For my last issue of the year, I’m focusing on the AI talent war, which is a theme I’ve been covering since this newsletter launched almost two years ago. And keep reading for the latest from inside Google and Meta this week.
Technology
The AI talent wars are just getting started
But first, I need your questions for a mailbag issue I’m planning for my first issue of 2025. You can submit questions via this form or leave them in the comments.
“It’s like looking for LeBron James”
This week, Databricks announced the largest known funding round for any private tech company in history. The AI enterprise firm is in the final stretch of raising $10 billion, almost all of which is going to go to buying back vested employee stock.
How companies approach compensation is often undercovered in the tech industry, even though the strategies play a crucial role in determining which company gets ahead faster. Nowhere is this dynamic as intense as the war for AI talent, as I’ve covered before.
To better understand what’s driving the state of play going into 2025, this week I spoke with Naveen Rao, VP of AI at Databricks. Rao is one of my favorite people to talk to about the AI industry. He’s deeply technical but also business-minded, having successfully sold multiple startups. His last company, MosaicML, sold to Databricks for $1.3 billion in 2023. Now, he oversees the AI products for Databricks and is closely involved with its recruiting efforts for top talent.
Our conversation below touches on the logic behind Databricks’s massive funding round, what specific AI talent remains scarce, why he thinks AGI is not imminent, and more.
The following conversation has been edited for length and clarity:
Why is this round mostly to help employees sell stock? Because $10 billion is a lot. You can do a lot with that.
The company is a little over 11 years old. There have been employees that have been here for a long time. This is a way to get them liquidity.
Most people don’t understand that this is not going into the balance sheet of Databricks. This is largely going to provide liquidity for past employees, [and] liquidity going forward for current and new employees. It ends up being neutral on dilution because they’re shares that already exist. They’ve been allocated to employees and this allows them to sell those to cover the tax associated with those shares.
How much of the rapid increases in AI company valuations have to do with the talent war?
It’s real. The key thing here is that it’s not just pure AI talent — people who come up with the next big thing, the next big paper. We are definitely trying to hire those people. There is an entire infrastructure of software and cloud that needs to be built to support those things. When you build a model and you want to scale it, that actually is not AI talent, per se. It’s infrastructure talent.
The perceived bubble that we’re in around AI has created an environment where all of those talents are getting recruited heavily. We need to stay competitive.
Who is being the most aggressive with setting market rates for AI talent?
OpenAI is certainly there. Anthropic. Amazon. Google. Meta. xAI. Microsoft. We’re in constant competition with all of these companies.
Would you put the number of researchers who can build a new frontier model under 1,000?
Yeah. That’s why the talent war is so hot. The leverage that a researcher has in an organization is unprecedented. One researcher’s ideas can completely change the product. That’s kind of new. In semiconductors, people who came up with a new transistor architecture had that kind of leverage.
That’s why these researchers are so sought after. Somebody who comes up with the next big idea and the next big unlock can have a massive influence on the ability of a company to win.
Do you see that talent pool expanding in the near future or is it going to stay constrained?
I see some aspects of the pool expanding. Being able to build the appropriate infrastructure and manage it, those roles are expanding. The top-tier researcher side is the hard part. It’s like looking for LeBron James. There are just not very many humans who are capable of that.
I would say the Inflection-style acquisitions were largely driven by this kind of mentality. You have these concentrations of top-tier talent in these startups and it sounds ridiculous how much people pay. But it’s not ridiculous. I think that’s why you see Google hiring back Noam Shazeer. It’s very hard to find another Noam Shazeer.
A guy we had at my previous company that I started, Nervana, is arguably the best GPU programmer in the world. He’s at OpenAI now. Every inference that happens on an OpenAI model is running through his code. You start computing the downstream cost and it’s like, “Holy shit, this one guy saved us $4 billion.”
“You start computing the downstream cost and it’s like, ‘Holy shit, this one guy saved us $4 billion.’”
What’s the edge you have when you’re trying to hire a researcher to Databricks?
You start to see some selection bias of different candidates. Some are AGI or bust, and that’s okay. It’s a great motivation for some of the smartest people out there. We think we’re going to get to AGI through building products. When people use technology, it gets better. That’s part of our pitch.
AI is in a massive growth base but it’s also hit peak hype and is on the way down the Gartner hype curve. I think we’re on that downward slope right now, whereas Databricks has established a very strong business. That’s very attractive to some because I don’t think we’re so susceptible to the hype.
Do the researchers you talk to really believe that AGI is right around the corner? Is there any consensus of when it’s coming?
Honestly, there’s not a great consensus. I’ve been in this field for a very long time and I’ve been pretty vocal in saying that it’s not right around the corner. The large language model is a great piece of technology. It has massive amounts of economic uplift and efficiencies that can be gained by building great products around it. But it’s not the spirit of what we used to call AGI, which was human or even animal-like intelligence.
These things are not creating magical intelligence. They’re able to slice up the space that we’re calling facts and patterns more easily. It’s not the same as building a causal learner. They don’t really understand how the world works.
You may have seen Ilya Sutskever’s talk. We’re all kind of groping in the dark. Scaling was a big unlock. It was natural for a lot of people to feel enthusiastic about that. It turns out that we weren’t solving the right problem.
Is the new idea that’s going to get to AGI the test-time compute or “reasoning” approach?
No. I think it’s going to be an important thing for performance. We can improve the quality of answers, probably reduce the probability of hallucinations, and increase the probability of having responses that are grounded in fact. It’s definitely a positive for the field. But is it going to solve the fundamental problem of the spirit of AGI? I don’t believe so. I’m happy to be wrong, too.
Do you agree with the sentiment that there’s a lot of room to build more good products with existing models, since they are so capable but still constrained by compute and access?
Yeah. Meta started years later than OpenAI and Anthropic and they basically caught up, and xAI caught up extremely fast. I think it’s because the rate of improvement has essentially stopped.
Nilay Patel compares the AI model race to early Bluetooth. Everyone keeps saying there’s a fancier Bluetooth but my phone still won’t connect.
You see this with every product cycle. The first few versions of the iPhone were drastically better than the previous versions. Now, I can’t tell the difference between a three-year-old phone and a new phone.
I think that’s what we see here. How we utilize these LLMs and the distribution that has been built into them to solve business problems is the next frontier.
Elsewhere
- Google gets flatter. CEO Sundar Pichai told employees this week that the company’s drip-drip series of layoffs have reduced the number of managers, directors, and VPs by 10 percent, according to Business Insider and multiple employees I spoke with who also heard the remarks. Relatedly, Pichai also took the opportunity to add “being scrappy” as a character trait to the internal definition of “Googleyness.” (Yes, that’s a real thing.) He demurred on the most upvoted employee question about whether layoffs will continue, though I’m told he did note that there will be “overall” headcount growth next year.
- Meta cuts a perk. File this one under “sad violin”: I’m told that, starting in early January, Meta will stop offering free EV charging at its Bay Area campuses. Keep your heads held high, Metamates.
What else you should know about
- OpenAI teased its next o3 “reasoning” model (yes, “o2” was skipped) with impressive evals.
- TikTok convinced the Supreme Court to hear its case just before its US ban is set to take effect. Meanwhile, CEO Shou Chew met with Donald Trump at Mar-a-Lago to (I’m assuming) get a sense of what his other options are should TikTok lose its case.
- More tech-meets-Mar-a-Lago news: Elon Musk inserted himself into the meeting between Jeff Bezos and Trump. Robinhood donated $2 million to Trump’s inauguration. And Softbank CEO Masayoshi Son pledged to invest $100 billion into AI tech in the US, which happens to be the same number he has floated for a chip venture to compete with Nvidia.
- Apple complained about Meta pressuring the EU to make iOS more compatible with third-party hardware. Anyone who has synced photos from the Ray-Ban Meta glasses to an iPhone will understand why this is a battle that is very important for Meta to win, especially as it gears up to release its own pair of AR glasses with a controller wristband next year.
- Amazon is delaying its return-to-office mandate in some cities because it doesn’t have enough office space.
- Perplexity, which is projected to make $127 million in revenue next year, recently raised $500 million at a valuation of $9 billion. It also acquired another AI startup called Carbon to help it hook into other services, like Notion and Google Docs.
Job board
A few notable moves this week:
- Meta promoted John Hegeman to chief revenue officer, reporting to COO Javier Olivan. Another one of Olivan’s reports, Justin Osofsky, was also promoted to be head of partnerships for the whole company, including the company’s go-to-market strategy for Llama.
- Alec Radford, an influential, veteran OpenAI researcher who authored its original GPT research paper, is leaving but will apparently continue working with the company in some capacity. And Shivakumar Venkataraman, who was recently brought in from Google to lead OpenAI’s search efforts, has also left.
- Coda co-founder and CEO Shishir Mehrotra will also run Grammarly now that the two companies are merging, with Grammarly CEO Rahul Roy-Chowdhury staying on as a board member.
- Tencent removed two directors, David Wallerstein and Ben Feder, from the board of Epic Games after the Justice Department said their involvement violated antitrust law.
- Former Twitter CFO Ned Segal has been tapped to be chief of housing and economic development for the city of San Francisco.
More links
- My full Decoder interview with Arm CEO Rene Haas about the AI chip race, Intel, and more.
- Waymo’s new report shows that its AV system is far safer than human drivers.
- The US AI task force’s recommendations and policy proposals.
- Apple’s most downloaded app of the year was Temu, followed by Threads, TikTok, and ChatGPT.
- Global spending on mobile apps increased 15.7 percent this year while overall downloads decreased 2.3 percent.
If you aren’t already getting new issues of Command Line, don’t forget to subscribe to The Verge, which includes unlimited access to all of our stories and an improved ad experience on the web. You’ll also get access to the full archive of past issues.
As always, I want to hear from you, especially if you have a tip or feedback. Respond here, and I’ll get back to you, or ping me securely on Signal.
Technology
X claims it has stopped Grok from undressing people, but of course it hasn’t
Updates to [@]Grok Account
We have implemented technological measures to prevent the Grok account from allowing the editing of images of real people in revealing clothing such as bikinis. This restriction applies to all users, including paid subscribers.
Additionally, image creation and the ability to edit images via the Grok account on the X platform are now only available to paid subscribers. This adds an extra layer of protection by helping to ensure that individuals who attempt to abuse the Grok account to violate the law or our policies can be held accountable.
Geoblock update
We now geoblock the ability of all users to generate images of real people in bikinis, underwear, and similar attire via the Grok account and in Grok in X in those jurisdictions where it’s illegal.
Technology
Malicious Mac extensions steal crypto wallets and passwords
NEWYou can now listen to Fox News articles!
Mac users often assume they’re safer than everyone else, especially when they stick to official app stores and trusted tools.
That sense of security is exactly what attackers like to exploit. Security researchers have now uncovered a fresh wave of malicious Mac extensions that don’t just spy on you, but can also steal cryptocurrency wallet data, passwords and even Keychain credentials. What makes this campaign especially concerning is where the malware was found, inside legitimate extension marketplaces that many people trust by default.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Once active, GlassWorm targets passwords, crypto wallets, and even your macOS Keychain without obvious warning signs. (Cyberguy.com)
How malicious Mac extensions slipped into trusted stores
Security researchers at Koi Security uncovered a new wave of the GlassWorm malware hiding inside extensions for code editors like Visual Studio Code (via Bleeping Computer). If you’re not familiar with code editors, they’re tools developers use to write and edit code, similar to how you might use Google Docs or Microsoft Word to edit text. These malicious extensions appeared on both the Microsoft Visual Studio Marketplace and OpenVSX, platforms widely used by developers and power users.
FAKE AI CHAT RESULTS ARE SPREADING DANGEROUS MAC MALWARE
At first glance, the extensions looked harmless. They promised popular features like code formatting, themes or productivity tools. Once installed, though, they quietly ran malicious code in the background. Earlier versions of GlassWorm relied on hidden text tricks to stay invisible. The latest wave goes further by encrypting its malicious code and delaying execution, making it harder for automated security checks to catch.
Even though this campaign is described as targeting developers, you don’t need to write code to be at risk. If you use a Mac, install extensions or store passwords or cryptocurrency on your system, this threat still applies to you.
What GlassWorm does once it’s on your Mac
Once active, GlassWorm goes after some of the most sensitive data on your device. It attempts to steal login credentials tied to platforms like GitHub and npm, but it doesn’t stop there. The malware also targets browser-based cryptocurrency wallets and now tries to access your macOS Keychain, where many saved passwords are stored.
Researchers also found that GlassWorm checks whether hardware wallet apps like Ledger Live or Trezor Suite are installed. If they are, the malware attempts to replace them with a compromised version designed to steal crypto. That part of the attack isn’t fully working yet, but the functionality is already in place.
To maintain access, the malware sets itself up to run automatically after a reboot. It can also allow remote access to your system and route internet traffic through your Mac without you realizing it, turning your device into a quiet relay for someone else.
Some of the malicious extensions showed tens of thousands of downloads. Those numbers can be manipulated, but they still create a false sense of trust that makes people more likely to install them.
7 steps you can take to stay safe from malicious Mac extensions
Malicious extensions don’t look dangerous. That’s what makes them effective. These steps can help you reduce the risk, even when threats slip into trusted marketplaces.
1) Only install extensions you actually need
Every extension you install increases risk. If you’re not actively using one, remove it. Be especially cautious of extensions that promise big productivity gains, premium features for free or imitate popular tools with slightly altered names.
2) Verify the publisher before installing anything
Check who made the extension. Established developers usually have a clear website, documentation and update history. New publishers, vague descriptions or cloned names should raise red flags.
These malicious extensions looked like helpful tools but quietly ran hidden code once installed. (Cyberguy.com)
3) Use a password manager
A password manager keeps your logins encrypted and stored safely outside your browser or editor. It also ensures every account has a unique password, so if one set of credentials is stolen, attackers can’t reuse it elsewhere.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.
HOW HACKERS ARE BREAKING INTO APPLE DEVICES THROUGH AIRPLAY
4) Run strong antivirus software on your Mac
Modern macOS malware doesn’t always drop obvious files. Antivirus tools today focus on behavior, looking for suspicious background activity, encrypted payloads and persistence mechanisms used by malicious extensions. This adds a critical safety net when something slips through official marketplaces.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
5) Consider a personal data removal service
When your data leaks, it often spreads across data broker sites and breaches databases. Personal data removal services help reduce how much of your information is publicly available, making it harder for attackers to target you with follow-up scams or account takeovers.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
6) Turn on two-factor authentication (2FA)
Enable 2FA wherever possible, especially for email, cloud services, developer platforms and crypto-related accounts. Even if a password is stolen, 2FA can stop attackers from logging in.
7) Keep macOS and your apps fully updated
Security updates close gaps that malware relies on. Turn on automatic updates so you’re protected even if you miss the headlines or forget to check manually.
Mac users often trust official app stores, but that trust is exactly what attackers are counting on. (Kurt “CyberGuy” Knutsson)
Kurt’s key takeaway
GlassWorm shows that malware doesn’t always come from shady downloads or obvious scams. Sometimes it hides inside tools you already trust. Even official extension stores can host malicious software long enough to cause real harm. If you use a Mac and rely on extensions, a quick review of what’s installed could save you from losing passwords, crypto or access to important accounts.
When was the last time you checked the extensions running on your Mac? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
BMW says electric M3 will be a ‘new level’ of performance
BMW teased its forthcoming all-electric M-series performance sedan today, promising that the quad-motor M3 sports car would feature specs that are truly next level when it arrives in 2027.
The M3 will have four electric motors and simulated gear shifting, a feature that is quickly becoming a must-have for electrified sports cars. BMW says the setup unlocks the benefits of both rear and all-wheel drive, with the ability to decouple the front axle.
The electric M3 will also be built on BMW’s Neue Klasse platform that promises more efficient batteries, lightning fast charging, and higher powered computers. The architecture will be 800-volt, the regenerative braking will be highly efficient, and if the camouflaged pictures are any indication, it will be a real looker on the streets.
Speaking of computers, the M3 will have four of them, unified under its oddly named “Heart of Joy” component that aggregates all the traction, stability, and electric motor management functions of the vehicle. That means when software updates are made available, the vehicle’s brain will be able to receive them over-the-air faster than BMW’s current processors.
The M3’s simulated gear shifting will feature a “newly developed soundscape” that “channels pure emotion.” Like other automakers, BMW is loath to alienate its loyal M-series customers by giving them all the torque but none of the gearing feedback. And now a fake “soundscape” will accompany all that shifting. Porsche, Hyundai, and Dodge are also on board the fake EV gear shifting bandwagon.
-
Montana5 days agoService door of Crans-Montana bar where 40 died in fire was locked from inside, owner says
-
Technology1 week agoPower bank feature creep is out of control
-
Delaware6 days agoMERR responds to dead humpback whale washed up near Bethany Beach
-
Dallas, TX7 days agoAnti-ICE protest outside Dallas City Hall follows deadly shooting in Minneapolis
-
Education1 week agoVideo: This Organizer Reclaims Counter Space
-
Virginia5 days agoVirginia Tech gains commitment from ACC transfer QB
-
Iowa1 week agoPat McAfee praises Audi Crooks, plays hype song for Iowa State star
-
Montana5 days ago‘It was apocalyptic’, woman tells Crans-Montana memorial service, as bar owner detained