Last week's news but still ongoing. 39% of publicly exposed web apps may be affected, with vibe-coded apps at even higher risk because many rely on default framework setups. A maximum-severity security flaw has been disclosed in React Server Components and Next.js that can allow unauthenticated attackers to gain full control of a vulnerable server via a single crafted request. In practical terms, this means potential access to your environment variables, secret keys, databases and backend logic. If you have any public apps: (1) check whether they use Next.js or any framework with server-side components, (2) verify whether your version falls within the affected releases, and (3) upgrade immediately to a patched version and redeploy. Non-vibe-coded apps can be affected as well. Edit: Hacker activity is massive now, to exploit this vulnerability. If your app has this door wide open, they WILL walk in freely. Severity: 10.0 (Critical) Impact: Full system compromise Target: mass exploitation. If you're not tech and have vibe-coded an app, read the comment below by @Alya Naters More info: I can't provide links because they're not allowed in this group, you can google up Security Advisory: CVE-2025-66478.

Open any AI tool. It doesn't matter which one! Type this prompt: “Ask me one question at a time to understand what I do, and when you have enough information, clearly explain how you can help me.”

📝 TL;DR EU regulators have opened an antitrust investigation into Meta over how it runs AI inside WhatsApp, accusing it of squeezing out rival AI assistants. This is not just Big Tech drama; it is a serious signal about how tightly governments plan to police AI platforms. 🧠 Overview The European Commission has launched a formal antitrust probe into Meta’s use of AI in WhatsApp. At the core of the case is a policy that could limit or block rival AI chatbots from operating inside the app, potentially giving Meta’s own assistant a big advantage. Smaller AI startups have complained that this shuts them out of millions of users and kills competition before it can grow. 📜 The Announcement On December 4, 2025, the European Commission confirmed it is investigating whether Meta is abusing its dominant position with the rollout of Meta AI inside WhatsApp across European markets. Regulators say a new policy, fully applicable from January 15, 2026, could restrict competing AI providers from reaching users through WhatsApp. Italy’s competition authority is already running a parallel investigation, and if Meta is found to have broken EU antitrust rules it could face fines of up to 10% of its global annual turnover. ⚙️ How It Works → Meta AI is built into WhatsApp - Meta has integrated its own AI assistant directly into the WhatsApp interface, so users can chat with it inside the app. That gives Meta a powerful default position in one of the world’s most widely used messaging platforms. → New policy could block rival AI assistants - The investigation focuses on Meta’s policy that could limit or block third party AI chatbots from using WhatsApp to reach users. Startups say this effectively cuts off their access to a huge distribution channel while promoting Meta’s own assistant instead. → Complaints from smaller AI companies triggered the probe - AI startups behind assistants like Poke.com and other European chatbots have taken their grievances to Brussels. They argue that without intervention, millions of users will never see alternative AI options inside WhatsApp.

📝 TL;DR OpenAI is taking an ownership stake in a holding company called Thrive and embedding its own engineers directly inside accounting and IT service firms. This is a live experiment in what happens when AI is not just bolted on, but wired into how a business actually runs day to day. 🧠 Overview Thrive buys traditional service businesses like accounting firms and IT providers, then rebuilds them around better data and AI. OpenAI is going beyond a normal vendor relationship. it is taking equity in the platform, sending in its own teams, and co-designing tools with frontline staff. For everyone watching from the outside, this is a test case for what “serious” enterprise AI transformation might actually look like in the real world. 📜 The Announcement It was reported that OpenAI will take an ownership stake in Thrive Holdings, a platform company set up to modernise day to day service businesses. Thrive’s first two big bets are an accounting group and an IT services provider, backed by commitments in the hundreds of millions of dollars. OpenAI will embed research, product, and engineering teams inside these companies to build custom tools for high volume, rules based workflows, with the goal of creating a repeatable model that can be extended to other industries. ⚙️ How It Works 👉 Buy the workflows, not just the licenses Thrive acquires firms that already sit in the middle of essential processes like tax, bookkeeping, and IT support. Instead of selling them generic AI, it rebuilds how they operate from the inside. 👉 Embed OpenAI teams inside the business OpenAI is assigning researchers, product managers, and engineers directly into Thrive’s portfolio companies, working alongside accountants and IT staff. The people building the models see the messy reality of tickets, deadlines, and client requests in real time. 👉 Target high volume, rules driven tasks first

New research just dropped that analyzed over 844 different work tasks across 104 occupations. They surveyed 1,500 actual workers doing these jobs and asked them a simple question: "What do you want AI to help with?" The results were surprising, and they tell us something important about what's really happening with AI in the workplace. Here's what the data shows: Workers are willing to let AI handle 46% of their tasks. But not the tasks you'd expect. They don't want AI to replace them. They want AI to remove the friction that keeps them from doing their actual job well. What workers want automated most: Repetitive tasks that follow the same pattern every time (46.6% said this) Stressful tasks that drain their energy (25.5% said this) Tasks that take time away from more valuable work (69.4% said this, the top reason) Notice what's NOT on that list? The interesting parts of their work. The creative decisions. The human interactions. The strategic thinking. Here's what's actually happening: AI isn't eliminating jobs. It's eliminating the parts of jobs that make people say "I didn't go to school for this" or "This isn't what I signed up for." A perfect example: accountants don't want AI to replace their role. But they absolutely want AI to handle data entry, invoice processing, and repetitive reconciliation tasks. That's not what accounting is supposed to be about. That's just the administrative overhead that prevents them from doing actual financial analysis and strategic planning. Same with designers. They don't want AI designing for them. But they definitely want AI to handle resizing images for different platforms, formatting presentations, and doing the tedious production work that takes time away from creative conceptualization. The uncomfortable truth: The workers most worried about AI aren't worried about losing their jobs. They're worried about losing control and trust. The research found that 45% of workers are concerned about lack of trust in AI decisions. They want oversight. They want the ability to review and adjust. They want AI to handle tasks, not make final calls on important matters.