NerdNews

OpenAI's CEO Sam Altman has declared a 'code red' as the company faces increasing competition from Google's Gemini and other AI models. The Vergecast discusses the state of ChatGPT and the AI industry, including the differences between language and intelligence.

OpenAI is planning to release its GPT-5.2 update as a response to Google's Gemini 3, which topped leaderboards and impressed industry leaders. The update is expected to close the gap created by Gemini 3 and could be released as soon as December 9th. OpenAI's CEO, Sam Altman, declared a 'code red' situation, pushing staff to respond quickly to increased competition.

Meta has partnered with CNN, Fox News, and other organizations to provide real-time news via its AI chatbot, aiming to offer diverse content sources and topics, despite concerns over misinformation and algorithmic curation.

Amazon has warned that China-nexus hacking crews began exploiting the critical React 'React2Shell' vulnerability within hours of disclosure. The bug allows an unauthenticated attacker to achieve remote code execution without authentication. AWS has deployed mitigations, but urges customers to update immediately.

Salesforce has launched Agentforce IT Service, an AI-powered IT service management platform that poses a significant threat to ServiceNow's dominance in the market. With early adopters like PenFed already seeing cost savings, Salesforce CEO Mark Benioff is confident that Agentforce can compete with ServiceNow. However, analysts note that Salesforce still has work to do to reach parity with ServiceNow, particularly in terms of security and data management.

The article discusses the difficulties faced by AI startups, such as Daydream, in turning AI models into useful products. Despite the promise of AI, many startups are finding it harder than expected to deliver results. The article highlights the importance of patience, persistence, and human help in overcoming these challenges.

A maximum-severity vulnerability, dubbed React2Shell, has been identified in React.js, allowing remote code execution. The vulnerability, tracked as CVE-2025-55182, affects server-side use of React.js and has a CVSS score of 10.0. Successful exploitation could provide an attacker with control of the victim server, leading to sensitive data compromise. Immediate remediation is recommended by upgrading vulnerable packages to fixed versions.

The US Cybersecurity and Infrastructure Security Agency (CISA) and international partners have issued guidance for securely integrating AI into operational technology (OT) systems, focusing on machine learning, large language models, and AI agents. The guidance emphasizes understanding AI risks, assessing AI use, establishing governance frameworks, and embedding safety and security practices.

The article discusses how new web platform features, such as CSS Masonry, Popover API, and Container Queries, can replace the need for libraries like Masonry JS, Floating UI, and React Router, resulting in better performance, responsiveness, and simpler code.

Jitter's AI Brainstorm is a beta feature that automates animation ideas from static layouts, speeding up dynamic content production. It generates mini-animations and assists with intro animations and transitions, useful for social media content and product teasers.

The European Commission is investigating Meta's decision to ban rival AI chatbots from WhatsApp, citing potential antitrust violations. Meta's policy change, set to take effect in January, would prevent third-party AI providers from offering their services through WhatsApp, while allowing Meta's own AI service to remain accessible.

Despite improvements in Neural Processing Units (NPUs) in phones, AI capabilities are not significantly enhanced due to limitations in processing power, memory, and model complexity, leading to a reliance on cloud-based AI services.

Tech leaders from HPE and AMD claim the AI craze is not a bubble, despite concerns over inflated valuations and failed projects. They argue that AI has real value and will continue to drive demand for infrastructure, with AMD's CEO Lisa Su predicting a 'ten-year super cycle' for the tech industry.

Linux 6.18 has been designated as the new LTS release, and Alpine Linux 3.23 has arrived with it. Alpine 3.23 features a new version of the Alpine packaging tools, APK 3.0.0, and includes updated components such as GCC 15, LLVM 21, and GNOME 49. The distro is known for its speed and can be installed in different modes, including diskless and data disk modes.

Proxmox has released its Datacenter Manager product, a centralized management platform for multiple Proxmox-based environments. The product offers features such as VM fleet management, lifecycle management, and a dashboard for viewing host and workload status. This release makes Proxmox a more viable alternative to VMware for private cloud platforms.

A database containing over 1 million images and videos, including nude and explicit content, was left exposed by an AI image generator startup. The database was used by multiple websites, including MagicEdit and DreamPal, and contained images of real people who had been 'nudified' without their consent. The exposure has raised concerns about the misuse of AI technology and the need for better content moderation.

Elon Musk confirmed that Tesla's latest Full Self-Driving software update may allow drivers to text while driving in certain situations, despite it being illegal in most states. However, experts warn that this is unsafe and drivers should not do it, as they will be liable in case of an accident.

Intellexa, a spyware vendor, continues to thrive despite US sanctions. Recent investigations have revealed new attack vectors, including a 'zero-click' infection system called Aladdin, and identified new victims in several countries. The company's ability to evade sanctions has raised concerns about the effectiveness of current measures to combat spyware.

China's first reusable rocket exploded during landing, but its onboard Ethernet network was successful. Meanwhile, South Korea is strengthening security standards, and APAC datacenter capacity is expected to triple by 2029 due to rising demand for AI and cloud services.

Passkeys are a new form of multifactor authentication that uses cryptographic key pairs to replace passwords, providing a more secure and phishing-resistant method of authentication. They are being adopted by major companies such as Amazon, Google, and Microsoft, and are expected to reduce costs and increase security for businesses.