Must know

AI models are getting smarter, but also riskier: New AI models like Numina-Lean-Agent are solving complex math problems, while Opus 4.5 and GPT-5.2 can autonomously generate zero-day exploits, escalating cyber threats. This ‘industrialization’ of cyber espionage, as noted by Import AI, means AI could be the most transformative tech ever, but also poses existential risks. Meanwhile, the EU is investigating X’s Grok AI for generating sexually explicit images, including those of children, highlighting the urgent need for robust risk assessments and mitigation measures, according to the European Commission. Read more
OpenAI and competitors want a piece of the drug discovery pie: OpenAI is looking to license drugs discovered using its AI models, shifting from traditional software licensing to claiming intellectual property on biological inventions. Anthropic, Google DeepMind, and Isomorphic Labs are pursuing similar strategies, seeking data licensing and partnerships with biotech firms, as reported by Matt Wolfe. This move positions AI companies as active stakeholders in the future profits of drugs they help create, raising new legal and ethical questions about ownership and value distribution. Read more
Microsoft launches new AI inference chip and developer tools: Microsoft unveiled the Maia 200 chip for AI inference, claiming it outperforms Amazon’s Trainium3 and Google’s TPU in FP4 and FP8 performance, respectively. This chip is already powering Microsoft’s Copilot chatbot, and its SDK is open to developers. Additionally, Microsoft released ‘winapp,’ a command-line tool to simplify Windows app development and ease access to modern Windows APIs, including AI integration, though developer community reactions are skeptical about its ability to solve core complexity issues. Read more

Good to know

Nvidia open-sources Earth-2 AI weather models: Nvidia has open-sourced three Earth-2 AI weather forecasting models, including a 15-day global forecast model that reportedly outperforms Google DeepMind’s GenCast, aiming to democratize advanced weather prediction. Read more
Docker sandboxes for AI coding agents now on macOS: Docker Sandboxes now offers microVM-based isolation for autonomous AI coding agents like Claude Code and Gemini CLI on macOS, allowing them to operate securely with full system access within their dedicated environments. Read more
ChatGPT code execution environment gets major upgrades: OpenAI’s ChatGPT code execution environment now supports Bash commands, multiple new programming languages (JavaScript, Ruby, Go, Java, Swift, C, C++), and package installations via pip and npm, significantly expanding its utility for developers. Read more
Google launches FunctionGemma for mobile AI actions: Google released FunctionGemma, a lightweight 270M parameter AI model designed for on-device function calling, translating natural language into structured API calls for mobile and edge devices. Read more
AWS launches EC2 G7e instances with Blackwell GPUs: AWS announced new Amazon EC2 G7e instances featuring NVIDIA Blackwell GPUs, delivering 2.3x better inference performance and supporting AI/ML models up to 70 billion parameters. Read more
KDE Plasma desktop now runs on Apple M3 via Fedora Asahi Remix: The KDE Plasma desktop environment now functions on Apple M3 chips, achieved through the Fedora Asahi Remix, marking a significant milestone for Linux compatibility on Apple Silicon. Read more
Mozilla launches paid program for AI and web innovation: Mozilla has launched Mozilla Pioneers, a paid program for experienced technologists and designers to develop foundational ideas for AI and web-related technologies, offering flexible, part-time engagement. Read more
Node.js 25.5.0 introduces SEA and security enhancements: Node.js 25.5.0 now supports Single Executable Application (SEA) generation with a new --build-sea flag, updates root certificates to NSS 3.119, and activates SQLite defensive mode by default for enhanced security. Read more
Vulnerabilities persist in npm and yarn package managers: Six zero-day vulnerabilities, dubbed PackageGate, exist in npm and yarn, allowing attackers to bypass defenses against worm attacks, while pnpm, vlt, and Bun have already issued patches. Read more
React Server Components hit by DoS vulnerabilities: Multiple denial-of-service vulnerabilities (CVE-2026-23864) have been identified in React Server Components, affecting React versions 19.0.x through 19.2.x and Next.js versions 13.x to 16.x, with security fixes released. Read more
React2Shell vulnerability enables server-side attacks: The React2Shell vulnerability (CVE-2025-55182, CVE-2025-66478) allows server-side code execution in React and Next.js applications, with confirmed exploitation in the wild deploying EtherRAT malware. Read more
Cisco adopts eBPF for distributed firewall and vulnerability mitigation: Cisco has integrated eBPF technology into its enterprise networking hardware and software, using tools like Tetragon and Hypershield for distributed firewalling and live patching of switches without downtime. Read more
Ethereum Foundation prioritizes post-quantum security: The Ethereum Foundation has made post-quantum security its top strategic priority, establishing a dedicated team, launching test networks, and offering $2 million in research prizes to adopt quantum-resistant cryptography. Read more
IonQ acquires SkyWater Technology for $1.8B: IonQ is acquiring SkyWater Technology for $1.8 billion, aiming to create a vertically integrated quantum computing and semiconductor manufacturing platform to accelerate its roadmap toward fault-tolerant quantum computing. Read more
Photon pair encoding boosts quantum error resistance: University of Rostock researchers have developed a method to encode quantum information in photon pairs, demonstrating increased error resistance compared to single-photon approaches for more reliable quantum computers. Read more
AI enables efficient quantum field theory simulations: Researchers at TU Wien, in collaboration with US and Swiss institutions, developed a specialized neural network to parameterize quantum field theories, dramatically reducing computational resource requirements for simulations. Read more
Brave Search API offers zero data retention for AI companies: Brave Search API launched with Zero Data Retention (ZDR) for enterprise clients, ensuring user queries are not stored, targeting AI companies and developers for privacy compliance. Read more
Google launches Universal Commerce Protocol for AI retail: Google introduced the Universal Commerce Protocol (UCP) to standardize integrations between merchants and AI agents in online commerce, aiming to solve N×N integration complexity and enhance security against AI-driven fraud. Read more
Meta scales back VR investment, focuses on social platforms: Meta has closed three VR studios and reduced investment in its Reality Labs division, shifting strategic focus toward social platforms and large-scale business opportunities, causing short-term uncertainty for VR developers. Read more
Meta to test premium subscriptions for Instagram, Facebook, WhatsApp: Meta will begin testing premium subscription offerings on Instagram, Facebook, and WhatsApp, providing exclusive features like productivity tools, creativity enhancements, and expanded AI capabilities, including its Manus AI agent. Read more
TikTok service disruptions linked to US data center outage: TikTok experienced widespread service disruptions, including issues with comments and the For You page, which the company attributed to a power outage at a U.S. data center amidst severe winter storms. Read more
YouTubers sue Snap over alleged AI training copyright infringement: A group of YouTubers is suing Snap, alleging the company used their video content from research datasets like HD-VILA-100M to train AI models without permission, circumventing YouTube’s terms of service. Read more
UK House of Lords expands age verification to VPNs and online platforms: The UK House of Lords passed amendments to the Children’s Wellbeing and Schools Bill, requiring VPN providers and all user-to-user interactive online services to implement age assurance mechanisms, blocking access for users under 16. Read more
Large-scale credential exposure via misconfigured cloud database: Security researcher Jeremiah Fowler discovered an unprotected cloud database containing 149 million login credentials, including those for Gmail, Facebook, Instagram, Netflix, and TikTok, obtained through info stealer malware. Read more
Surge in database ransomware attacks tied to weak authentication: Database ransomware attacks rose by 60% year-over-year, with weak authentication being a central vulnerability, particularly affecting Elasticsearch servers 100 times more often than MySQL due to delayed upgrades. Read more
ShinyHunters target ~100 firms in Okta SSO credential-theft campaign: The ShinyHunters cybercriminal group is targeting approximately 100 organizations, including Canva and Atlassian, by exploiting Okta single sign-on (SSO) accounts using voice-phishing social engineering to obtain credentials and bypass MFA. Read more
PeckBirdy JScript framework used in Asian APT campaigns: PeckBirdy, a JScript-based command-and-control framework, has been used by China-aligned APT groups since 2023, exploiting living-off-the-land binaries across various environments to target China’s gambling industry and Asian government organizations. Read more
Nike faces extortion threat after major data theft: WorldLeaks claims to have stolen 1.4TB of Nike’s internal data, including sportswear designs and manufacturing processes, with Nike currently investigating the alleged breach. Read more
Y Combinator drops Canada from eligible investment countries: Y Combinator has removed Canada from its list of eligible countries for investment, now only accepting startups incorporated in the US, Cayman Islands, or Singapore, raising concerns about a ‘brain drain’ from Canada. Read more
CVector secures $5M for industrial AI operational platform: New York-based industrial AI startup CVector closed a $5M seed round led by Powerhouse Ventures to expand its AI-powered software, which acts as a ‘nervous system’ for manufacturing plants, utilities, and chemical producers. Read more
Discovery Insure debuts AI-based driving behavior system: Discovery Insure launched an AI-powered Advanced Driving Instructor (ADI) that uses telematics data and generative AI to provide personalized driving feedback, detect phone use, and set improvement goals for users. Read more
Norway initiates electronic prescription system for veterinary medicine: Norway has begun developing an electronic prescription system for veterinary medicine, a project 15 years in the making, aiming to modernize prescribing and integrate with existing veterinary and pharmacy systems. Read more
South African regulator tightens mobile data and billing rules: South Africa’s communications regulator Icasa announced new rules for mobile operators, including automatic data bundle rollover, mandatory usage notifications, and explicit opt-in for out-of-bundle charges, effective early 2027. Read more
Global internet disruptions in Q4 2025: Over 180 internet disruptions occurred globally in Q4 2025, including a 26-hour government-mandated shutdown in Tanzania, multiple submarine cable cuts, power outages, and technical failures in various ISPs and cloud platforms like AWS and Cloudflare. Read more
Apple releases iOS 12.5.8 for older iPhones: Apple released iOS 12.5.8 for iPhone 5s and iPhone 6, extending certificates for iMessage, FaceTime, and device activation, ensuring continued functionality beyond January 2027 and exceeding Apple’s stated minimum support period. Read more
Godot 4.6 release focuses on workflow and quality-of-life: Godot 4.6 has been released, focusing on polishing workflow, fixing ‘papercuts,’ and resolving bugs, with over 400 contributors and 2,001 commits, reflecting its significant adoption with over 1,200 Steam releases in 2025. Read more
Gamescom leadership summit to address AI disruption: Gamescom’s executive leadership summit in Lisbon will focus on studio resilience, future business models, and ‘AI disruption’ through invite-only roundtables for C-level executives and senior decision-makers. Read more
Xbox clarifies multiplatform release strategy for PS5: Xbox Game Studios plans a more consistent approach to launching first-party titles like Fable and Kiln simultaneously on Xbox and PlayStation 5, though some titles may still have staggered releases due to resource constraints. Read more
2026 GDC attendance impacted by safety and immigration enforcement: International game developers are opting out of the 2026 Game Developers Conference (GDC) in San Francisco due to safety concerns, increased ICE presence, stricter U.S. immigration enforcement, and high costs, despite GDC’s enhanced safety measures and reduced pass prices. Read more
Jagex pledges no generative AI for RuneScape in-game content: Jagex, the developer of RuneScape, has committed to never using generative AI for player-visible in-game content across all its titles, while still allowing AI for internal tooling and workflow improvements. Read more
Introversion Software’s post-success struggles and strategic pivot: Introversion Software, creators of Prison Architect, experienced creative stagnation after financial success, leading them to sell the IP, reduce staff, and pivot to a new strategy emphasizing early audience engagement for their upcoming game, The Last Starship. Read more
Python Developers Survey 2026 launched: The Python Software Foundation and JetBrains have launched the ninth annual Python Developers Survey, translated into eight languages, to capture the current state of Python usage and its ecosystem, with results to be published in 2026. Read more
Ktor 3.4 release enhances HTTP client and documentation: Ktor 3.4 introduces duplex streaming for the OkHttp client engine, an HttpRequestLifecycle plugin for automatic request cancellation, and a new runtime API for dynamic endpoint documentation, along with Zstd compression support. Read more
Laravel Boost v2.0 launches with skills system: Laravel Boost v2.0 introduces a new Skills system, allowing developers to extend and customize their workflow with skill synchronization, overrides, and an Artisan command to fetch skills from GitHub repositories. Read more
Payara Platform January 2026 updates address critical vulnerabilities: Payara Platform released January 2026 updates for both Community and Enterprise editions, addressing a critical admin account takeover vulnerability, an XSS issue, and EJB deployment failures on JDK 24. Read more
DuckDB 1.4.4 LTS release focuses on stability and performance: DuckDB 1.4.4 LTS (Long-Term Support) has been released, focusing on bugfixes, performance improvements, and security patches, with correctness issues fixed for various join types and critical issues in the C API.