Cisco Zero-Day Actively Exploited

Critical patches, developer trust issues, and new cracks in familiar tools.

AuthorAuthor

Gloria & Divine Odazie
January 23, 2026

In partnership with

AI-native CRM

“When I first opened Attio, I instantly got the feeling this was the next generation of CRM.”
— Margaret Shen, Head of GTM at Modal

Attio is the AI-native CRM for modern teams. With automatic enrichment, call intelligence, AI agents, flexible workflows and more, Attio works for any business and only takes minutes to set up.

Join industry leaders like Granola, Taskrabbit, Flatfile and more.

Hey there,

Happy Friday🥳!

Before you wrap the week, here’s a quick drop of things worth checking out.

📰Top Picks:

Cisco Unified Communications Zero-Day Actively Exploited
Cisco has issued an emergency patch for a critical zero-day in its Unified Communications platforms that allows unauthenticated remote code execution via management interfaces and is already being exploited in the wild. Read more.

Malicious VS Code Repos Abuse Auto-Run Tasks
Researchers found GitHub repos using VS Code’s tasks.json to execute malicious code when folders are opened, often disguised as coding assignments or interview tests. The issue isn’t a VS Code bug so much as how easily trust can turn a developer tool into an attack vector. Read more.

AI Hallucinations Are Slipping Into Top ML Conferences
GPTZero says it found widespread AI-generated hallucinations in papers accepted by NeurIPS and ICLR, pointing to fake citations, invented sources, and rising error rates as submission volumes explode. The findings fuel concerns that unchecked AI use is quietly eroding research quality and credibility. Read more.

Kubernetes Explores Checkpoint and Restore for Running Workloads 
A new Kubernetes Working Group is looking at native checkpoint and restore support, enabling pods to pause, move, and resume without losing state. The effort could reshape how teams handle preemption, long startups, and long-running AI or data workloads. Read more.

Salesforce Moves 1,000+ EKS Clusters to Karpenter
Salesforce has migrated over 1,000 EKS clusters from the Cluster Autoscaler to Karpenter, significantly speeding up scaling and reducing operational overhead. Read more.

AI Exposure Isn’t the Real Risk for Millions of US Workers
A Brookings-backed analysis suggests AI risk has less to do with how exposed a job is and more with whether workers can actually adapt if displaced. For millions of roles, that gap may be wider than expected. Read more.

What Almost Twenty Years of DevOps Really Tells Us
DevOps has been declared dead for years, yet it keeps evolving by absorbing cloud, SRE, platform engineering, and now AI. Two decades on, its staying power may say more about human systems than any tooling trend. Read more.

Zoom and GitLab Patch High-Impact Security Flaws
Zoom and GitLab have shipped fixes for serious vulnerabilities, including a critical Zoom bug that lets meeting participants execute code on media routers and multiple GitLab flaws affecting availability and 2FA. Even without active exploitation, these are the kinds of issues you don’t want sitting unpatched. Read more.

Anthropic Announces Claude CoWork
Anthropic has unveiled Claude Cowork, a macOS agent that can autonomously manage files, process documents, and run multi-step workflows inside user-approved folders. Built largely by Claude itself, the tool signals a shift toward long-running, multi-agent AI work beyond simple chat and code prompts. Read more.

Microsoft Open-Sources XAML Studio
Microsoft has open-sourced XAML Studio under the .NET Foundation, turning its lightweight WinUI and UWP prototyping tool into a community-driven project. The move opens the door to faster UI experimentation without full project scaffolding. Read more.

Was this email forwarded to you? Subscribe here to get your weekly updates directly into your inbox.

The Six Trends on SDLC: From Copilots to Autonomous Agents and more in 2026

🎧 Your Friday listen: Pinja and Stefan break down the six key trends shaping the software development lifecycle in 2026.

open.spotify.com/episode/1wAODuu3jbhyovmepuwORD?si=1ca020be5d8f4e73

🗓️ Upcoming Events

Mark your calendars!

  • Drupal AI Hackathon – Play to Impact: 2026 edition: (27–28 January 2026): A hands-on hackathon challenging participants to build AI-powered solutions on the Drupal platform, focusing on real-world impact and innovation. Register here.

  • NDC London (26–30 January 2026): A week-long conference for software developers featuring deep-dive workshops, expert talks, and hands-on sessions covering modern development, architecture, and emerging technologies. Get your tickets.

  • IaCConf 2026 (Online, 28 January, 2026): A focused virtual event for infrastructure and platform engineers to explore Infrastructure as Code practices, tooling, and real-world approaches to building and managing modern cloud infrastructure. Register here.

  • KubeCon + CloudNativeCon Europe 2026 (23-26 March): KubeCon is back in Amsterdam from 23–26 March, bringing platform teams and cloud-native practitioners together for hands-on sessions, case studies, and ecosystem updates. Register here.

Help us make better ads

Did you recently see an ad for beehiiv in a newsletter? We’re running a short brand lift survey to understand what’s actually breaking through (and what’s not).

It takes about 20 seconds, the questions are super easy, and your feedback directly helps us improve how we show up in the newsletters you read and love.

If you’ve got a few moments, we’d really appreciate your insight.

And it’s a wrap!

If you found this helpful, share this link with a colleague or fellow DevOps engineer.

Have a restful weekend!

Divine Odazie
Founder of EverythingDevOps