
@boldstartvc: the Inception fund. Helping the bold start. First check for technical founders. Security, AI infra, physical AI, agents & the weird. What’s 🔥 👇
Miami
Joined January 2009
- Tweets10.8K
- Following3.5K
- Followers20.6K
- Likes35.7K
Pinned Tweet
🔥 up to announce @boldstartvc Fund VII
$250M to back bold technical founders building the autonomous enterprise.
From Inception. Before the world believes.
It always starts with an idea that feels insane… until it isn’t.
🎥👇🧵
AI isn't just making things faster, it's solving problems humans literally couldn't attempt 🤯
parkinson's and alzheimer's targets have been "undruggable" for decades because they don't hold one shape... they dance between thousands. @ToposBio is building the models to see all of them
and they're not just training on public data, they're running their own cellular research in the lab to feed the models
this is AI for humanity
proud @Boldstartvc investor from inception
Topos Bio CEO Ryan Zarcone explains why designing drugs for Parkinson's and Alzheimer's is almost impossible for humans, but a perfect problem for AI:
"When a chemist designs a drug for a protein, the model is static. I have this protein, it has a shape, and I’m trying to fill that shape with a drug."
"These really dynamic proteins, like those involved in Parkinson’s and Alzheimer’s, don’t have one shape. They have potentially thousands of different shapes that they’re constantly interconverting between, kind of like someone who’s dancing."
"That becomes basically impossible when you tell a human, design something for these thousand things at the same time. It’s really only been possible to start doing that with AI."
@ToposBio
healthcare runs on a handful of vendors and every one is a target
the hacks keep coming... banks this morning, now quest 🤯 patient data for half of US hospitals
wonder how epic is doing right now 👀
And just like that more relevant than ever - build for agents, not for humans
Today we announce 1Password for Agents platform, building with companies @Muse, SpaceX Super Intelligence Grok @Bot, @AnthropicAI’s @Claudeai, @OpenAI, @TownAI, @Browserbase, @Browser_use, @heydana_ai, Instinct, @usekernel, @Perplexity_ai, @tryramp, @Tomo, and @wajo_ai, with more integrations on the way. 🎉
We've heard from so many of our customers who want to use these new personal AI agents to help them get more done, but want more control over what the agent can access with the same trust and ease of use they get when using 1Password directly.
1Password for Agents gives your agents access without giving up your passwords. When an agent reaches a sign-in form, it requests a credential from your vault. If you approve the request, 1Password directly auto-fills the credential in the destination site so the agent can’t see or take possession of the credentials.
The agent gets the task done, but it doesn’t get your passwords..
You stay in control. 1Password for Agents free and optional for personal and family accounts. Unless you opt-in to an agent connector, agents cannot touch your vault.
➡️Learn more: bit.ly/487da6J
Ed Sim retweeted
I think this is the clarion call.
Humans will not be able to scale this and respond fast enough or with enough context.
We must build agentic self defense networks
insane 48 hours keeps getting worse... 🤯
banks finding unauthorized AI agents inside customer accounts, some acting on their own, and execs can't tell human from agent or authorized from rogue
every agent needs identity + intent, dynamic, at runtime, scoped to the task and gone the second it's done
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
literally just spoke about this last week 👇 flagged JPM blocking services that rely on customers sharing bank creds w agents... a week later here we are 👀
great recap from @snyksec: snyk.io/blog/ai-security-pan…
xitter.cf/edsim/status/211073004…
fun panel yesterday to kick off @AISecSummit in SF, an unfiltered look at what's happening
hacking is democratized, and only way for defenders to keep up is with more compute but so much has to be built to make it work
some things at inception i'm thinking about - the physical frontier - who's securing the data centers and neoclouds, and the next headache will be billions of new intelligent devices coming online 👀
thanks @dee_bosa for moderating with @mnair1 @snyksec @JohnHultquist + Michael D'Angelo @OpenAI
every one of these agent attacks rides on long-lived creds and over-permissioned apps... short-lived task-scoped access with instant revoke isn't a nice to have anymore 🔥
exactly why we backed @KeycardAI
every one of these agent attacks rides on long-lived creds and over-permissioned apps... short-lived task-scoped access with instant revoke isn't a nice to have anymore 🔥
exactly why we backed @KeycardAI
The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE
Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access.
Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.
sage advice - what happens when AGI shows up in the middle of your AI journey?
seeing this across the board - founders going after hard to solve problems they didn't even think of even a year ago - going to be super cool to see what founders cook up as they start projecting out on the timeline and start building today
also key point - Demis believes that specialized models like an Alphafold should be called by a Claude, for example, as doesn't make sense to fol all those proteins into the model due to regression - so agree here - so many more specialized models to be built
Demis Hassabis said sth here that every builder should hear...
Hard problems are no harder than shallow ones, they're just differently difficult
So if it's going to be hard either way, pick the thing that will really make a difference
And his advice for anyone starting today → imagine AGI showing up halfway through your journey, then build sth that's still useful in that world
Watch the video, every second of it is gold
this is the new era of cybersecurity 🤯 mass scale that's only going to get worse, and zero if not negative time to defend
millions of attempts in a couple hours, some before disclosure even happened... no human SOC keeps up with that, defense has to be agents + compute running 24/7
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Wrote more about this here in August. Insane past 24 hours already for security professionals.
What's 🔥 #510 dropped - post Black Hat
🚨 The agent swarm future is already here. Most of cybersecurity doesn’t see it yet.
The OpenAI/Hugging Face incident made one thing clear: attackers will scale with tokens and compute. Defense must do the same.
Compute fighting compute 👇
Full post here: whatshot.vc/p/whats-in-aiinf…
Cybersecurity needs to build cyber defense factories like developers do. For that also need layer of models of frontier plus post trained own to defend and afford 24/7 compute. Lots to build.
Ed Sim retweeted
Between LiteLLM and php2shell, it’s getting harder to ignore how much we need better controls across development environments and the path to production, including dependency checks, isolation, network controls, and stronger auth like proof of possession.
It’s also why I think we’ll ultimately end up with agent-orchestrated software factories. Identifying what’s affected, containing it, and getting a clean build into production needs to happen faster than we can coordinate manually.
These are the problems we’ve been working through in the software factory reference architecture. Link below 👇
🚨 PHP has released emergency patches for two critical RCE vulnerabilities. Organizations unable to patch are advised to take affected systems offline.
Believe it or not, PHP still runs an enormous amount of the web. And nearly half of #PHP sites run EOL versions.
the music gives you those nintendo vibes - just what an agent is supposed to give you
Legacy modernization is already a tens-of-billions market and growing fast. The bigger unlock comes after: once the buried logic is readable, agents can actually run the workflows that used to sit locked behind opaque mainframe code 🤯
was just a matter of time
Our latest model advances bring stronger capabilities for building and migrating software in low-resource programming languages such as COBOL, Fortran, and Visual Basic.
These languages power software that banks, governments, and businesses depend on. Progress here means understanding decades of business logic and helping developers modernize those systems while preserving what works.
We’re building these capabilities around the challenges developers and enterprise customers bring us. If your team is working on these systems, tell us which languages and workflows we should tackle next.
openai.com/index/low-resourc…
feel for @opencode
exactly what we discussed a couple of days ago...
attackers have agents running 24/7. defenders can't afford to wait to deploy their own.
defense needs more compute, running continuously. human teams alone can't keep pace. time to make the leap even though some things may break
fun panel yesterday to kick off @AISecSummit in SF, an unfiltered look at what's happening
hacking is democratized, and only way for defenders to keep up is with more compute but so much has to be built to make it work
some things at inception i'm thinking about - the physical frontier - who's securing the data centers and neoclouds, and the next headache will be billions of new intelligent devices coming online 👀
thanks @dee_bosa for moderating with @mnair1 @snyksec @JohnHultquist + Michael D'Angelo @OpenAI























