Cisco

Fireship

Foojay.io

GitHub Blog

Hacker News

<h2>Must know</h2>
<ul>
<li><strong>Critical Node.js vulnerability impacts major frameworks</strong>: A critical denial-of-service vulnerability (CVE-2025-59466) in Node.js, affecting versions 8.x through 24.x, can crash applications using <code>async_hooks</code> or <code>AsyncLocalStorage</code>. This impacts major frameworks like Next.js and React Server Components, as well as APM tools such as Datadog, New Relic, and OpenTelemetry. Patches have been released for supported versions 20.20.0, 22.22.0, 24.13.0, and 25.3.0, and immediate upgrades are recommended, as reported by Node.js release notes and Datadog advisories. <a href="https://app.daily.dev/posts/EyLXGRUe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ServiceNow AI agent vulnerability allowed full impersonation</strong>: A critical vulnerability, CVE-2025-12420 (BodySnatcher), in ServiceNow’s Virtual Agent AI platform allowed unauthenticated attackers to impersonate any user with just an email address, bypassing passwords and MFA. This flaw, rooted in weak authentication combined with new AI capabilities, could have led to admin account creation and privilege escalation across connected modules. ServiceNow has issued a patch, rotated credentials, and removed the exploited AI agent functionality, as confirmed by AppOmni and ServiceNow. <a href="https://app.daily.dev/posts/wzAqd15ET" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Patch Tuesday addresses critical zero-day</strong>: Microsoft’s January 2026 Patch Tuesday includes fixes for 112-114 vulnerabilities, with eight critical ones. Notably, CVE-2026-20805, a zero-day in Desktop Window Manager, is actively exploited to bypass ASLR and leak memory addresses. CISA has added this to its Known Exploited Vulnerabilities catalog, mandating federal patching by February 3, 2026. Other fixes address Office RCEs and Secure Boot certificate expirations, according to Krebs on Security and The Hacker News. <a href="https://app.daily.dev/posts/Kwy6WAbQP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cursor AI editor boosts token efficiency</strong>: Cursor, an AI code editor, introduced dynamic context discovery, reducing LLM token consumption by 46.9% by only accessing code context when needed, which should lower costs and speed up AI responses. <a href="https://app.daily.dev/feed-by-ids?id=gz0G04ehE&amp;id=nGGCLLBtk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Intel adds support for new GPUs</strong>: Intel’s Compute Runtime version 26.01.36711.4 now includes initial support for Crescent Island and Nova Lake S graphics hardware, continuing support for Level Zero and OpenCL APIs. <a href="https://app.daily.dev/posts/54Uqeadiv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Trends and Kaggle enhance AI usability</strong>: Google Trends now integrates Gemini AI for identifying related search trends and supports up to eight simultaneous terms, while Kaggle launched Community Benchmarks for custom AI model evaluation tasks. <a href="https://app.daily.dev/feed-by-ids?id=WhUrXR4tI&amp;id=XLEr4o2U6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rails engine monitors LLM API usage</strong>: RubyLLM::Monitoring is a new Rails engine that tracks LLM API usage, costs, performance, and error rates, providing a dashboard and configurable alerts for cost management and optimization. <a href="https://app.daily.dev/feed-by-ids?id=oYtsCmpWz&amp;id=ypxl4mcW2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox 147 and Thunderbird 147 released</strong>: Firefox 147 introduces automatic Picture-in-Picture, reorganized tab settings, enhanced WebGPU for Apple Silicon, and zero-copy hardware video playback for AMD GPUs, while Thunderbird 147 adds a ‘Show Full Path’ option and optional folder-name localization. <a href="https://app.daily.dev/posts/f7pzHnDhN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>U.S. federal agencies prepare for quantum security</strong>: U.S. federal agencies, including the FBI, NIST, and CISA, are moving to implement post-quantum cryptography standards to counter ‘harvest now, decrypt later’ attacks, urging immediate inventory of cryptographic assets. <a href="https://app.daily.dev/posts/lRZsyJgWP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bandcamp bans substantially AI-generated music</strong>: Bandcamp has announced a ban on music and audio created wholly or substantially by AI, effective January 2026, aiming to protect human artists and ensure authenticity for fans. <a href="https://app.daily.dev/feed-by-ids?id=LZT0kWKSj&amp;id=wgoMt7tqL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-generated books flood technical publishing</strong>: Apparently, HiTeX Press has managed to churn out over 800 technical books in a single year, all ‘written’ by AI with zero human oversight. These masterpieces, available on major platforms like Amazon for a mere 8€, are reportedly filled with fabricated code and non-existent features. It’s a real boon for anyone looking to learn absolutely nothing, or perhaps just enjoy some truly meaningless technical content, as highlighted by the investigation into this ‘spam factory for AI-generated books.’ <a href="https://app.daily.dev/posts/PmK6l9z8J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LLM maximalists still pushing the dream</strong>: Some senior developers are still scratching their heads, wondering why LLM agentic coding tools are so slow and require constant babysitting, barely moving the needle on productivity for anyone who actually knows what they’re doing. Meanwhile, the ‘insecure evangelists’ of LLM maximalism continue to dismiss skepticism as mere aversion to change, as if experienced engineers just can’t handle the future. It’s almost like these tools are great for documentation or for people who don’t code, but for actual production-grade mobile development, they’re still introducing architectural nightmares and mishandling basic platform concerns. <a href="https://app.daily.dev/feed-by-ids?id=IcLyTC7xk&amp;id=O3swuQWEt&amp;id=WndZlg59o&amp;id=XTzlp2ZQd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Quantum computing: still mostly hype, but now with IPOs!</strong>: Honeywell’s quantum computing subsidiary, Quantinuum, is reportedly filing for a confidential IPO, potentially valuing it at over $20 billion. Because nothing says ‘we’ve arrived’ like a speculative public offering for technology that’s still mostly in the lab. Meanwhile, Diffraqtion, a spinout, just snagged $4.2 million for quantum camera tech that promises 20x higher resolution and 1,000x faster processing, with demonstrations planned for early 2026. It’s all very exciting, but let’s see if these ‘breakthroughs’ actually translate into anything beyond investor decks and press releases, as Senator Marsha Blackburn calls for more funding, citing a $100 billion economic impact that’s still very much in the future. <a href="https://app.daily.dev/feed-by-ids?id=A9H2rpmDZ&amp;id=NhGwNaYRA&amp;id=isGrxmwaT&amp;id=wjXnstnI7" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
