<h2>Must know</h2>
<ul>
<li><strong>Microsoft provided FBI with BitLocker recovery keys</strong>: Microsoft has, for the first time publicly, confirmed providing BitLocker recovery keys to the FBI to unlock laptops in a fraud investigation. While legally compelled, this raises significant privacy concerns, especially since BitLocker’s default setting uploads recovery keys to Microsoft’s cloud. Security experts, as reported by multiple sources, warn this makes user data vulnerable to breaches and potentially unsuitable for high-privacy organizations. <a href="https://app.daily.dev/posts/6Aq315WBk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source maintainers restrict contributions due to AI-generated code</strong>: Open-source projects like TL Draw, Curl, and Zig are closing or restricting external contributions because of a flood of low-quality, AI-generated pull requests. Maintainers report these submissions are difficult to review, introduce technical debt, and disrupt community dynamics, as detailed in the articles. This trend highlights a growing tension between the ease of AI coding tools and the need for deep understanding and quality in open-source development. <a href="https://app.daily.dev/posts/9Rmqfgu76" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>US AI regulation clash intensifies between federal and state governments</strong>: A major conflict is brewing in the US over AI regulation, with former President Trump’s executive order attempting to block states from enacting their own AI laws. California and New York are pushing ahead with stricter state-level legislation, setting the stage for legal battles over federal versus state authority, as reported by multiple sources. This gridlock in Congress and the mobilization of tech companies and advocacy groups through super PACs indicate a highly polarized and litigious future for AI governance. <a href="https://app.daily.dev/posts/43AvfF7SX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI coding agents expose cloud infrastructure weaknesses</strong>: Agentic AI systems, which autonomously plan and execute actions, are revealing critical weaknesses in cloud infrastructure, demanding fine-grained network policies, strict identity governance, and real-time cost monitoring to prevent outages and runaway expenses. <a href="https://app.daily.dev/posts/1w09x1vo7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS launches EC2 M4 Max Mac instances</strong>: AWS has released M4 Max Mac instances for EC2, utilizing Apple M4 Max chips to offer up to 25% better application build performance for Apple platform apps, available in US East and US West regions. <a href="https://app.daily.dev/posts/DEbhYteDE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot CLI integrates organizational context via Work IQ</strong>: GitHub Copilot CLI now uses Work IQ to access organizational data from documents, emails, and SharePoint, allowing AI agents to compare code against company specs and reconstruct undocumented architecture from meeting transcripts. <a href="https://app.daily.dev/posts/AnhMtsEYf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vulkan roadmap 2026 released with descriptor heap overhaul</strong>: The Khronos Group published the Vulkan Roadmap 2026, introducing the VK_EXT_descriptor_heap extension for direct memory access and higher descriptor limits, with SDK support expected in Q1 2026. <a href="https://app.daily.dev/posts/Ow0tbWANK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Multi-stage phishing campaigns target energy sector via trusted platforms</strong>: Microsoft reports a sophisticated multi-stage phishing campaign targeting energy sector organizations, leveraging SharePoint for initial delivery and adversary-in-the-middle techniques to steal credentials and session cookies. <a href="https://app.daily.dev/posts/5Y8GWG9K5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust 1.93 updates musl library and improves networking</strong>: Rust 1.93 upgraded its bundled musl library to 1.2.5, bringing significant DNS resolver improvements for static Linux binaries and enhancing reliability for networking operations, especially with large DNS records. <a href="https://app.daily.dev/posts/wF6DW7Hp4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Guix 1.5.0 released with RISC-V support and governance changes</strong>: GNU Guix 1.5.0 is out after a three-year cycle, featuring KDE Plasma 6.5, GNOME 46, rootless daemon security, 12,500+ new packages, and official support for RISC-V 64-bit platforms. <a href="https://app.daily.dev/posts/3NyywHGNR" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic CEO predicts AI will replace software engineers in 6-12 months</strong>: Anthropic CEO Dario Amodei, speaking at Davos, boldly declared that AI models could handle ‘most or all’ software engineering tasks within 6-12 months, relegating humans to mere editors. He admits his own engineers already use AI to write code. While he did mention ‘uncertainty’ in his timeline, it’s always reassuring when a CEO with a vested interest in AI hype makes such definitive, yet conveniently vague, predictions about the imminent obsolescence of an entire profession. <a href="https://app.daily.dev/posts/0fyNmKnQE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding’s biggest bottleneck is ‘context transfer’</strong>: Apparently, the main barrier for AI coding tools in 2026 isn’t security or code quality (those are ‘mature,’ naturally), but ‘context transfer’—the monumental task of getting engineers’ tacit knowledge into AI systems. So, after years of telling us AI would just ‘figure it out,’ now we’re building ‘infrastructure’ to spoon-feed it the obvious. It’s almost like the AI needs humans to do the thinking, but don’t worry, new tools for ‘intelligent pull request routing’ are here to save the day! <a href="https://app.daily.dev/posts/DczaKkmGw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel’s json-render: AI-driven UI generation, because manual UI is so last year</strong>: Vercel launched json-render, an ‘experimental’ open-source tool that lets AI generate UIs from natural language descriptions, bypassing ‘traditional manual UI development workflows.’ Vercel’s CEO suggests frontend developers should now focus on ‘agentic behavior definition and context engineering.’ So, instead of building UIs, we’re now teaching the AI how to build UIs, and then we’ll just ‘curate context.’ Sounds like a solid plan for job security, right? <a href="https://app.daily.dev/posts/5RKyfi3u8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
