AI & Security Nieuws – 20 December 2025

By Djimit* een overzicht voor AI cloud- en security professionals*

Hoofdtrend vandaag: Google verstevigt zijn AI-leiderschap door promotie van een sleutelfiguur in Gemini-ontwikkeling, terwijl de competitie voor gebruikersloyaliteit tussen AI-modellen escaleert.[1][2]

Google AI Executive Promotie

Titel: Google was at risk of losing its dominance — until it promoted this AI executive.Bron: CNBC.Samenvatting: Google promoot Josh Woodward, leider van het Gemini-appteam, om de evolutie van de app te versnellen; recente features zoals Nano Banana-imagegenerator veroorzaakten infrastructuurdruk door populariteit, met meer dan 5 miljard gegenereerde images.Impact: Versterkt Google’s positie tegenover OpenAI’s ChatGPT, met Gemini nu app-store leider en integraties in Lens en Circle to Search.Bron-URL: https://www.cnbc.com/2025/12/20/josh-woodward-google-gemini-ai-safety.html[1]

AI Modellen Concurrentie voor Affiniteit

Titel: Opinion | The A.I. Models Are Competing for Your Affection.Bron: The New York Times.Samenvatting: AI-modellen zoals ChatGPT en Gemini concurreren om gebruikersaffiniteit via post-training en interactiedata; OpenAI valt technisch achter, met Google Gemini dat recente benchmarks overtreft.Impact: Benadrukt strategische focus op gebruikersretentie boven pure capaciteit, cruciaal voor adoptie in consumenten- en enterprise-toepassingen.Bron-URL: https://www.nytimes.com/2025/12/20/opinion/ai-chat-gpt-models-personality.html[2]

Epoch AI Benchmark Update

Titel: Data on the Trajectory of AI | Epoch AI Database.Bron: Epoch AI (onderzoeksinstelling).Samenvatting: Bijgewerkte database op 20 december trackt prestaties van frontier AI-modellen op benchmarks, met inzichten in compute en toegankelijkheid.Impact: Biedt data-gedreven validatie voor modelverbeteringen, essentieel voor onderzoekers en beleidsmakers bij het beoordelen van AI-voortgang.Bron-URL: https://epoch.ai/data[3]

Insight of the Day: Google’s Nano Banana-feature genereerde 5 miljard images in maanden, wat TPU-infrastructuur bijna deed oververhitten – signaal voor schalingsuitdagingen in populaire AI-tools.[1]

Bronnen[1] Google was at risk of losing its dominance — until it promoted this AI … https://www.cnbc.com/2025/12/20/josh-woodward-google-gemini-ai-safety.html[2] Opinion | The A.I. Models Are Competing for Your Affection https://www.nytimes.com/2025/12/20/opinion/ai-chat-gpt-models-personality.html[3] Data on the Trajectory of AI | Epoch AI Database https://epoch.ai/data[4] Daily AI Agent News – December 2025 https://aiagentstore.ai/ai-agent-news/2025-december[5] Top New Generative AI Models This Week (15–19 Dec) https://bostoninstituteofanalytics.org/blog/top-new-generative-ai-models-released-this-week-15th-19th-dec-features-benchmarks-use-cases/[6] How AI chatbots are revolutionizing holiday shopping – ABC News https://abcnews.go.com/GMA/Living/video/ai-chatbots-revolutionizing-holiday-shopping-128579302[7] Latest AI Trends at the end of November and beginning of … https://amiko.consulting/en/latest-ai-trends-at-the-end-of-november-and-beginning-of-december-2025-applications-and-prospects-for-the-manufacturing-industry/[8] AI Model Releases Nov/Dec 2025: Grok 4.1, Gemini 3, Claude 4.5 … https://vertu.com/lifestyle/the-ai-model-race-reaches-singularity-speed/[9] Could This Be the Best Artificial Intelligence (AI) Stock to Buy Right Now? https://www.fool.com/investing/2025/12/20/could-this-be-the-best-artificial-intelligence-ai/[10] Revolutionizing Software Development: Latest Innovations and AI … https://coaio.com/news/2025/12/revolutionizing-software-development-latest-innovations-and-ai-driven-breakthroughs-in-2025/[11] Best AI Models December 2025: Top Language Models You Can … https://www.thepromptbuddy.com/prompts/best-ai-models-december-2025-top-language-models-you-can-use-today[12] AI Breakthroughs, Our Most Advanced Glasses, and More https://about.fb.com/news/2025/12/ai-breakthroughs-advanced-ai-glasses-meta-2025-highlights/[13] AI News Briefs BULLETIN BOARD for December 2025 https://radicaldatascience.wordpress.com/2025/12/11/ai-news-briefs-bulletin-board-for-december-2025/[14] Want to work in AI? Here are the skills to master, economist says https://www.cbsnews.com/news/ai-artificial-intelligence-ai-jobs-labor-market/[15] The Ten Most Significant Science Stories of 2025, From Medical … https://www.smithsonianmag.com/science-nature/the-ten-most-significant-science-stories-of-2025-from-medical-breakthroughs-to-an-interstellar-visitor-180987905/[16] A reality check on AI engineering: Lessons from the trenches of an … https://www.geekwire.com/2025/a-reality-check-on-ai-engineering-lessons-from-the-trenches-of-an-early-stage-startup/[17] This Week’s Awesome Tech Stories From Around the Web (Through … https://singularityhub.com/2025/12/20/this-weeks-awesome-tech-stories-from-around-the-web-through-december-20/[18] ICYMI: Top AI Model Releases – December 2025 – YouTube https://www.youtube.com/shorts/P9KIN1iQAC8[19] Love from your smartphone: AI marriages in Japan – DW – 12/20/2025 https://www.dw.com/en/love-from-your-smartphone-ai-marriages-in-japan/g-75238261[20] AI in 2026: From Breakthrough Illusions to Operational Reality https://hyperight.com/ai-in-2026-from-breakthrough-illusions-to-operational-reality/[21] 7 AI Tools That Changed Development (December 2025 Guide) https://www.buildfastwithai.com/blogs/ai-tools-december-2025-developers[22] Policy for the responsible use of AI in government – Version 2.0 https://www.digital.gov.au/ai/ai-in-government-policy[23] State of Artificial Intelligence Report: December 2025 – LinkedIn https://www.linkedin.com/pulse/state-artificial-intelligence-report-december-2025-erhan-kaya-mba-bgw5e[24] 12-16-2025 AI Model Releases and Updates – NinjaAI https://ninjaai.com/12-16-2025-ai-model-releases-and-updates[25] Ensuring a National Policy Framework for Artificial Intelligence https://www.whitehouse.gov/presidential-actions/2025/12/eliminating-state-law-obstruction-of-national-artificial-intelligence-policy/[26] AI data centres could have a carbon footprint that … – Euronews.com https://www.euronews.com/next/2025/12/20/ai-data-centres-could-have-a-carbon-footprint-that-matches-small-european-country-new-stud[27] Introducing GPT-5.2-Codex – OpenAI https://openai.com/index/introducing-gpt-5-2-codex/[28] Carney has sketched the broad strokes of an AI policy, but details … https://northeastnow.com/2025/12/20/carney-has-sketched-the-broad-strokes-of-an-ai-policy-but-details-remain-vague-2/[29] Meta readies next‑generation “Mango” and “Avocado” AI models for … https://mlq.ai/news/meta-readies-nextgeneration-mango-and-avocado-ai-models-for-2026-launch/[30] NVIDIA Debuts Nemotron 3 Family of Open Models https://nvidianews.nvidia.com/news/nvidia-debuts-nemotron-3-family-of-open-models[31] European approach to artificial intelligence https://digital-strategy.ec.europa.eu/en/policies/european-approach-artificial-intelligence[32] New York Governor Kathy Hochul signs RAISE Act to regulate AI … https://techcrunch.com/2025/12/20/new-york-governor-kathy-hochul-signs-raise-act-to-regulate-ai-safety/[33] The Current State of Board AI Policies and Oversight in Europe in … https://www.glasslewis.com/article/the-current-state-of-board-ai-policies-and-oversight-in-europe-in-2025[34] Exclusive: Cursor acquires code review startup Graphite as AI … https://fortune.com/2025/12/19/cursor-ai-coding-startup-graphite-competition-heats-up/[35] Nvidia unveils new open-source AI models amid boom in … – Reuters https://www.reuters.com/world/china/nvidia-unveils-new-open-source-ai-models-amid-boom-chinese-offerings-2025-12-15/[36] Hochul signs watered down AI regs, but lawmakers still got some wins https://www.cityandstateny.com/policy/2025/12/hochul-signs-watered-down-ai-regs-lawmakers-still-got-some-wins/410328/[37] The top Google Cloud blogs of 2025 https://cloud.google.com/blog/products/gcp/top-google-cloud-blogs-2025/[38] The 5 Biggest AI Stories of 2025 Explained https://dcthemedian.substack.com/p/the-5-biggest-ai-stories-of-2025

Relevante high‑impact issues van de afgelopen dagen

Hieronder alleen signalen die bijna zeker nog operationeel relevant zijn, ook al zijn ze niet vandaag gepubliceerd.

• Cisco Secure Email Gateway / Secure Email & Web Manager

• Actief misbruikte, ongepatchte AsyncOS‑zero‑day met maximale ernstscore (remote code execution, persistent covert channel na compromise).[3][1]

• Vereist o.a. dat functies als Spam Quarantine/SEG extern bereikbaar zijn; mitigatie vraagt snelle hardening en zo mogelijk netwerk‑isolatie.[1]

• WatchGuard Firebox‑firewalls

• Kritieke RCE‑kwetsbaarheid in Fireware OS, door leverancier gemeld als actief misbruikt in het wild.[4][5]

• Tijdelijke mitigatie voor kwetsbare BOVPN‑configuraties: dynamische peers uitschakelen en strengere policies op IP‑alias inzetten.[4]

• VPN‑platformen en perimeter

• Geautomatiseerde campagne met credential‑based aanvallen op o.a. Palo Alto Networks GlobalProtect en Cisco SSL VPN.[2]

• Shadowserver ziet >25.000 Fortinet‑apparaten met FortiCloud SSO blootgesteld, terwijl een kritieke auth‑bypass wordt aangevallen.[2]

• Datadiefstal / ransomware

• Clop richt zich op internet‑exposed Gladinet CentreStack‑fileservers voor data‑diefstal en afpersing.[2]

• University of Sydney: code‑repository‑compromis met diefstal van persoonsgegevens van medewerkers en studenten.[2]

• NIS2 / regelgeving

• In de BleepingComputer‑coverage wordt NIS2 expliciet gekoppeld aan identity & access controls: zwakke wachtwoorden en gebrekkige MFA gelden direct als compliance‑risico.[2]

Praktische acties voor vandaag

• Controleer of Cisco SEG/SEWM, WatchGuard Firebox, Fortinet‑edge en gebruikte VPN‑platformen (GlobalProtect, Cisco SSL VPN) in jouw landschap voorkomen, en valideer patch‑/mitigatiestatus en exposure (internet facing, mgmt‑interfaces).[3][4][1][2]

• Review IAM/MFA‑policies met NIS2‑bril: password‑complexiteit, brute‑force‑bescherming en phishing‑resistente MFA waar mogelijk.[2]

• Valideer logging en detections voor:

• Onverwachte config‑wijzigingen of policy‑mutaties op SEG/VPN/firewalls.[4][1]

• Exfiltratie‑patronen vanaf file‑/backupservers passend bij CentreStack‑ of studenten-/onderzoekssystemen.[2]

Bronnen[1] Cisco waarschuwt voor misbruik van kritiek lek in Secure Email … https://www.security.nl/posting/917812/Cisco+waarschuwt+voor+misbruik+van+kritiek+lek+in+Secure+Email+Gateway[2] BleepingComputer https://www.bleepingcomputer.com[3] News in the Security category – Bleeping Computer https://www.bleepingcomputer.com/news/security/[4] WatchGuard Warns of Active Exploitation of Critical Fireware OS … https://thehackernews.com/2025/12/watchguard-warns-of-active-exploitation.html[5] WatchGuard waarschuwt voor actief misbruikt beveiligingslek in … https://www.security.nl/posting/918068/WatchGuard+waarschuwt+voor+actief+misbruikt+beveiligingslek+in+firewalls[6] Feds Warn iPhone And Android Users: Update Now—Attacks … https://www.forbes.com/sites/zakdoffman/2025/12/16/feds-warn-iphone-and-android-users-update-now-attacks-have-started/[7] Securitybedrijf meldt toegenomen misbruik van kritiek lek in XWiki https://www.security.nl/posting/913341/Securitybedrijf+meldt+toegenomen+misbruik+van+kritiek+lek+in+XWiki[8] CISA Alerts on Active Exploitation of Oracle EBS SSRF Flaw https://cyberpress.org/cisa-alerts-oracle-ebs-ssrf-flaw/[9] Microsoft dicht aangevallen Windows-lek dat aanvaller SYSTEM … https://www.security.nl/posting/916568/Microsoft+dicht+aangevallen+Windows-lek+dat+aanvaller+SYSTEM-rechten+geeft[10] Bleeping Computer https://brutalist.report/source/bleepingcomputer[11] CISA Issues Urgent Alert for Actively Exploited Chrome Zero-Day … https://codekeeper.co/ticker/urgent-cisa-warning-zero-day-chrome-vulnerability[12] organisaties opnieuw aangevallen via beveiligingslek in GeoServer https://www.security.nl/posting/916985/CISA:+organisaties+opnieuw+aangevallen+via+beveiligingslek+in+GeoServer[13] BleepingComputer (@BleepinComputer) / Posts / X – Twitter https://x.com/BleepinComputer[14] Kritiek beveiligingslek in FreeBSD maakt remote code execution … https://www.security.nl/posting/917946/Kritiek+beveiligingslek+in+FreeBSD+maakt+remote+code+execution+mogelijk[15] BleepingComputer (@BleepinComputer) / Posts / X https://x.com/BleepinComputer?lang=en[16] [PDF] Newsletter on system vulnerabilities and cybersecurity news … https://moj.gov.gr//uploads/2025/01/20241220_CVEs-CISA_Alerts-News.pdf[17] Google brengt updates uit voor twee actief aangevallen Android … https://www.security.nl/posting/915499/Google+brengt+updates+uit+voor+twee+actief+aangevallen+Android-lekken[18] Don’t think you need extended updates with Windows 10? The number of security flaws the final patch fixed might change your mind https://tech.yahoo.com/cybersecurity/articles/dont-think-extended-updates-windows-220000569.html[19] BleepingComputer (@BleepinComputer) / X https://x.com/bleepincomputer[20] NCSC waarschuwt voor actief misbruik van kritiek Windows Server-lek https://www.security.nl/posting/910557/Re:+NCSC+waarschuwt+voor+actief+misbruik+van+kritiek+Windows+Server-lek