<h2>Must know</h2>
<ul>
<li><strong>Ingress-nginx project archived, migration to Cilium recommended</strong>: The ingress-nginx project is being archived in early 2026, meaning no more active maintenance or security updates. Teams still using it need to migrate to Cilium Ingress for a quick replacement or adopt Cilium’s Gateway API for advanced features like header-based routing and traffic splitting. Both options leverage Cilium’s eBPF-powered datapath for better performance and observability, as reported by CNCF. Migration tools are available to automate the conversion process. <a href="https://app.daily.dev/posts/PptBbhnAu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Office zero-day actively exploited</strong>: Microsoft issued an emergency patch for CVE-2026-21509, a zero-day vulnerability in Office with a CVSS score of 7.8. This flaw bypasses security features for legacy COM and OLE components, allowing attackers to execute code via malicious Office files. While newer Office versions received immediate updates, Office 2016 and 2019 users need manual registry workarounds. CISA has mandated federal agencies patch by February 16, highlighting the urgency of this actively exploited threat. <a href="https://app.daily.dev/posts/qC937DXHe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WhatsApp adopts Rust for media security, launches privacy features</strong>: WhatsApp replaced 160,000 lines of C++ code with 90,000 lines of Rust in its media handling stack, deploying a new media consistency library called Kaleidoscope. This overhaul, affecting billions of users, aims to detect malicious patterns in media files and prevent malware exploits, with Meta claiming improved performance and memory safety. Concurrently, WhatsApp launched ‘Strict Account Settings,’ an optional privacy feature for high-risk users that blocks media from unknown senders, silences calls, and enables two-step verification. <a href="https://app.daily.dev/feed-by-ids?id=2YIPmtHiF&amp;id=Fw1AO3ne7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Rust Foundation outlines 2026-2028 strategic plan</strong>: The Rust Foundation released its 2025 Annual Report and a new strategic plan focusing on stable infrastructure, sustainable maintainer support, responsible adoption growth, and community engagement, having raised $5.1 million in 2025 with $2.7 million invested directly into the Rust Project. <a href="https://app.daily.dev/posts/DRpplNBlF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel project formalizes succession plan</strong>: The Linux kernel project has formalized a succession plan for leadership after Linus Torvalds’ eventual departure, documenting a process for maintainers to select new leadership to ensure project sustainability and continuity. <a href="https://app.daily.dev/posts/vAKZlS9Qz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Cloud launches N4A instances with custom ARM CPUs</strong>: Google Cloud has released N4A compute instances powered by custom Axion ARM processors, offering up to 64 vCPUs and 512GB RAM, targeting web servers, microservices, and containerized applications with claims of improved performance and cost-effectiveness over previous T2A instances. <a href="https://app.daily.dev/posts/JvBjVyZ5U" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-driven polymorphic phishing uses LLMs for code generation</strong>: A new phishing attack employs AI models like DeepSeek and Gemini to generate malicious JavaScript in victims’ browsers, splitting malware into fragments that are reassembled client-side to evade traditional detection systems. <a href="https://app.daily.dev/posts/jfmiKNwaJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU C Library moves hosting to Linux Foundation</strong>: The GNU C Library (glibc) is migrating its project hosting to the Linux Foundation’s Core Toolchain Infrastructure (CTI) to enhance cybersecurity, ensure sustainability, and diversify sponsorship, leveraging the Linux Foundation IT team’s experience with the Linux kernel. <a href="https://app.daily.dev/posts/u5a6CSvnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL faces declining community support and development instability</strong>: Despite being the second most popular database, MySQL is experiencing declining community enthusiasm and development velocity due to Oracle’s layoffs and a growing feature gap between its open-source and paid versions, prompting discussions about a community-led fork. <a href="https://app.daily.dev/posts/u7JkpyQEs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft expands Android anti-theft protections</strong>: Google announced new anti-theft features for Android 16+, including Failed Authentication Lock, expanded Identity Check coverage, and an optional security challenge for Remote Lock, with Theft Detection Lock and Remote Lock enabled by default in Brazil. <a href="https://app.daily.dev/posts/a8ZBOybpX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>D-Wave’s quantum computing claims: more hype than substance?</strong>: D-Wave is touting ‘progress’ in quantum computing, reporting massive year-over-year growth in usage and a $10 million QCaaS contract with an unnamed Fortune 100 company. They’re also claiming to be the ‘only one’ offering all three core technologies for error-corrected superconducting systems. Funny how all these impressive numbers and bold claims come directly from D-Wave’s own press releases, with absolutely no third-party verification. It’s almost like they’re trying to impress investors rather than actually deliver anything groundbreaking. <a href="https://app.daily.dev/feed-by-ids?id=B9UXF3b8Z&amp;id=DT8WvPaAx&amp;id=7x58WcvLH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated content: the echo chamber of misinformation</strong>: ChatGPT’s GPT-5.2 model has been caught citing Grokipedia, an AI-generated encyclopedia by Elon Musk, as a source. The Guardian found multiple instances of this AI-on-AI sourcing, raising concerns about amplifying bias and misinformation through recursive AI content. OpenAI claims its models filter low-credibility sources, but apparently, an AI-generated encyclopedia passes the sniff test. It’s a perfect feedback loop for falsehoods, proving that if you train an AI on enough garbage, it’ll start citing other garbage as gospel. <a href="https://app.daily.dev/posts/fWRmbZwbT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor’s AI browser: a triumph of marketing over engineering</strong>: Cursor proudly announced its AI agents built a web browser with millions of lines of code and a custom Rust rendering engine, hailing it as a major AI software engineering breakthrough. Developers, however, quickly found the code to be ‘spaghetti,’ unable to compile, and heavily reliant on existing external projects, completely undermining the ‘from scratch’ claim. It seems Cursor’s marketing team is far more advanced than its AI agents, proving that even with hundreds of AI workers, you can still produce a hot mess if the hype machine is running full tilt. <a href="https://app.daily.dev/posts/gcgtwbk5H" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
