23 | Building with AI | SDE | DM for work & collabs | https://xitter.cf/t.co/dRIhwjmJi6
Joined October 2022
- Tweets6.9K
- Following2.2K
- Followers17.2K
- Likes24.7K
Asmit retweeted
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
openai.com/index/securing-ou…
Asmit retweeted
Introducing Kimi K3.1 Pro: our most capable 3T-class open-weight model.
🔹 1M-token context, 2.8T total / 104B active params (MoE), Multimodal.
🔹 Full-project coding: games in Unreal, Unity & Godot.
🔹 Excels at parametric 3D modeling in Blender & CAD.
🔹 More reliable at finance work: Accurate modeling with hallucination down by 65%.
🔹 Matching the strongest proprietary models across coding, agentic and knowledge benchmarks.
Kimi K3.1 Pro and K3.1 Pro Highspeed (2–3× faster) are now live on Kimi.ai, Kimi Work, Kimi Code, and the Kimi API.
Open weights by Nov 4, 2026.
🔗 API: platform.kimi.ai
🔗 Tech blog: kimi.ai/blog/kimi-k3-1-pro
Asmit retweeted
Layoff Announcements in 2026:
1. UPS: 30,000 Employees
2. Oracle: 30,000 Employees
3. Amazon: 16,000 Employees
4. Omnicom: 15,000 Employees
5. Meta: 8,000 Employees
6. Microsoft: 4,800 Employees
7. Dow Chemical: 4,500 Employees
8. Cisco: Fewer Than 4,000 Employees
9. American Express: 3,840 Employees
10. Uber: 3,300 Employees
11. Renault: Up to 2,400 Employees
12. Nike: 1,400 Employees
13. General Motors: 1,300 Employees
14. Disney: 1,000 Employees
15. Citigroup: 1,000 Employees
The tech sector alone has seen 135,000 layoffs so far in 2026 across 330 companies.
Amid rising prices and AI adoption, US corporations are looking reduce expenses and increase efficiency.
Keep watching the labor market.
Asmit retweeted
BREAKING: JPMorgan Chase, Bank of America, Wells Fargo, and Morgan Stanley are scrambling after detecting unauthorized AI agents accessing customer bank accounts, contacting call centers, and reportedly attempting actions WITHOUT instructions from account holders, according to Axios.
Asmit retweeted
Starting next week, sessions across Claude web, desktop, and mobile apps will run in auto mode by default on Pro, Max, and Team plans.
Rather than asking you to approve each step, an automated check blocks risky actions. Switch back to manual anytime.
Asmit retweeted
The internet is going into a LOCKDOWN.
Hundreds of millions of websites are potentially at risk from cyberattacks.
Governments, banks and major platforms have already taken their websites OFFLINE.
Many are already calling it “Black October.”
At the centre of the shutdowns is something most of us have never heard of, but use every day.
PHP, the software behind roughly 7 in 10 websites, has two critical flaws that can let hackers break in without a password.
Dubbed PHP2Shell, both are rated 9.2 out of 10 for severity.
Details began circulating on Oct 20. Emergency fixes arrived the next day, but attackers were already moving.
Cloudflare’s CEO says hacking attempts then jumped from thousands to MILLIONS within hours.
Cybersecurity agencies across several countries are telling PHP site owners the same thing: Patch it now, or take it offline.
Websites have gone dark worldwide, from government portals and hospitals to banks.
CrowdStrike warns these attacks leave almost no trace, so some sites may not know if they’ve been hit.
Around 2.6 MILLION internet-facing servers run PHP, potentially hosting hundreds of sites each.
Over 1.1 million use older versions no longer receiving official PHP updates.
Older installations may need an upgrade to a supported PHP version or a fix from their software provider.
And patching does not remove a backdoor an attacker may already have planted.
Cloudflare also says hackers are now tweaking their attacks to try to slip past its protections.
But PHP isn’t the only security story unfolding.
-Japan’s Onamae suspended ALL Desktop Cloud plans after malware was found on customer servers.
-India’s eMudhra had 8 website-certificate keys so weak, one was literally the number “4”.
-State Bank of India confirmed 3,897 customer records on the dark web.
-Criminals used AI agents to break into 400+ Latin American banks.
-Capcom confirmed a breach exposing 11.7 million email addresses.
-GitLab disclosed a 10/10 severity flaw in versions going back to 2014.
-LiteLLM removed a malware-containing release. Railway reported possible exposure of customer secrets.
None of these has a confirmed link to PHP2Shell.
We’re seeing separate breaches unfold together.
The true number of incidents could take months to come out.
The world is still on alert. Attacks are still coming.
Asmit retweeted
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Asmit retweeted
A prospect punched me in the face today.
Most reps would call that a lost deal. I call it the most honest feedback I’ve received all quarter.
Buyers spend all day hiding their objections behind “send me some info” and “let’s circle back next quarter.”
Not this guy. When I showed up at his daughter’s birthday party to follow up on my 14 unanswered emails, he communicated his concerns with total clarity, directly to my jaw.
That’s what real buyer engagement looks like. You don’t get that over Zoom.
I’ve already sent a follow-up thanking him for his candor and proposing 15 minutes next week to align on next steps. Hoping to reconnect as soon as the swelling goes down.
Grateful for prospects who aren’t afraid to be direct.
Asmit retweeted
We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.
It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.
