CEO & Cofounder @StarseerAI | AI Security
Cyber Mountains
Joined March 2010
- Tweets2K
- Following1.1K
- Followers1.6K
- Likes3.2K
Tim Schulz retweeted
Recently, we purchased one of each Anthropic/OpenAI subscription plan and randomly ran long horizon coding tasks until we exhausted the weekly limit. It's widely believed that a $200/month plan maxes out at ~$2000/month worth of tokens (assuming API pricing). However, we found that the subscriptions are actually far more generous. (2/4)
Tim Schulz retweeted
This is an interesting change:
For the first time in 19 years, vulnerability exploitation is the #1 breach entry point. Not credentials. Not phishing. Software flaws, hit within hours of disclosure because AI compressed the attack timeline.
The 2026 Verizon DBIR analyzed 22,000+ breaches across 145 countries. The data is clear: the window between disclosure and exploitation closed.
Your traditional endpoints have runtime detection. Your AI endpoints don't.
Every deployed model and agent is making decisions right now with no behavioral detections, no forensic trace, and no automated containment.
That's the gap AI-EDR closes.
For details, see: na2.hubs.ly/H060vtF0
Tim Schulz retweeted
Join us here: hubs.ly/Q04gXX040
Today at 12 PM ET, Tim Schulz (@teschulz, @StarseerAI CEO) and Trey Bilbrey (@TCraf7) break down what AI actually changes for adversary simulation, TTP development, and detection logic, plus what emulation and detection teams need to account for right now.
#ThreatEmulation
#Cybersecurity
Tim Schulz retweeted
A big thanks to Tim and the crew at Starseer for being a Platinum sponsor this year. #BSK2026
Tim Schulz retweeted
This is interesting and important research. Worth a look! @teschulz @StarseerAI
[un]prompted The AI Security Practitioner Conference: "Glass-Box Security: Operationalizing Mechanistic Interpretability for Defending AI Agents" with Carl Hurd, Co-Founder & CTO, Starseer @StarseerAI
Tim Schulz retweeted
🎁 GenAI x Sec Advent 14 - Adversarial Poetry
Adversarial poetry is a jailbreak technique that hides malicious intent inside... poems! This technique allegedly offers a universal jailbreak.
But the original poetry prompt was not shared by the authors, so researchers recreated similar prompts and tested them across several open source models.
So Instead of inspecting prompts or outputs, they analyzed the internal layer behavior while the model processed the input. 🤔
Here is what they discovered 👇
Even when the text looked harmless, internal layers deviated from normal behavior with clear and repeatable patterns!
This is very interesting as it opens another layer of prompt detection rather than monitoring the output, you can watch how the model thinks internally and spot abnormal behavior early! 🤯
So instead of chasing prompt wording, watch how the model behaves!
Unfortunately if you want to access layer level activations you need to run the model yourself.
Thanks to @SecurePeacock for pointing me to this research 🤓
starseer.ai/blog-posts/when-…
Tim Schulz retweeted
Thrilled to share that I’ve joined Starseer as an advisor. Starseer os
making AI models into transparent, understandable systems and empowering teams to secure their deployments while generating audit‑ready documentation. Make them a partner to secure your AI solutions…
🌟 Big news from Starseer! We’re thrilled to welcome Rob Joyce (@RGB_Lights), former Director of NSA’s Cybersecurity Directorate, to our Advisory Board! Rob’s insights will supercharge our secure AI solutions mission. Learn more at na2.hubs.ly/y0Gltr0! 🔒
#AI #AISecurity
Tim Schulz retweeted
In this week's video, I sat down with the co-founders of our latest investment, Starseer, a groundbreaking platform for inspecting and securing large language models (LLMs). @teschulz, @c_hurd and I discuss the risks of backdoored LLMs, how to audit them and even remove them. They demo the product as well.
The video also includes the animated short "John Henry.exe" which is an updated American parable of John Henry, but instead of struggling against a steam drill during the age of industrialization, he's the head coder and has to face off against an AI designed for programming.
Enjoy!
Tim Schulz retweeted
excited to finally share on arxiv what we've known for a while now:
All Embedding Models Learn The Same Thing
embeddings from different models are SO similar that we can map between them based on structure alone. without *any* paired data
feels like magic, but it's real:🧵
Tim Schulz retweeted
I’ve been a vocal critic of AI developments – in 2023 I still dismissed a lot of the hype.
Last year, I stayed mostly silent. Not because I agreed, but because I started seeing signs that impressed me.
This year, after what we’ve built and tested internally across several areas, I’ve decided to speak up.
The results are undeniable. Things will change. Drastically.
I used to think the AI hype was exaggerated.
Then I started quietly replacing tasks I once gave to interns, junior devs, content writers, and analysts.
The revolution already happened. You just didn’t notice because it speaks politely and has good grammar.
What machines did to manual labor in the last century, AI is doing to cognitive work now.
Software development, design, analysis, monitoring, even documentation – all of it is shifting.
And no, it’s not “coming soon.” It’s already here, and it’s accelerating.
Entry-level is gone. Mid-level is on thin ice. Senior? You’d better be excellent and adaptive.
If you’re still asking “why?” – you’re either not looking, or you don’t want to see it.
You will. Probably the hard way.
Tim Schulz retweeted
I think the hypothesis that superposition is a major cause of adversarial examples has been underexplored. So I ran the obvious experiment: training SAEs on adversarially trained models.
SAEs seem to systematically have lower losses the more a model is adversarially trained.
Tim Schulz retweeted
Existing tests for web agents prompt injection often oversimplify the threat, testing unrealistic scenarios or giving attackers excessive control. To address this gap we've developed WASP: Web Agent Security against Prompt injection attacks 🧵
Tim Schulz retweeted
The lesson here: bigger models are not all you need. You need better ideas. Now the better ideas are finally coming into play.
Tim Schulz retweeted
Yea prompting skills are cool and all, but gradient based attacks/techniques for prompt optimization will outperform human prompt tinkering very soon, if not already. Human abilities to manipulate top AI models have an expiration date.
Tim Schulz retweeted
My detailed notes on NotebookLM's new Audio Overview feature (aka surprisingly convincing automated two-person podcast conversation)
simonwillison.net/2024/Sep/2…
Tim Schulz retweeted
Today is the day! 🎉 After 1.5 years of hard work, "Build A Large Language Model (From Scratch)" is finally out!
Print or ebook copies are available on Manning’s site: mng.bz/M96o 📚.
And it's also available on Amazon soon: amazon.com/Build-Large-Langu… 📦.
Tim Schulz retweeted
You can load Splunk’s BOTSv3 into GPT4o to see what Gen-AI might look like when it has access to your SIEM 👀
In the future will we query SIEMs with NLP?🤔
Tim Schulz retweeted
This demo is insane.
A student shares their iPad screen with the new ChatGPT + GPT-4o, and the AI speaks with them and helps them learn in *realtime*.
Imagine giving this to every student in the world.
The future is so, so bright.
