<h2>Must know</h2>
<ul>
<li><strong>Kubernetes RCE flaw identified, fix delayed</strong>: A critical design flaw in Kubernetes, identified by Edera Advisory, allows remote code execution (RCE) in any container on a node via commonly used <code>nodes/proxy GET</code> permissions. While a fix is slated for Kubernetes 1.36, expected in April 2025, many production clusters will take months or years to update, leaving them vulnerable. Organizations are advised to scan for RCE attempts and implement fine-grained authorization controls. <a href="https://app.daily.dev/posts/phMyeDnVg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Container security practices are a mess</strong>: A BellSoft survey reveals significant gaps in container security, with nearly a quarter of respondents experiencing incidents in the past year. Human error accounts for 62% of mistakes, while time constraints and lack of organizational prioritization hinder efforts. Despite security concerns, 55% use general-purpose Linux distributions and 69% use general-purpose JDKs, requiring more security work. Only 43% use vulnerability scanning tools, and a mere 16% implement image signing. <a href="https://app.daily.dev/posts/I55IVTrKU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tails releases emergency security update</strong>: Tails 7.4.1 is an emergency security release addressing critical OpenSSL vulnerabilities that could potentially allow malicious Tor relays to deanonymize users. The update includes OpenSSL 3.5.4, Tor client 0.4.8.22, and Thunderbird 140.7.0, along with other fixes. Automatic upgrades are available from Tails 7.0 or later. <a href="https://app.daily.dev/posts/o8xlrRsY3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>RISC-V gets shadow stack security</strong>: Linux on RISC-V is now ready for user-space control-flow integrity with shadow stack support, offering similar security against control-flow hijacking attacks as Intel and AMD processors. <a href="https://app.daily.dev/posts/Vn66iuVR7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA GeForce NOW launches native Linux support</strong>: NVIDIA’s GeForce NOW cloud gaming service now offers native Linux PC support in beta, officially on Ubuntu 24.04 LTS, providing RTX performance up to 5K at 120fps or 1080p at 360fps. <a href="https://app.daily.dev/posts/RB8XUehQ7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source database management tool released</strong>: DB Toolkit is an open-source, cross-platform desktop database management application supporting PostgreSQL, MySQL, SQLite, and MongoDB, featuring a Monaco-based query editor, inline data editing, automated backups, and AI-powered query assistance. <a href="https://app.daily.dev/posts/IwUAWOsVf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenSSL vulnerabilities affect Node.js</strong>: Three of the 12 CVEs released by OpenSSL in January 2026 affect Node.js at Low to Moderate severity, all related to PFX certificate file processing and impacting TLS configuration, with fixes planned for regular Node.js releases. <a href="https://app.daily.dev/posts/jITntLdtr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>formae IaC platform adds multi-cloud support and plugin SDK</strong>: Platform Engineering Labs announced beta multi-cloud support for its open-source IaC platform, formae, now including Google Cloud, Azure, Oracle Cloud, and OVHcloud, alongside a Plugin SDK for custom extensions. <a href="https://app.daily.dev/posts/bqzmDPKsL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Privacy-first browser-based developer toolkit</strong>: Privacy-First Toolbox is an open-source collection of 60+ browser-based utilities (image converters, PDF tools, JSON formatters) that process files entirely client-side using Web Workers, ensuring complete data privacy without server uploads. <a href="https://app.daily.dev/posts/yYtG2YDHU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CDN simulator visualizes edge caching benefits</strong>: An interactive CDN simulator demonstrates how Content Delivery Networks reduce latency through edge caching, visualizing request routing, cache hits, and the impact on latency from 200-400ms down to 20-50ms. <a href="https://app.daily.dev/posts/B2LiRi6jQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Google DeepMind’s Project Genie: infinite worlds, limited reality</strong>: Google DeepMind launched Project Genie, an ‘experimental web prototype’ that generates ‘infinite, interactive environments’ using the Genie 3 world model. Apparently, this is a ‘step toward AGI’ and a ‘tool for game prototyping,’ but it struggles with photorealism, object interaction, and has 60-second generation caps. Meanwhile, 52% of game developers now believe AI negatively impacts their field, up from 30% last year. So, Google’s making toys while the industry burns, according to #5WiIjyYNP and #cXEPGpaCA. <a href="https://app.daily.dev/posts/iit38VC43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Musk’s latest merger mania: a trillion-dollar super-company built on… space data centers?</strong>: Elon Musk’s companies—SpaceX, xAI, and possibly Tesla—are in ‘early merger discussions’ to create a trillion-dollar super-company. The grand vision? Space-based AI data centers powered by solar energy to ‘reduce AI model training costs.’ Because, clearly, the biggest problem with AI is not enough orbital server racks. This sounds less like a strategic merger and more like a desperate attempt to consolidate assets before the inevitable reality check, as reported by #nqLTkZ80U and #yKD2LPIsz. <a href="https://app.daily.dev/posts/wMYF638eZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Meta’s Reality Labs: still losing billions, now with more AI-integrated wearables!</strong>: Meta’s Reality Labs reported another $19.2 billion in operational losses for FY25, bringing its total losses to a staggering $83.6 billion since 2020. But don’t worry, CEO Mark Zuckerberg says FY25 will be ‘peak losses’ as they pivot to ‘glasses and wearables’ with ‘AI integration.’ Because nothing says ‘we’ve learned our lesson’ like throwing more money at a losing venture, just with a new buzzword slapped on it. At least they cut 10% of staff, so that’s something, I guess. <a href="https://app.daily.dev/posts/ALCffHVkc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
