<h2>Must know</h2>
<ul>
<li><strong>Microsoft Office zero-day actively exploited</strong>: Microsoft issued an emergency patch for a critical zero-day vulnerability (CVE-2026-21509) in Office, actively exploited to bypass security features for legacy COM and OLE components. While newer Office versions and Microsoft 365 Apps received immediate updates, Office 2016 and 2019 users need manual registry workarounds as patches are pending. CISA has mandated federal agencies patch by mid-February, highlighting the urgency of this widespread threat, as reported by multiple security outlets. <a href="https://app.daily.dev/feed-by-ids?id=qC937DXHe&amp;id=qC937DXHe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Livewire RCE vulnerability leads to mass compromises</strong>: Numerous Laravel websites have been compromised due to a probable Remote Code Execution (RCE) vulnerability in Livewire versions prior to 3.6.4. Attackers are exploiting improper serialized data handling to execute code, deploy PHP backdoors, implement SEO cloaking, and install cryptominers. Immediate mitigation involves upgrading Livewire and securing application keys, as detailed in various security reports. <a href="https://app.daily.dev/feed-by-ids?id=dsQkjC4Yj&amp;id=dsQkjC4Yj&amp;id=dsQkjC4Yj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ingress-nginx project archived, migration to Cilium urged</strong>: The ingress-nginx project is being archived in early 2026, meaning no more active maintenance or security updates. Users are advised to migrate to Cilium Ingress for a direct replacement or adopt Cilium’s Gateway API for advanced features. Both options leverage Cilium’s eBPF-powered datapath for better performance and observability, with migration tools available to ease the transition, as announced by CNCF. <a href="https://app.daily.dev/posts/PptBbhnAu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Google expands Android anti-theft protections</strong>: Google is rolling out new anti-theft features for Android 16+, including Failed Authentication Lock, expanded Identity Check coverage, and an optional security challenge for Remote Lock. In Brazil, AI-powered Theft Detection Lock and Remote Lock will be enabled by default. <a href="https://app.daily.dev/posts/a8ZBOybpX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WhatsApp adopts Rust for media security overhaul</strong>: WhatsApp replaced 160,000 lines of C++ with 90,000 lines of Rust in its media handling stack, deploying a new media consistency library called Kaleidoscope to validate media files and detect malicious patterns across all platforms. <a href="https://app.daily.dev/posts/2YIPmtHiF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust Foundation releases 2025 annual report and strategic plan</strong>: The Rust Foundation announced its 2026-2028 strategic plan, prioritizing stable infrastructure, maintainer support, responsible adoption, and community engagement, having raised $5.1 million in 2025 with $2.7 million invested back into the project. <a href="https://app.daily.dev/posts/DRpplNBlF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU C Library moves to Linux Foundation for hosting</strong>: The GNU C Library (glibc) is migrating its hosting to the Linux Foundation’s Core Toolchain Infrastructure to enhance cybersecurity, ensure sustainability, and diversify sponsorship, with most maintainers supporting the move despite some opposition. <a href="https://app.daily.dev/feed-by-ids?id=u5a6CSvnu&amp;id=u5a6CSvnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MySQL faces declining community support and development instability</strong>: Despite being the second most popular database, MySQL is seeing declining community enthusiasm and development velocity due to Oracle’s layoffs and growing feature disparity between open-source and paid versions, prompting discussions of a community fork. <a href="https://app.daily.dev/feed-by-ids?id=u7JkpyQEs&amp;id=u7JkpyQEs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New terminal UI tool Overitall launches</strong>: Overitall (oit) is a new terminal UI tool combining process and log management, offering interactive log filtering, trace detection, and VS Code integration, with support for AI assistants like Claude for automated analysis. <a href="https://app.daily.dev/feed-by-ids?id=DkhXBDdU9&amp;id=DkhXBDdU9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Docker controller automates Cloudflare Tunnel sync</strong>: A new Docker controller, ‘docker-cloudflare-tunnel-sync,’ automates the synchronization of Cloudflare Tunnel routes, DNS records, and Access rules using container labels, eliminating manual configuration and reducing human error. <a href="https://app.daily.dev/posts/mXmVkLhBe" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated code: the illusion of productivity</strong>: <a href="http://Fast.ai" target="_blank" rel="noopener nofollow">Fast.ai</a> is calling out ‘vibe coding’—generating tons of AI code without human review—as a ‘false sense of productivity.’ Apparently, developers using AI tools overestimate their output by 40%, only to end up with overly complex, buggy, and unmaintainable code. So much for AI replacing us, looks like human abstraction and problem-solving are still ‘essential and irreplaceable.’ <a href="https://app.daily.dev/feed-by-ids?id=fPZ532s1X&amp;id=fPZ532s1X" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ChatGPT caught citing AI-generated encyclopedia</strong>: The Guardian found ChatGPT’s GPT-5.2 model citing Grokipedia, Elon Musk’s AI-generated encyclopedia, raising concerns about recursive AI sourcing. OpenAI claims its models filter low-credibility sources, but apparently, Grokipedia slipped through. This could amplify bias and misinformation, proving that even AI needs a fact-checker, preferably a human one. <a href="https://app.daily.dev/posts/fWRmbZwbT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor’s AI browser: ‘spaghetti code’ and broken promises</strong>: Cursor hyped its AI agents for building a web browser ‘from scratch’ with millions of lines of code. Developers, however, found the released codebase to be ‘spaghetti,’ unable to compile, and heavily reliant on existing projects. So much for AI engineering breakthroughs; turns out ‘from scratch’ means ‘cobbled together with existing parts and a lot of marketing fluff.’ <a href="https://app.daily.dev/feed-by-ids?id=gcgtwbk5H&amp;id=gcgtwbk5H&amp;id=gcgtwbk5H" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
