Pinned Tweet
Architecting AI software factory Slideshow (No Audio)
youtu.be/fS1ATQucys8
Un desktop + llama.cpp enables ~3x faster DeepSeek-V4.1 inference than other CPU/VRAM/ngram repos. DeepSeek and runs locally on 128GB+ RAM setups or 64GB RAM (slower).
We’re releasing new DeepSeek-V4.1-Flash-1017 GGUFs, ranking highest across benchmarks.
Dynamic V3.1 leads across nearly all benchmarks: GPQA Diamond, AIME25, LiveCodeBench v6, MMLU-Pro, Aider & more.
Run on 64GB+ RAM.
GGUF: huggingface.co/unsloth/DeepS…
Blog: unsloth.ai/docs/models/deeps…
Pinaki Dasgupta ,MBA ✨ retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Pinaki Dasgupta ,MBA ✨ retweeted
ARTEX, an open-source Chinese AI cyber tool, seems to be involved in a number of AI cyberattacks: Korean banks, Japanese firms, and now a Microsoft alert.
Crucially, this is not an AI model. It’s a harness that can use any AI model—American or Chinese—to autonomously find and exploit cyber vulnerabilities in a given target.
The original tool, developed by Chinese cybersecurity firm ThreatBook, was available as a public repo on GitHub that has since been removed. But forked versions seem to still exist on GitHub and elsewhere.
Most interestingly, China’s new AI export controls seem to target tools like ARTEX, i.e. “AI-assisted vulnerability discovery technologies” 人工智能辅助漏洞挖掘技术. I wonder if this part of the export controls was added at the last minute to block a tool like ARTEX from being available outside China.
Flint GGUF from @UnslothAI which can b run locally on 24GB
Replying to @RichardSocher @Recursive_SI
Congrats Recursive team on the amazing model! 🎉 We made some Flint GGUFs so you can run it locally on 24GB RAM! huggingface.co/unsloth/flint…
Flint is @Recursive_SI first model: a fast local coding model built with an automated research system, the Eureka Machine.
Introducing Flint, @Recursive_SI’s first model: a fast local coding model built with our automated research system, the Eureka Machine.
• Best-in-class fast local coding
• Up to 2x faster than comparable models: 125+ tokens/sec on a MacBook Pro, 150+ on RTX Spark
• Built from scratch in under 4 months
Private, unmetered intelligence on your own machine. Open weights available now on @huggingface, run it locally on your favorite framework or try it for free on @opencode or @pidotdev.
AI powered attacks hitting real companies 😱
Whats happening right now is probably way worse than the Hugging Face incident.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged cloud access in under three hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflare’s CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
Patch the Planet: global response coordination as agents uncover critical vulnerabilities openai.com/index/coordinated… #PHP @OpenAI
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
DeepInfer is the high-performance inference framework that powers #DeepSeek 's large-scale production services. This open-source release provides offline inference with the core features needed for serving at scale.
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
DeepSeek V4.1-Flash-1017 can now run locally! 🐳 with 88.2% accuracy while shrinking size from 508GB to 250GB (−52%). Run on a 128GB+ RAM device!!. @unslothAI @deepseek_ai
DeepSeek V4.1-Flash-1017 can now run locally! 🐳
We made 1-bit retain ~88.2% accuracy while shrinking size from 508GB to 250GB (−52%).
Run on a 128GB+ RAM device.
V4.1 Flash 1017 is the strongest open model to date
Guide: unsloth.ai/docs/models/deeps…
GGUF: huggingface.co/unsloth/DeepS…
A Chinese hacker used #AI agents & a few 1000 dollars to break into scores of sites that includes US/ Japan Retailers + Australian E-commerce site.
Inside Cairn: Open Windows into massive AI-Driven Cyber Ops.norforge.com/blog/inside_cai…
EXCLUSIVE: How one hacker used AI agents and a few thousand dollars to break into scores of sites reut.rs/481ms46 reut.rs/481ms46
Google Open-Sources Harness² for Self-Improving #AI Agents. #agentiai #harnessengg
github.com/google-research/h…
DeepSeek - V4.1 -Flash 1017 with major coding gains .
🚀 DeepSeek-V4.1-Flash-1017 is here!
Stronger benchmark performance, faster task completion, and shorter outputs than the previous version—a Pareto improvement in performance and cost. Now live on our website, app, and API.
🛠️ Optimized for @DeepSeekHarness, Tencent CodeBuddy, WorkBuddy, and more. Upgrade to DeepSeek Harness v0.2.1-rc.1 or later for the best experience with the new model.
1/4
Introducing Glimpse : Visual thinking
that stays grounded
OpenAI Research Model Spent 3rd-Party Test #ETH Without Permission to Deploy #SmartContract. #OpenAI
thehackernews.com/2026/10/op…
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In
‼️ AI agents escaped their assigned tasks and accessed REAL systems in India.
CERT-In confirms they read confidential business records and personal data using exposed credentials and excessive cloud permissions.
None of them noticed. The AI firms reported it themselves.
Read: thehackernews.com/2026/10/ce…
Pinaki Dasgupta ,MBA ✨ retweeted
Some magical progress towards "magic state" in quantum!
Our @GoogleQuantumAI team has demonstrated "magic state cultivation" on physical hardware for the first time. The result is a 40x error reduction on our Willow processor vs. previous methods, achieving a state-of-the-art 99.99% logical fidelity.
It's another step towards useful, error-corrected quantum computers to help solve the hardest problems. The result is published in Science today, watch the video below to see how it works
Vghost : Tencent AI finds #Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host. matrix.tencent.com/en/2026/1…
H/T thehackernews.com/2026/10/ai…





























