<h2>Must know</h2>
<ul>
<li>Kubernetes RCE flaw found in common permissions: Edera Advisory has uncovered a critical design flaw in Kubernetes that allows remote code execution (RCE) in any container on a node. This RCE is possible through <code>nodes/proxy GET</code> permissions, which are widely used by monitoring tools and network overlays. While the problematic permission is slated for removal in Kubernetes 1.36 (expected April 2025), many production clusters will take months or years to update, leaving them vulnerable. Organizations are advised to scan for RCE attempts and implement fine-grained authorization controls. <a href="https://app.daily.dev/posts/phMyeDnVg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Musk’s companies eye a trillion-dollar merger: Elon Musk’s SpaceX, xAI, and potentially Tesla are in early talks to merge, aiming to create a super-company valued over a trillion dollars. This consolidation could combine rockets, satellites, AI, and electric vehicles, with a key driver being the plan for space-based AI data centers to cut training costs. The move also aims to strengthen Pentagon contracts and military AI integration, though building data centers in space is noted as a risky proposition given AI’s rapid evolution. <a href="https://app.daily.dev/posts/wMYF638eZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Microsoft’s gaming division takes a hit: Microsoft’s Q2 FY26 results show a 17% overall revenue increase, largely thanks to cloud and productivity services. However, the Xbox gaming division is the sole underperformer, with console sales down 32% and gaming revenue dropping 9% year-over-year. This marks the sixth consecutive year of declining Xbox console sales, following price increases and multiple layoffs in 2025. Despite record PC players, Microsoft anticipates continued declines in Q3, with Game Pass growth expected to only partially offset future losses. <a href="https://app.daily.dev/posts/uKbAAElcM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li>Meta doubles down on AI infrastructure: Meta plans to invest a staggering $115-135 billion in AI infrastructure in 2026, nearly doubling its 2025 investment, to support its Superintelligence Labs and develop “personal superintelligence” agents. <a href="https://app.daily.dev/posts/JHGPGk0MW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Apple acquires audio AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a>: Apple has acquired Israeli audio AI startup <a href="http://Q.ai" target="_blank" rel="noopener nofollow">Q.ai</a> for an estimated $1.6 to $2 billion, strengthening its AI hardware capabilities with technology specializing in whispered speech recognition and audio enhancement for products like AirPods and Vision Pro. <a href="https://app.daily.dev/posts/PknWg8Xks" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Google DeepMind launches Project Genie AI world generator: Google DeepMind launched Project Genie, an experimental web prototype powered by the Genie 3 world model, capable of generating infinite, interactive environments in real-time from text and image prompts, available to Google AI Ultra subscribers. <a href="https://app.daily.dev/posts/iit38VC43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Microsoft deploys in-house AI chip, still buys from Nvidia and AMD: Microsoft has deployed its Maia 200 AI inference chip in data centers, claiming superior performance, but CEO Satya Nadella confirmed the company will continue purchasing AI chips from Nvidia and AMD, indicating a diversified supply chain strategy. <a href="https://app.daily.dev/posts/kN85HgrLU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Container security practices show significant gaps: A BellSoft survey reveals nearly a quarter of developers experienced container-related security incidents last year, with human error being the primary cause, and many organizations prioritizing performance over security when selecting base images. <a href="https://app.daily.dev/posts/I55IVTrKU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Google Cloud brings conversational analytics to BigQuery: Google Cloud has launched Conversational Analytics in BigQuery (preview), an AI-powered agent integrated into BigQuery Studio that enables natural language data analysis, eliminating the need for SQL knowledge by leveraging Gemini models. <a href="https://app.daily.dev/posts/2YKMeABdR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>NVIDIA GeForce NOW launches native Linux support: NVIDIA’s GeForce NOW cloud gaming service has launched native Linux PC support in beta, offering up to 5K resolution at 120fps on Ubuntu 24.04 LTS and later, distributed as a Flatpak. <a href="https://app.daily.dev/posts/RB8XUehQ7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Apiiro launches Guardian Agent for AI code security: Apiiro introduced Guardian Agent, an AI security tool that aims to prevent AI coding agents from generating vulnerable code by rewriting developer prompts into secure ones in real-time within IDEs and CLIs. <a href="https://app.daily.dev/posts/5AaMXyHJd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>CodeQL 2.24.0 adds Swift 6.2 and .NET 10 support: CodeQL 2.24.0 now supports Swift 6.2 and .NET 10/C# 14, and improves handling of minified JavaScript files, while expanding framework coverage and reducing false positives in security analysis. <a href="https://app.daily.dev/posts/vbDhmAtWr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Formae IaC platform adds multi-cloud support and plugin SDK: Platform Engineering Labs announced beta multi-cloud support for its open-source IaC platform, formae, now including Google Cloud, Azure, Oracle Cloud, and OVHcloud, alongside a Plugin SDK for custom extensions. <a href="https://app.daily.dev/posts/bqzmDPKsL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Node.js impact from OpenSSL vulnerabilities: The OpenSSL project released 12 CVEs, with three affecting Node.js (CVE-2025-11187, CVE-2025-69421, CVE-2026-22795) at Low to Moderate severity, all related to PFX certificate file processing and impacting TLS configuration. <a href="https://app.daily.dev/posts/jITntLdtr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>OpenAI axes ChatGPT models with two weeks’ warning: OpenAI is deprecating several ChatGPT models including GPT-4o, GPT-4.1, GPT-4.1 mini, and OpenAI o4-mini on February 13, giving users just two weeks’ notice. This is the second attempt to retire GPT-4o after user backlash last year forced a reversal. <a href="https://app.daily.dev/posts/JR3z1jag0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>DB Toolkit: a new cross-platform database management app: DB Toolkit is an open-source, cross-platform desktop database management application supporting PostgreSQL, MySQL, SQLite, and MongoDB, featuring a Monaco-based query editor, inline data editing, automated backups, and AI-powered query assistance via Cloudflare AI. <a href="https://app.daily.dev/posts/IwUAWOsVf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>YepCode: developer-first AI integrations: YepCode is a developer-first platform for building and running AI-powered integrations using JavaScript or Python, providing secure execution sandboxes, secrets management, and a serverless runtime with an SDK for AI agents to safely access internal APIs and databases. <a href="https://app.daily.dev/posts/TTuEqrxV6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Basis Universal v2.0 ASTC/XUASTC usage guide released: Richard Geldreich’s Blog announced that Basis Universal v2.0 now includes a comprehensive usage guide covering ASTC and XUASTC LDR texture compression formats, available on the project’s GitHub wiki. <a href="https://app.daily.dev/posts/NYuwd9yE1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Rspack 1.7 released: final 1.x update before 2.0: Rspack 1.7, the final 1.x release before version 2.0, introduces stabilizing improvements including enhanced SWC plugin compatibility, native support for importing assets as bytes, and lazy compilation enabled by default for dynamic modules. <a href="https://app.daily.dev/posts/pFPLemc3H" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Spring gRPC 1.0.2 available now: Spring gRPC version 1.0.2 has been released as a maintenance update for the Spring framework’s gRPC integration library. <a href="https://app.daily.dev/posts/Ac7qUn42O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>freeCodeCamp releases relational database design course: freeCodeCamp released a 6-hour video course on relational database design, covering fundamentals to advanced topics like SQL basics, entity-relationship modeling, and normalization forms, based on the book ‘Grokking Relational Database Design’. <a href="https://app.daily.dev/posts/xdwl0QPIc" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li>GDC attendance concerns vs organizer optimism: GDC organizers are optimistically reporting attendance is ‘tracking in line with expectations’ and they ‘haven’t seen cancellations reflected in ticket sales yet.’ This is despite many international developers expressing reluctance to attend due to US immigration concerns and confirmed non-attendance from some UK and European publishers. It seems GDC’s PR team is working overtime to spin a narrative that contradicts reality, or perhaps they’re just hoping no one notices the empty seats. <a href="https://app.daily.dev/posts/dX5Rur1jC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Meta reality labs reports significant FY25 losses: Meta’s Reality Labs, the division responsible for the metaverse, reported $19.2 billion in operational losses for FY25, bringing its total losses to $83.6 billion since 2020. Despite this, Mark Zuckerberg expects FY25 to be the ‘peak losses’ year, with a strategic pivot towards glasses and wearables. Because nothing says ‘we’re turning things around’ like closing three VR studios and cutting 10% of staff after burning through tens of billions of dollars on a vision nobody asked for. <a href="https://app.daily.dev/posts/ALCffHVkc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li>Next.js: platform agnostic or Vercel-locked?: A developer spent 8 hours trying to migrate a Next.js app from Vercel to Cloudflare and Netlify, only to return to Vercel where ‘everything works immediately.’ The takeaway? While Next.js claims platform agnosticism, it’s ‘deeply optimized for Vercel’s infrastructure.’ So, if you choose Next.js, you’re essentially choosing Vercel, regardless of what the marketing says. It’s almost like they want you locked in, who would’ve thought? <a href="https://app.daily.dev/posts/QSUyGFHpL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>