Zoom patches critical Windows flaw with high risk of takeover

Zoom has patched a critical Windows vulnerability that could let attackers fully take control of devices without needing credentials. The flaw, CVE-2025-49457, stems from the app failing to use explicit paths when loading DLLs, allowing malicious files to be executed.

Attackers could exploit this to install malware or extract sensitive data such as recordings or user credentials, even pivoting deeper into networks. The issue affects several Zoom products, including Workplace, VDI, Rooms, and Meeting SDK, all before version 6.3.10.

Zoom urges users to update their app immediately, as the flaw requires no advanced skill and can be triggered with minimal access. However, this highlights the increasing cybersecurity concerns associated with the digital world.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

GenAI app usage up 50% as firms struggle with oversight

Enterprise employees are increasingly building their own AI tools, sparking a surge in shadow AI that raises security concerns.

Netskope reports a 50% rise in generative AI platform use, with over half of current adoption estimated to be unsanctioned by IT.

Platforms like Azure OpenAI, Amazon Bedrock, and Vertex AI lead this trend, allowing users to connect enterprise data to custom AI agents.

The growth of shadow AI has prompted calls for better oversight, real-time user training, and updated data loss prevention strategies.

On-premises deployment is also increasing, with 34% of firms using local LLM interfaces like Ollama and LM Studio. Security risks grow as AI agents retrieve data using API calls beyond browsers, particularly from OpenAI and Anthropic endpoints.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Google launches AI tool offering flexible travellers cheap flights

Google has rolled out Flight Deals, a new AI‑powered tool for flexible, budget‑conscious travellers within Google Flights. It allows users to type natural‑language descriptions of their ideal trip, such as favourite activities or timeframe, and receive bargain flight suggestions in return.

Powered by Gemini, the feature parses conversational inputs and taps real‑time flight data from multiple airlines and agencies.

The tool identifies low fares and even proposes destinations users might not have considered, ranking options by percentage savings or lowest price.

Currently in beta, Flight Deals is available in the US, Canada, and India without special opt‑in. It is also accessible via the Google Flights menu.

Traditional Google Flights remains available, with a new option to exclude basic economy fares in the US and Canada.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Employees of OpenAI eye multi-billion dollar stock sale

According to a source familiar with the talks, OpenAI employees are preparing to sell around $6 billion worth of shares to major investors, including SoftBank Group and Thrive Capital.

The deal, still at an early stage, would push the company’s valuation to $500 billion, up from its current $300 billion.

SoftBank, Thrive and Dragoneer Investment Group are already among OpenAI’s backers, and their participation in the secondary share sale would further strengthen ties with the Microsoft-supported AI company.

Reports suggest the size of the sale could still change as discussions continue.

The planned deal follows SoftBank’s leadership role in OpenAI’s $40 billion primary funding round earlier this year. Employee share sales often reflect strong investor demand and highlight the rapid growth of companies in competitive markets.

OpenAI has seen user numbers and revenues soar in 2025, with weekly active ChatGPT users climbing to about 700 million, up from 400 million in February.

The company doubled its revenue in the first seven months of the year, hitting an annualised run rate of $12 billion, and is expected to reach $20 billion by the end of the year.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

New OpenAI hire shares savvy interview strategies

Bas van Opheusden, who joined OpenAI as a technical staff member in July, has published a comprehensive eight-page guide for aspiring applicants, offering strategic advice spanning recruiter calls, coding interviews, compensation discussions and more.

He suggests treating recruiter conversations as strategic briefings, which are key for understanding the hiring manager’s priorities, team dynamics, role expectations, and organisational goals.

Van Opheusden recommends taking notes during calls, ideally using a dual-screen setup, and arranging windows so it appears you’re maintaining eye contact.

He also shared a standard error: arriving at coding interviews without remembering the exact role he’d applied for, underscoring the importance of clear preparation and role alignment.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

UK estate agents adopt AI tools to offset hiring challenges

UK property agents are increasingly leveraging AI and automation to tackle a growing skills shortage in the sector, according to an analysis by PropTech provider Reapit.

Reapit’s Property Outlook Report 2025 shows that although agencies continue hiring, most face recruitment difficulties: more than half receive fewer than five qualified applicants per vacancy. Growth in payrolled employees is minimal, and the slowest year-on-year rise since May 2021 reflects wider labour market tightness.

In response, agencies are turning to time-saving technologies. A majority report that automation is more cost-effective than expanding headcount, with nearly 80 percent citing increased productivity from these tools.

This shift towards PropTech and AI reflects deeper structural pressures in the UK real estate sector: high employment costs, slower workforce growth, and increasing demands for efficiency are reshaping the role of technology in agency operations.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Candidates urged to balance AI support with integrity

Taylor Wessing has released guidance for early-career applicants on using AI tools such as ChatGPT, Copilot, Claude and Bing Chat during the application process. The firm frames AI as a helpful ally, not a shortcut, and emphasises responsible and authentic use.

AI can assist with refining cover letters, improving structure, and articulating motivations. It can also support interview preparation through mock question practice and help candidates deepen their understanding of legal issues.

However, authenticity is paramount. Taylor Wessing encourages applicants to ensure their work reflects their voice. Using AI to complete online assessments is explicitly discouraged, as these are designed to evaluate natural ability and personal fit.

According to the firm, while AI can bolster readiness for training schemes, over-reliance or misuse may backfire. They advise transparency about any AI assistance and underscore the importance of integrity throughout the process.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Top cybersecurity vendors double down on AI-powered platforms

The cybersecurity market is consolidating as AI reshapes defence strategies. Platform-based solutions replace point tools to cut complexity, counter AI threats, and ease skill shortages. IDC predicts that security spending will rise 12% in 2025 to $377 billion by 2028.

Vendors embed AI agents, automation, and analytics into unified platforms. Palo Alto Networks’ Cortex XSIAM reached $1 billion in bookings, and its $25 billion CyberArk acquisition expands into identity management. Microsoft blends Azure, OpenAI, and Security Copilot to safeguard workloads and data.

Cisco integrates AI across networking, security, and observability, bolstered by its acquisition of Splunk. CrowdStrike rebounds from its 2024 outage with Charlotte AI, while Cloudflare shifts its focus from delivery to AI-powered threat prediction and optimisation.

Fortinet’s platform spans networking and security, strengthened by Suridata’s SaaS posture tools. Zscaler boosts its Zero Trust Exchange with Red Canary’s MDR tech. Broadcom merges Symantec and Carbon Black, while Check Point pushes its AI-driven Infinity Platform.

Identity stays central, with Okta leading access management and teaming with Palo Alto on integrated defences. The companies aim to platformise, integrate AI, and automate their operations to dominate an increasingly complex cyberthreat landscape.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

OpenAI’s GPT-5 faces backlash for dull tone

OpenAI’s GPT-5 launched last week to immense anticipation, with CEO Sam Altman likening it to the iPhone’s Retina display moment. Marketing promised state-of-the-art performance across multiple domains, but early user reactions suggested a more incremental step than a revolution.

Many expected transformative leaps, yet improvements mainly were in cost, speed, and reliability. GPT-5’s switch system, which automatically routes queries to the most suitable model, was new, but its writing style drew criticism for being robotic and less nuanced.

Social media buzzed with memes mocking its mistakes, from miscounting letters in ‘blueberry’ to inventing US states. OpenAI quickly reinstated GPT-4 for users who missed its warmer tone, underlining a disconnect between expectations and delivery.

Expert reviews mirrored public sentiment. Gary Marcus called GPT-5 ‘overhyped and underwhelming’, while others saw modest benchmark gains. Coding was the standout, with the model topping leaderboards and producing functional, if simple, applications.

OpenAI emphasised GPT-5’s practical utility and reduced hallucinations, aiming for steadiness over spectacle. At the same time, it may not wow casual users, its coding abilities, enterprise appeal, and affordability position it to generate revenue in the fiercely competitive AI market.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

Seedbox.AI backs re-training AI models to boost Europe’s competitiveness

Germany’s Seedbox.AI is betting on re-training large language models (LLMs) rather than competing to build them from scratch. Co-founder Kai Kölsch believes this approach could give Europe a strategic edge in AI.

The Stuttgart-based startup adapts models like Google’s Gemini and Meta’s Llama for medical chatbots and real estate assistant applications. Kölsch compares Europe’s role in AI to improving a car already on the road, rather than reinventing the wheel.

A significant challenge, however, is access to specialised chips and computing power. The European Union is building an AI factory in Stuttgart, Germany, which Seedbox hopes will expand its capabilities in multilingual AI training.

Kölsch warns that splitting the planned EU gigafactories too widely will limit their impact. He also calls for delaying the AI Act, arguing that regulatory uncertainty discourages established companies from innovating.

Europe’s AI sector also struggles with limited venture capital compared to the United States. Kölsch notes that while the money exists, it is often channelled into safer investments abroad.

Talent shortages compound the problem. Seedbox is hiring, but top researchers are lured by Big Tech salaries, far above what European firms typically offer. Kölsch says talent inevitably follows capital, making EU funding reform essential.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!