AI + Lean will be big. I'm bullish AlphaProof.

There’s a world of difference between user-authorized agents (Muse, Instinct, Grokbot, etc.) and true unauthorized/rogue agents that could constitute cyberattacks. Most of the activity described in the Axios story appears to be the former: customers sharing credentials with agents so they can take actions on their behalf. This may violate bank terms requiring humans to log in themselves, but these are in no way cyberattacks. The direction banks should go is to support user-directed agents. For example, Amex is an authorized connection in Muse, making it easy for users to grant, limit, and revoke access. Read-only permission levels are a sensible interim step. Several banks already support or are moving toward them. Full write access (with user credentials) is a different risk category and should be approached carefully. Frightening the public by blurring the line between user-authorized agentic behavior and cyberattacks is irresponsible.

Cyber is going to be one of the most profound aspects of AI. We now have a tireless workforce that can hunt down, discover, patch, or attack any system and software ever created. We will use agents to identify the long standing risks in existing systems and infrastructure. Attackers will use agents to accelerate the discovery of gaps in environments. We will equally use agents to defend attacks and discover anomalous patterns to better protect our data, and much more. We’re entering a new cyber regime, and we’ll probably use 100X more tokens on this loop than we’re imagining right now, because we can scan every log, look at every line of code, look through traffic, and process data at a scale that wasn’t comprehensible before. More than ever, enterprises are going to care deeply about how they manage their networks, systems, software, data, identity, devices, and more. Agents will largely become the solution to these challenges, but they will keep everyone up in the process.

More private keys by the Indian certificate authority have been discovered. These are all small numbers. People are suspecting that they interpreted 384 bit keys to mean that they should pick numbers from 1-384 to use as their private keys.

Empathy is the ultimate UX.

You need an army of agents that won't surrender easily. Historically hiring mercenary armies didn't do well. Use open models!

OpenCode is currently under a sustained cyberattack, and mid-incident they ran into the same problem Hugging Face did: the frontier models they were using for defense began refusing to help fight attacking agents because analyzing the attacks started triggering safety guardrails.

Banks say no to agentic finance Front page of Financial Times says Citi and Bank of America have blocked customers from connecting yield agents to their accounts because "it's not safe and will reduce the banks' ability to provide loans" Current US money market fund yields are between 3.4 and 3.9%. Example: $10k with 3.5% APY will be worth over $14k in 10 years. $10k left in a B of A savings account will be worth $10,010

CLAUDE FOUND THE SEEDS anthropic.com/research/ecdsa…