<h2>Must know</h2>
<ul>
<li><strong>Microsoft gave the FBI BitLocker recovery keys</strong>: In a first publicly reported instance, Microsoft provided the FBI with BitLocker recovery keys to unlock laptops in a fraud investigation. This was done through legal warrant procedures, but security experts warn that BitLocker’s default cloud storage of keys creates significant privacy risks and vulnerabilities if Microsoft’s infrastructure is breached, according to articles like “Surrender as a service”. Users can opt out of cloud storage, but it’s not the default setting. <a href="https://app.daily.dev/posts/6Aq315WBk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical remote code execution in Trend Micro Apex Central</strong>: A critical remote code execution (RCE) vulnerability (CVSS 9.8) has been discovered in Trend Micro Apex Central, allowing attackers to load arbitrary DLLs with SYSTEM privileges via SMB shares. The flaw exploits an opcode that invokes the Windows API LoadLibraryExA with user-controlled paths, requiring no shellcode or EDR evasion. This makes exploitation easy, and separate null pointer dereference bugs (CVSS 7.5) can also cause denial-of-service, highlighting a significant risk for enterprise security management. <a href="https://app.daily.dev/posts/bkT31Gnrl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ShinyHunters claims major data leaks via Okta phishing</strong>: The cybercriminal group ShinyHunters claims responsibility for massive data breaches at Crunchbase, SoundCloud, and Betterment, affecting millions of records. They assert access was gained through voice-phishing attacks targeting Okta single-sign-on authentication codes, a tactic they’ve used before. While the claims are from ShinyHunters themselves and unconfirmed by the affected companies, this highlights the persistent threat of social engineering against critical authentication systems. <a href="https://app.daily.dev/posts/aag2JjJiI" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AWS launches M4 Max Mac instances</strong>: AWS has released M4 Max Mac instances for EC2, utilizing Apple M4 Max chips to offer up to 25% better application build performance for Apple platform apps, available in US East and West regions. <a href="https://app.daily.dev/posts/DEbhYteDE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel releases json-render for AI-driven UI generation</strong>: Vercel launched json-render, an open-source tool that allows AI to generate user interfaces from natural language descriptions, using predefined components to ensure brand consistency and shifting frontend development towards agentic behavior definition. <a href="https://app.daily.dev/posts/5RKyfi3u8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot CLI integrates organizational context</strong>: GitHub Copilot CLI now includes Work IQ, enabling AI agents to access organizational data from documents, emails, and SharePoint via a single MCP server, allowing them to compare code against company specs and reconstruct undocumented architecture. <a href="https://app.daily.dev/posts/AnhMtsEYf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Temporal API lands in Chrome 144</strong>: The Temporal API is now available in Chrome 144, replacing JavaScript’s problematic Date API to improve timezone handling and date calculations, though developers are cautioned about privacy concerns with browser APIs transmitting user data. <a href="https://app.daily.dev/posts/4f3BuYROb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust 1.93 updates musl and improves networking</strong>: Rust 1.93 has been released, upgrading the bundled musl library to 1.2.5, which significantly improves DNS resolver reliability for static Linux binaries, especially when handling large DNS records with recursive name servers. <a href="https://app.daily.dev/posts/wF6DW7Hp4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel x86 page fault bug patched</strong>: A five-year-old bug in the Linux kernel’s x86 page fault handling, which incorrectly managed interrupt disabling for both user and kernel faults, has been fixed in version 6.19 by unconditionally disabling interrupts before low-level fault handling. <a href="https://app.daily.dev/posts/AIQmoPFZN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go developer satisfaction remains high</strong>: The 2025 Go Developer Survey reports 91% satisfaction with the language, though developers still struggle with best practices and identifying trustworthy modules, while 53% use AI coding tools daily but only 13% are very satisfied. <a href="https://app.daily.dev/posts/yyZ0pKuL1" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic CEO predicts AI will replace software engineers in months</strong>: Anthropic CEO Dario Amodei, speaking at Davos, boldly declared that AI models could handle most software engineering tasks within 6-12 months, relegating humans to mere editors. While he admitted uncertainty, this kind of ‘sky is falling’ prediction from an interested party conveniently ignores the complexities of real-world software development and the inherent limitations of current AI, as if a few lines of code from an LLM magically solve architectural debt and human communication. <a href="https://app.daily.dev/posts/0fyNmKnQE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding agents disrupt developer workflows and education</strong>: Jeffrey Wei, an ed-tech platform owner, claims AI coding agents led to a 40% staff reduction and boosted his personal productivity to ‘all-time highs,’ transforming him into an ‘architect and reviewer.’ This narrative, while convenient for AI evangelists, conveniently sidesteps the broader implications of job displacement and the potential for AI-generated code to introduce new forms of technical debt and maintenance headaches, turning developers into glorified proofreaders for machines. <a href="https://app.daily.dev/posts/KfJ8s7nDm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-driven decline in software library use</strong>: Apparently, developers are now using AI to generate custom code instead of relying on established third-party libraries like Tkumi and fast-float, because AI-generated code is ‘simpler to maintain’ and ‘more tightly integrated.’ This magical thinking suggests we can just ditch decades of open-source collaboration and robust, battle-tested solutions for bespoke, AI-generated snippets, conveniently ignoring the potential for security vulnerabilities, poor quality, and the sheer hubris of reinventing every wheel with a chatbot. <a href="https://app.daily.dev/posts/kqbTJ9NPQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
