Andy retweeted
Today we’re releasing Sarvam Prism, a System One model built on Sarvam 105B for fast, accurate decisions across enterprise workflows.
It scores 71.8 with a median response time of 44 milliseconds, the highest average score among decision models that respond in under 100 milliseconds.
Andy retweeted
We asked GPT-6 Astra to edit Qwen3.5-0.8B weights to improve math.
It directly changed only 0.016% of weights, fixing 0.8B's reasoning loops & improving math up to 6x and even instruction following 3x, without gradients or training.
We call this Weight-Space Programming: frontier LLMs can now natively read/write neural network weights! 🧵
Blog: rikiyat.github.io/blog/weigh…
Readers added context they thought people might want to know
LLM was given weights explicitly as text in prompt and used code/forward passes (per authors' logs) to ablate Qwen looping direction, a known thinking-mode issue per model card. Primarily fixed repetition in that mode, not general 'natively' improving weights/math.
rikiyat.github.io/blog/weight-sp…
github.com/RikiyaT/lm_und…
huggingface.co/Qwen/Qwen3.5-0…
huggingface.co/RikiyaT/Qwen3.…
Andy retweeted
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
Andy retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Andy retweeted
Modern Warfare 2019-2026 (nice edit by @itsHunterTV )
Andy retweeted
THATS HOW YALL END THE CAMPAIGN @InfinityWard ??
Bro the last time I have sat so stunned and unable to speak while watching the credits in silence was avengers infinity war
And now MW4.
Currently Me:
Andy retweeted
You know, for Graves it was probably the death he wanted. Dying on a mission alongside his boys. I just know, if he‘d ever go out in the field, he‘d want to go out like this. Even tho it felt rushed and I’d much rather have him be alive, I also know he died doing what he loved.
Andy retweeted
Closed source is dead.
REA lets Claude Code or Codex take apart any app, all the way down to the binary, and explain exactly how a feature works.
- Native apps, Electron apps, websites, APKs, firmware, even smart contract bytecode
- Shows the evidence for every claim
- Then builds its own version of the feature
25,000+ GitHub stars in a single day. 100% open-source.
github.com/morluto/rea
Andy retweeted
Multi-dimensional datasets are now live on Myrad!
We're expanding beyond behavioral data into images, video, & audio, starting with images today.
Upload your images, earn points, and get rewarded for the real human data you create.
The next dimension of human data starts now👇
Andy retweeted
We burned 11.7bn tokens to find the best cyber AI model - @AikidoSecurity
aikido.dev/blog/ai-model-ben…
