Introducing Bitwater: the water heater element that mines Bitcoin. It screws into the electric tank you already have. Physically decentralized mining that runs no matter what 🧵 Heat water. Mine Bitcoin. Same tank.

Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.

if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?

yes that was a bit frustrating mid incident when trying to investigate. they did quite a bit and then started refusing we got access to daybreak blue now so it's better

We gave DeepSeek’s updated V4.1-Flash-1017 the same 100 pull requests with known vulnerabilities and an hour per PR to find them in the @BugBunny_ai VulnPR-100 benchmark. It found 54 for just $7.53, making it the best-performing open-weight model on our leaderboard. That matches Grok 4.6’s 54 findings at roughly 16× lower review cost. It also finishes only three findings behind Gemini 4 Argon while costing roughly 22× less. The previous DeepSeek V4.1 Flash found 44 for $12.79. The update catches 10 more vulnerabilities while costing 41% less, bringing the cost down to just $0.14 per vulnerability found. Better recall, lower cost, and the strongest open-weight result we’ve measured. Seriously impressive work from the @deepseek_ai team.

🚀 DeepSeek-V4.1-Flash-1017 is here! Stronger benchmark performance, faster task completion, and shorter outputs than the previous version—a Pareto improvement in performance and cost. Now live on our website, app, and API. 🛠️ Optimized for @DeepSeekHarness, Tencent CodeBuddy, WorkBuddy, and more. Upgrade to DeepSeek Harness v0.2.1-rc.1 or later for the best experience with the new model. 1/4

I’m going to need a bigger box! 4 more CMP 170HXs just landed. That’s 512GB of HBM2e, at ~1.5TB/s per card. 🔥🔥 CPU: Epyc 7663, 56 cores Motherboard: H12SSL-i RAM: 256GB PC3200 DDR4 SSD: 4TB Gen 4 HDD: 24TB I’ll need some time to rehome this beasty.

Over 400 academics in 30+ countries signed our open letter calling for immediate changes in AI development and deployment practices to ensure that cybersecurity incidents do not continue to occur, as future incidents will be far more damaging to our critical infrastructure.

We gave Google's new Gemini 4 Argon 100 pull requests with known vulnerabilities and an hour per PR to find them in the @BugBunny_ai VulnPR-100 benchmark. It found 57 for $166.40, placing second overall. Only Grok 4.7 found more with 62, but it cost $338.67, just over twice as much. Argon also beat GPT-5.6 Sol by seven findings while costing $114 less. The most interesting result: Argon found a vulnerability missed by every model we had previously tested. That pushes combined benchmark coverage from 89 to 90 of 100 cases. The additional recall is not cheap. mimo-v2.6-pro found 46 for $8.27, while DeepSeek V4.1 Flash found 44 for $12.79. Argon gains another 11 to 13 findings, but at 13 to 20 times the review cost. Still, second place overall and genuinely new coverage is a strong result for Gemini 4 Argon.