← Terug naar nieuwsbrief

AI & Security Nieuws – 5 December 2025

Nieuwsbrief

By Djimit* een overzicht voor AI cloud- en security professionals*

De dominante trend vandaag is verdere verankering van frontier‑achtige AI in kritieke infrastructuren en consumentenproducten, terwijl medische en domained AI‑modellen snel de klinische praktijk en zoekinterfaces binnendringen. De beleids- en energiediscussies lopen daar steeds nadrukkelijker achteraan, met zorg over rekenverbruik, regulering en machtsconcentratie.[1][2][3][4][5][6]

1. Google lanceert Gemini 3 in Search

2. Klinisch inzetbare MRI‑triage met self‑supervised model

3. Explosie aan nieuwe AI‑onderzoeken (NeurIPS/ArXiv, 5 december)

4. Energie- en infrastructuurdruk van reasoning‑modellen

5. Europa intensiveert druk op Big Tech rond AI en platforms

6. VS‑debat over AI‑bepalingen in NDAA en chipprioritering

7. Geoffrey Hinton prijst Gemini‑strategie publiekelijk

8. Netwerkinfrastructuur onder druk door AI‑gedreven load

Insight of the Day

Een opvallende convergentie vandaag: dezelfde reasoning‑en agentic‑modellen die in zoekmachines en developer‑tools worden uitgerold, blijken tegelijk de belangrijkste motor achter de groeiende energie- en infrastructuurdruk én nieuwe regulatoire frictie rond data‑ en platformmacht. Dat suggereert dat “efficiënte reasoning” (architectuur, hardware, scheduling) de volgende strategische differentiator wordt, minstens zo belangrijk als pure benchmarkscore.[6][7][2][4][3]

Bronnen[1] Artificial Intelligence Dec 2025 – arXiv https://arxiv.org/list/cs.AI/current[2] The Rise of AI Reasoning Models Comes With a Big Energy Tradeoff https://www.insurancejournal.com/news/national/2025/12/05/850005.htm[3] Three years on, AI’s vibes come up against grid realities https://www.latitudemedia.com/news/three-years-on-ais-vibes-come-up-against-grid-realities/[4] Congress begins final session of 2025 with healthcare … https://finance.yahoo.com/news/congress-begins-final-session-of-2025-with-healthcare-and-a-dash-of-ai-policy-on-the-docket-182732290.html[5] AI model could help radiologists identify brain … https://www.news-medical.net/news/20251205/AI-model-could-help-radiologists-identify-brain-abnormalities-in-MRI-scans.aspx[6] Google launches Gemini 3, embeds AI model into search … https://finance.yahoo.com/news/google-launches-gemini-3-embeds-160128377.html[7] Google says Gemini was its top search term in 2025.… https://www.inkl.com/news/google-says-gemini-was-its-top-search-term-in-2025-what-s-the-hype-behind-its-new-ai-model[8] Artificial Intelligence – arXiv https://arxiv.org/list/cs.AI/recent[9] NeurIPS 2025 Friday 12/5 https://nips.cc/virtual/2025/loc/mexico-city/day/12/5[10] NeurIPS 2025 Friday 12/5 https://neurips.cc/virtual/2025/loc/san-diego/day/12/5[11] Europe forges ahead with Big Tech crackdown with X fine, defying … https://www.reuters.com/sustainability/boards-policy-regulation/europe-forges-ahead-with-big-tech-crackdown-with-x-fine-defying-trump-2025-12-05/[12] European Commission launches antitrust probe into Meta’s … https://www.storyboard18.com/digital/european-commission-launches-antitrust-probe-into-metas-whatsapp-ai-policy-85387.htm[13] Geoffrey Hinton praises Google’s AI efforts, saying ‘ … https://www.businesstoday.in/technology/news/story/godfather-of-ai-geoffrey-hinton-praises-googles-ai-efforts-saying-google-to-overtake-openai-505342-2025-12-05[14] AI Update, December 5, 2025: AI News and Views From the Past … https://www.marketingprofs.com/opinions/2025/54083/ai-update-december-5-2025-ai-news-and-views-from-the-past-two-weeks[15] Toward Human-Centered Artificial Intelligence for Users’ Digital Well … https://humanfactors.jmir.org/2025/1/e69533[16] AI Regulations in 2025: US, EU, UK, Japan, China & More https://www.anecdotes.ai/learn/ai-regulations-in-2025-us-eu-uk-japan-china-and-more[17] Google AI Pro and Ultra subscribers now have higher rate limits for … https://blog.google/feed/new-antigravity-rate-limits-pro-ultra-subsribers/[18] AI-Accelerated Materials Discovery in 2025: How Generative Models … https://www.cypris.ai/insights/ai-accelerated-materials-discovery-in-2025-how-generative-models-graph-neural-networks-and-autonomous-labs-are-transforming-r-d[19] AI Act | Shaping Europe’s digital future – European Union https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai[20] Google says Gemini was its top search term in 2025. What’s the … https://www.euronews.com/next/2025/12/05/google-says-gemini-was-its-top-search-term-in-2025-whats-the-hype-behind-its-new-ai-model[21] EU Artificial Intelligence Act | Up-to-date developments and … https://artificialintelligenceact.eu[22] Banning AI Superintelligence Would Be a Historic Mistake https://datainnovation.org/2025/12/banning-ai-superintelligence-would-be-a-historic-mistake/[23] Computational Intelligence – Wiley Online Library https://onlinelibrary.wiley.com/journal/14678640[24] EU moves to weaken landmark AI Act amid pressure from Trump … https://fortune.com/2025/11/07/eu-ai-act-weaken-regulation-delay-big-tech-trump-government/[25] DeepSeek’s self-correcting AI model aces tough maths proofs – Nature https://www.nature.com/articles/d41586-025-03959-9[26] AI Watch: Global regulatory tracker – United Kingdom https://www.whitecase.com/insight-our-thinking/ai-watch-global-regulatory-tracker-united-kingdom[27] This Week’s Top 5 Stories in AI – AI Magazine https://aimagazine.com/news/this-weeks-top-5-stories-in-ai-5-december-2025[28] CosmicAI Postdoctoral Fellow https://cosmicai.org/jobs/cosmicai-postdoctoral-fellow[29] China’s DeepSeek Releases New AI Model. It’s Surpassing … https://www.marketingaiinstitute.com/blog/deepseek-introduces-new-ai-model?hs_amp=true[30] Summary Artificial Intelligence 2025 Legislation https://www.ncsl.org/technology-and-communication/artificial-intelligence-2025-legislation[31] 📢 Lecture Session at USP | December 5, 2025 – 11h … https://www.instagram.com/p/DR0H0Sak_WV/[32] SoftBank’s Son urges Korea to secure power to brace for … https://www.kedglobal.com/artificial-intelligence/newsView/ked202512050004[33] Most Popular Convolutional Neural Networks Architectures https://towardsdatascience.com/convolutional-neural-networks-most-common-architectures-6a2b5d22479d/[34] 🧠 AI Daily Digest | December 5, 2025 https://www.linkedin.com/pulse/ai-daily-digest-december-5-2025-safwan-alsebaei-o1lnf[35] OpenAI’s Sam Altman declares ‘code red’ to improve … https://finance.yahoo.com/news/openai-sam-altman-declares-code-200219769.html[36] Challenges and Opportunities in Explainable AI: Neural Network … https://santafe.edu/events/challenges-and-opportunities-explainable-ai-neural[37] The Case for AI Doom Rests on Three Unsettled Questions https://www.lawfaremedia.org/article/the-case-for-ai-doom-rests-on-three-unsettled-questions[38] Premium: The Ways The AI Bubble Might Burst https://www.wheresyoured.at/premium-the-ways-the-ai-bubble-might-burst/[39] Where Algebraic Geometry Meets Neural Networks https://math.washington.edu/events/2025-12-05/geometry-and-expressivity-neuromanifolds-where-algebraic-geometry-meets-neural

Kritieke Incidenten

Chinese staatssponsorge APT-groep Warp Panda (ook bekend als APT41) heeft de BrickStorm-malware ingezet op VMware-servers bij Amerikaanse juridische, productie- en technologiebedrijven voor langdurige persistente toegang. CISA waarschuwt expliciet voor deze hoog-evasieve malware in IT- en overheidsnetwerken, met focus op stealthy infiltratie. Deze campagne voldoet aan MITRE ATT&CK-technieken zoals T1550 (Compromise Software Dependencies and Configuration Files) voor persistente toegang.[1][2]

Zero-Day Kwetsbaarheden

NCSC Nederland meldt een kritieke kwetsbaarheid in React en Next.js (CVE-2025-558182), publiek gemaakt op 3 december 2025, met een update op 5 december. Deze high-severity issue vereist directe patching vanwege actieve exploitatie-risico’s in webapplicaties. Geen bijbehorende BleepingComputer-publicatie op exact 5 december, maar gerelateerd aan bredere exploitatie-trends.[3][4][5]

Regelgeving en Overig

Geen grote datalekken of nieuwe APT-campagnes gerapporteerd op security.nl of bleepingcomputer.com specifiek voor 5 december 2025. CSBN 2025 benadrukt diverse dreigingen en cruciale basis-hygiëne, recent gepubliceerd via NCSC. Cyber Resilience Act (CRA) verplicht vanaf september 2026 melding van ernstige issues via NCSC, relevant voor EU-productmakers.[4][6][7][8]

Bronnen[1] US Organizations Warned of Chinese Malware Used for Long-Term … https://www.securityweek.com/us-organizations-warned-of-chinese-malware-used-for-long-term-persistence/[2] Cybersecurity Snapshot: December 5, 2025 | Tenable® https://www.tenable.com/blog/cybersecurity-snapshot-brickstorm-malware-ai-ot-12-05-2025[3] Cybersecurity industry overreacts to React vulnerability, starts panic … https://doublepulsar.com/cybersecurity-industry-overreacts-to-react-vulnerability-starts-panic-burns-own-house-down-again-e85c10ad1607[4] Actueel | Nationaal Cyber Security … https://www.ncsc.nl/actueel[5] Home – Nationaal Cyber Security Centrum https://www.ncsc.nl[6] Products must meet mandatory cybersecurity requirements (CRA) https://business.gov.nl/amendment/mandatory-cybersecurity-requirements-for-products-cra/[7] Security Management, hét platform voor de security professional https://www.securitymanagement.nl[8] Het laatste Beveiligings nieuws van Security.NL – Headliner.nl https://beveiliging.headliner.nl/per-site/a/securitynl/?cmpscreen[9] Data Breaches 2025: Biggest Cybersecurity Incidents So Far https://www.pkware.com/blog/recent-data-breaches[10] Google addresses 107 Android vulnerabilities, including two zero … https://cyberscoop.com/android-security-update-december-2025/[11] APT and financial attacks on industrial organizations in Q3 2025 https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/[12] List of Recent Cybersecurity Data Breaches in 2025 https://www.brightdefense.com/resources/recent-data-breaches/[13] Ankura CTIX FLASH Update – December 5, 2025 https://angle.ankura.com/post/102lwzm/ankura-ctix-flash-update-december-5-2025[14] Google Releases Patches for Zero-Day Flaws Exploited in the Wild https://www.infosecurity-magazine.com/news/google-patches-android-0day/[15] November 2025: Major Cyber Attacks, Ransomware Attacks, Data … https://www.cm-alliance.com/cybersecurity-blog/november-2025-major-cyber-attacks-ransomware-attacks-data-breaches[16] Updates | CSRC – NIST Computer Security Resource Center https://csrc.nist.gov/news[17] Two Android 0-day bugs patched, plus 105 more fixes – The Register https://www.theregister.com/2025/12/02/android_0_days/[18] APT-C-60 Targets Job Seekers with Weaponized VHDX on Google … https://cyberpress.org/apt-c-60-cyberattack/[19] Data Breaches That Have Happened This Year (2025 Update) https://tech.co/news/data-breaches-updated-list[20] The NIS 2 Directive | Updates, Compliance, Training https://www.nis-2-directive.com[21] Google Patches Android 0-Day Vulnerabilities Exploited in the Wild https://cyberpress.org/google-patches-android-0-day-vulnerabilities/[22] Blind Eagle APT-C-36: Tactics and Detection – Darktrace https://www.darktrace.com/blog/patch-and-persist-darktraces-detection-of-blind-eagle-apt-c-36[23] The Most Recent Data Breaches in 2025 – Breachsense https://www.breachsense.com/breaches/[24] Cyber Resilience Act | Shaping Europe’s digital future https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act[25] 3 Cybersecurity Headlines for 12/2/2025 https://www.youtube.com/watch?v=Ijc21Qr-Ngw[26] Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid … https://thehackernews.com/2025/12/weekly-recap-hot-cves-npm-worm-returns.html[27] Nieuws en publicaties – De Alliantie https://www.de-alliantie.nl/over-de-alliantie/meer-weten/nieuws/[28] BleepingComputer (@BleepinComputer) / Posts / X https://x.com/BleepinComputer?lang=en[29] H-ISAC TLP Green: Daily Cyber Headlines – December 5, 2025 | AHA https://www.aha.org/h-isac-green-reports/2025-12-05-h-isac-tlp-green-daily-cyber-headlines-december-5-2025[30] Half miljoen malware-bedreigingen per dag – Computable.nl https://www.computable.nl/2025/12/02/half-miljoen-malware-bedreigingen-per-dag/[31] BleepingComputer https://www.linkedin.com/company/bleepingcomputer[32] December 2025 Android Security Bulletin: Two Zero-Day Flaws … https://socradar.io/december-2025-android-security-bulletin/[33] Gemiddeld 500.000 kwaadaardige bestanden per dag gedetecteerd … https://www.dutchitleaders.nl/news/719449/gemiddeld-500-000-kwaadaardige-bestanden-per-dag-gedetecteerd-in-2025[34] BleepingComputer on X https://x.com/BleepinComputer/status/1980322750557302826[35] Cloudflare outage on December 5, 2025 – Noise https://noise.getoto.net/2025/12/05/cloudflare-outage-on-december-5-2025/[36] Android Zero-Days Patched in December 2025 Security Update https://www.securityweek.com/androids-december-2025-updates-patch-two-zero-days/[37] Actuele Cyberaanvallen / Menu Nieuws & Trends | Cybercrimeinfo.nl https://www.ccinfo.nl/menu-nieuws-trends/actuele-cyberaanvallen

DjimIT Nieuwsbrief

AI updates, praktijkcases en tool reviews — tweewekelijks, direct in uw inbox.