <a href="https://app.daily.dev/feed-by-ids?id=EyLXGRUe2&amp;id=DwsoMgMKH&amp;id=WX4br4Zyw&amp;id=Yy5NFIIOM&amp;id=Zr0Dv9dwZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild regex misconfiguration exposed supply chain risk</strong>: Security researchers at Wiz discovered a critical vulnerability in AWS CodeBuild in August 2025, dubbed CodeBreach. Improperly anchored regex patterns in webhook filters allowed attackers to bypass security controls and potentially gain admin access to AWS GitHub repositories, including the AWS JavaScript SDK. This could have led to widespread supply chain attacks. AWS patched the issue within 48 hours, but the incident highlights persistent CI/CD pipeline risks, as detailed by Wiz research. <a href="https://app.daily.dev/posts/q7gLeN4EH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cloudflare acquires Astro web framework</strong>: Cloudflare has acquired The Astro Technology Company, makers of the Astro web framework, which will remain open source and platform-agnostic, with its team joining Cloudflare to focus on framework development. <a href="https://app.daily.dev/feed-by-ids?id=a23rECuU6&amp;id=6Yvvs8a9F&amp;id=yRAOJZmiR&amp;id=oWHYd6BqQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot introduces repository-specific agentic memory</strong>: GitHub Copilot now features an opt-in ‘memories’ system in Visual Studio, allowing AI agents to learn and share coding preferences and project guidelines within a repository, aiming to improve code consistency and accelerate onboarding. <a href="https://app.daily.dev/posts/nCmOnsQS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WebAssembly advances with Safari and .NET support</strong>: WebAssembly made significant strides in 2025 with Safari closing feature gaps, new proposals reaching standardization, Kotlin releasing a beta Wasm compiler, and .NET 10 shipping with performance improvements, with WASI 0.3 expected in February 2026. <a href="https://app.daily.dev/posts/jtf8mrjCJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Python 3.15.0 alpha releases with JIT upgrades</strong>: Python 3.15.0 alpha 4 and 5 have been released, introducing a new statistical sampling profiler (PEP 799), setting UTF-8 as the default encoding (PEP 686), and delivering JIT compiler upgrades that boost performance by 3-8% on x86-64 Linux and AArch64 macOS. <a href="https://app.daily.dev/feed-by-ids?id=LYvLDH678&amp;id=hWOQas1o5&amp;id=hszS2iZuQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dynatrace enhances AI-driven log observability</strong>: Dynatrace has upgraded its log observability platform with AI-powered contextual log analysis and unified data ingestion, adding features like Visual Resolution Path and deterministic AI logic to improve root cause analysis and build trust with operations teams. <a href="https://app.daily.dev/feed-by-ids?id=QAPDrhK7R&amp;id=TLCPfxePi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open sources XAML Studio for .NET UI prototyping</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation, providing a tool for rapid prototyping of XAML-based UIs with live rendering and enhanced integration with WinUI 3, aiming for broader community collaboration. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Boost adds AI prompts and Livewire v4 support</strong>: Laravel Boost v1.8.10 introduces AI-driven prompts for code simplification, modeled after the Claude plugin, and a new upgrade assistant prompt for Livewire v4, focusing on developer productivity and code quality. <a href="https://app.daily.dev/posts/TQr7IJii0" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding assistants: the emperor has no clothes</strong>: Turns out, those AI coding assistants that promise to make you a 10x engineer are actually making developers 19% slower and doubling the bug count, according to The Serious CTO. They’re great at generating ‘slop’ code, but completely miss architectural understanding, leading to more technical debt and PR review time. So much for replacing us, looks like we’ll just be cleaning up after the bots. <a href="https://app.daily.dev/feed-by-ids?id=5khP9Wt37&amp;id=bNykMIpel&amp;id=J24eplQdr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Small language models: the new old hype</strong>: Apparently, enterprises are now ‘favoring’ Small Language Models (SLMs) over LLMs because they’re cheaper and better for ‘closed, well-defined workflows.’ This is being framed as a ‘future-defining shift’ by some, conveniently forgetting that specialized models for specific tasks have always been a thing. It’s almost like the industry is rediscovering that a hammer is better for nails than a sledgehammer, but now with more buzzwords and ‘orders of magnitude’ cost savings claims. <a href="https://app.daily.dev/feed-by-ids?id=HX43N3MkE&amp;id=J1BKrq2u6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA CEO dismisses AI ‘doomer narrative’ (because money)</strong>: NVIDIA CEO Jensen Huang is publicly criticizing AI skeptics and those calling for regulation, labeling their concerns as a ‘doomer narrative.’ It’s truly baffling why someone whose company profits immensely from the AI boom would want to silence discussions about its potential risks. I’m sure his motivations are purely altruistic and have nothing to do with protecting NVIDIA’s market position or military contracts. <a href="https://app.daily.dev/feed-by-ids?id=1vSR1HgdF&amp;id=JJAsCgIZe" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
