<h2>Must know</h2>
<ul>
<li><strong>AI coding tools are a mixed bag for code quality</strong>: A Carnegie Mellon University study of 807 GitHub repositories found that while AI coding assistants initially boost productivity by 30-40%, this gain vanishes after three months. Worse, static analysis warnings jump 30% and code complexity increases over 40%, persisting long-term. This aligns with 2024 data from GitClear, suggesting that current AI models and tools haven’t fixed these quality issues. Meanwhile, Salesforce deployed Cursor to 20,000 engineers, reporting double-digit gains in cycle time, quality, and throughput, with 90% adoption in months. They also claim an 85% reduction in legacy code coverage time, but these are internal metrics without external verification. <a href="https://app.daily.dev/feed-by-ids?id=EZUXhYwRZ&amp;id=7KqSlBkW9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are changing software development, but not how you think</strong>: The rise of AI coding agents is shifting developer roles from writing code to overseeing AI, much like VCs manage portfolios. This demands strong architectural skills, critical thinking, and rigorous testing of AI-generated code. Junior developers face higher entry barriers as AI handles entry-level tasks, while experienced engineers must adapt to managing AI. However, a critical analysis of ‘Scalable Agency’ claims found that AI agents hit performance ceilings, showing no significant speed advantage for complex tasks like distributed system integration, and failing to produce qualitatively new designs. Human oversight remains crucial for goal definition and architectural decomposition, debunking the ‘agent-month’ as a human-month replacement. <a href="https://app.daily.dev/feed-by-ids?id=BJsnyHclD&amp;id=8RtsmjIRr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare patches WAF bypass, Ingram Micro hit by ransomware</strong>: Cloudflare fixed a vulnerability in its Web Application Firewall (WAF) that allowed attackers to bypass security rules and access origin servers directly. The flaw, reported via their bug bounty program, was due to improper validation of ACME challenge tokens. Separately, Ingram Micro disclosed a ransomware attack from July 2025, where the Safepay group exfiltrated 3.5 terabytes of data, compromising over 42,000 current and former employees’ personal records, including Social Security numbers. The attack paralyzed Ingram Micro’s logistics for a week. <a href="https://app.daily.dev/feed-by-ids?id=PoZiSIcPJ&amp;id=rDW8Xu1hd" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Amazon launches Bedrock AgentCore for AI agent deployment</strong>: Amazon introduced Bedrock AgentCore, a platform for deploying and operating AI agents at scale with zero infrastructure management, offering modular services for runtime, memory, gateway, code interpreter, browser, observability, evaluation, identity, and policy. <a href="https://app.daily.dev/posts/PbCI8QH1q" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LLVM and cURL crack down on AI-generated code and bug reports</strong>: The LLVM compiler project now requires thorough human review for all AI-assisted code contributions due to a surge in low-quality submissions, while cURL ended its bug bounty program entirely, citing an overwhelming influx of ‘AI slop’ and ‘AI-generated nonsense’ that consumed excessive security team resources. <a href="https://app.daily.dev/feed-by-ids?id=DXhDzQ15v&amp;id=zNsgAYHqy&amp;id=ssDvZHbZq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Ruby framework CMDx and Elixir’s Hologram get boosts</strong>: CMDx, a new Ruby framework, uses the CERO pattern for organizing business logic with typed attributes, built-in validation, and structured logging, while Curiosum became the main sponsor for Hologram, an Elixir framework that transpiles Elixir code to JavaScript for browser-side execution, aiming for zero-latency client-side interactions. <a href="https://app.daily.dev/feed-by-ids?id=LmcMOfqU8&amp;id=ePz5bRXJH&amp;id=jyQtn5H4O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered frontend development with Kombai and Shadcn Studio</strong>: Kombai is an AI tool for frontend UI development that generates wireframes, converts them to web pages, and allows real-time editing and testing across resolutions, while Shadcn Studio MCP is an AI-powered UI builder that integrates with IDEs to generate production-ready components for React, Next.js, Vite, and Laravel. <a href="https://app.daily.dev/feed-by-ids?id=wDU1G9R6I&amp;id=84wxnOe0I&amp;id=ncQILOQ9m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mesa 26.0-rc1 brings major GPU driver enhancements</strong>: Mesa 26.0-rc1 has been released, bringing significant improvements to AMD’s RADV, Intel’s ANV, and NVIDIA’s NVK Vulkan drivers, including new Vulkan API extensions and video encoding features for RADV, with the stable release expected in February 2026. <a href="https://app.daily.dev/posts/xa7zoapmT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0 drops legacy browser support, adds security</strong>: jQuery 4.0, released after nearly a decade, removes support for Internet Explorer 10 and Microsoft Edge Legacy, integrates Trusted Types and Content Security Policy, and migrates to ECMAScript modules, resulting in a 3KB size reduction. <a href="https://app.daily.dev/posts/uMYmsakGM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI releases family AI literacy resources</strong>: OpenAI launched two new AI literacy resources for families, including a guide for teens on how AI models work and responsible usage, and a parent-focused resource with conversation starters and guidance on setting boundaries. <a href="https://app.daily.dev/posts/bIMNsth54" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Palantir CEO says AI will fix immigration, industry says ‘meh’</strong>: Palantir CEO Alex Karp, at the World Economic Forum, boldly declared AI will eliminate the need for large-scale immigration in Western economies, except for specialized skills. This, despite Deutsche Bank, Gartner, and PwC all reporting that AI’s ‘honeymoon’ is over, with most CEOs seeing ‘zero payoffs’ from their AI investments. Karp, naturally, insists Palantir’s AI saves clients 80% and boosts revenue. Sure, Jan. <a href="https://app.daily.dev/posts/3s1vrBGbY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Netflix’s ‘strong uptake’ in casual gaming, while chasing $82.7B acquisition</strong>: Netflix co-CEO Greg Peters is touting ‘strong uptake’ and ‘strong engagement’ for casual games like Boggle and Pictionary, which have reached a whopping 10% of eligible subscribers. This ‘top strategic priority’ for 2026 comes as Netflix is reportedly trying to acquire Warner Bros. Discovery’s games division for $82.7 billion. Apparently, Boggle isn’t quite cutting it for their long-term strategy. <a href="https://app.daily.dev/posts/SBSWaa9fL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-powered geothermal exploration challenges government estimates, with no proof</strong>: Zanskar, an AI-driven geothermal startup, just raised $115 million and claims conventional geothermal could hit 1 terawatt, dwarfing the U.S. Department of Energy’s ‘conservative’ 60-gigawatt estimate for 2050. Their ‘novel’ supervised machine learning and Bayesian evidential learning have identified three sites with 100+ megawatts. Of course, these numbers are entirely from Zanskar, unverified by anyone else. But hey, it’s AI, so it must be true, right? <a href="https://app.daily.dev/posts/5U9R3y3j3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
