NerdNews

Developers are using AI to reverse-engineer and clone popular software like Adobe's Photoshop and Lightroom, offering free alternatives with similar functionality. This trend, led by projects like Artcraft, could disrupt the subscription-based model used by big-name companies and raise questions about patents and copyright.

Tech CEOs' comments on AI's usefulness have raised questions about their connection to the general public. Experts discuss the potential consequences of over-optimizing human interactions and the need for a balance between technology and human connection.

The Volta-Autodoxer malware uses AI tools to collect and analyze data from infected machines, including login credentials, credit card numbers, and other sensitive information. It can also profile victims and identify high-value targets, making it a powerful tool for cybercriminals.

Hackers stole $6.3 billion in cryptocurrencies from Binance in just 20 minutes. Crypto tracing firms suspect North Korean hackers, specifically the group TraderTraitor, may be behind the attack. Around half of the stolen funds have been frozen, but the rest may be impossible to recover.

OpenAI is rolling out ChatGPT Work capabilities into regular Chat and combining usage allowances across ChatGPT and Codex. The company is also doubling Work and Codex allowances for Pro 100, Pro 200, and Pro 500 subscriptions. This change aims to provide a more seamless experience for users, allowing them to move from ordinary conversations to complex tasks without switching modes.

The article discusses 5 safety practices for vibe coding, including being specific in prompts, keeping API keys and passwords secure, protecting app data, using rate limiting, and reviewing and testing the AI's work to prevent security risks and vulnerabilities.

OpenAI is implementing stricter limits on the information teens can access related to firearms on ChatGPT, even if the question appears harmless. The company aims to prevent the facilitation of violence and will restrict practical information about weapons and security systems. Teens will still be able to use ChatGPT for preventing or de-escalating violence and seeking support.

Claude Duet is a personal AI agent that can proactively complete tasks. To use it, join the waitlist on Anthropic's website and subscribe to the $20/month Pro plan. Duet can generate briefings, schedule meetings, and more, but requires access to your digital life.

OpenAI is preparing a PR blitz, including rebranding data centers as 'AI compute campuses' and proposing AI speed limits, to influence the AI debate moving forward.

A new framework, RAID-AI, has been developed to help cybersecurity leaders assess and address weaknesses in AI systems that could leave them vulnerable to ransomware attacks. The framework is a manual assessment tool that maps controls to two voluntary security frameworks, NIST CSF 2.0 and CISA CPG 2.0, and allows users to map adversarial attacks through three attack mapping frameworks.

The US National Institute of Standards and Technology (NIST) has published guidance to help federal agencies meet the 2031 deadline for transitioning to post-quantum cryptography (PQC). The guidance provides a transition plan and references the post-quantum algorithm standards published in 2024. It emphasizes the need for immediate action to meet the deadline and outlines approaches for different types of systems and data.

Ex-Palantir executives Andy Elder and Arjun Mathur have launched Dream, a startup that uses AI to build world models for the construction industry. With $17 million in seed funding from Andreessen Horowitz, Dream aims to automate building design and engineering, replacing outdated tools like AutoCAD and Revit. The company's approach, called 'structural cognition,' generates structurally precise designs that account for internal building elements like plumbing and HVAC.

Apple is launching an iOS 27.3 beta that brings Apple Intelligence features to China, including notification summaries, real-time translation, and visual intelligence. The features will be available first in the beta, set to launch on November 4th, with a full release scheduled for December.

Google's Project Suncatcher satellite, equipped with AI chip Tensor Processing Units (TPUs), has generated its first response from space, creating a haiku about being in space. The test is part of an experimental initiative to put AI data centers in space.

Apple and Amazon have launched new smart displays, HomeView and Echo Show 16, which could finally make the smart display genuinely useful. Both devices have computer-class hardware and a display built for sharing, but they take different approaches to fit into the household.

A new wave of autonomous vehicle startups is emerging, fueled by technological breakthroughs such as AI and foundational models. Trucks VC has seen 81 new AV startups pitch this year, with many focusing on robotaxi businesses and competing with Waymo. The barrier to entry is lower than ever before, with startups deploying in a few months and with less than $1 million raised.

A suspected Chinese nation-state actor chained the PHP2Shell exploit with a Linux kernel privilege-escalation vulnerability to gain root access to 25 Palo Alto Network firewall and management servers, including a US government-affiliated environment.

Binance, a major cryptocurrency exchange, has been hacked, resulting in the theft of $6.3 billion in crypto funds. The company has promised to cover all losses and has frozen around $3 billion of the stolen assets. The hack is believed to be the largest cryptocurrency heist on record, with most of the theft occurring over a period of just 20 minutes.

Google and Reddit's stocks are plummeting due to concerns over AI risks. Google's AI features are hurting its search advertising revenue, while Reddit's traffic from Google is declining. This decline is attributed to Google's AI Overviews, which are reducing click-through rates for websites appearing in search results.

A supply-chain attack compromised Anthropic's official VS Code extension on Cursor, threatening up to 5,000 developers' machines with a malicious backdoor. The backdoor attempted to collect host information, add an SSH key, and open a reverse SSH tunnel. Although the issue has been mitigated, it remains unclear how the attackers gained access to Anthropic's verified account.