living in the cybersecurity matrix at Outtake
Joined September 2020
- Tweets1.2K
- Following1.7K
- Followers500
- Likes2.8K
Pinned Tweet
We’ve spent the last 3 years going to war with nation-state attackers, bot farms & malicious agentic swarms.
Why?
Outtake’s mission is to build a High-Trust Internet. We believe trusted agent & human collaboration will unlock the next chapter of civilizational growth.
Read about why we build.
Alex Dhillon retweeted
JUST IN: 413 new security flaws discovered which could allow hackers to take control of the brakes & steering of cars across the globe.
Readers added context they thought people might want to know
The study analyzed 413 previously reported (not newly discovered) automotive software vulnerabilities, many in external apps/cloud services, and researchers stated it does not demonstrate they enable remote control of brakes/steering with very few known to be exploited.
sciencealert.com/your-cars-bigg…
link.springer.com/content/pdf/10…
this heuristic is going to drive all of humanity to focus on serious, hard, and high-impact problems
bullish on the future.
Alex Dhillon retweeted
Life is a lot easier once you stop seeing threat actors as hackers who want to break into systems by any means possible, and start seeing them as businesses with well defined business processes.
A bakery isn't going to start making dog food because there's a dog food shortage. ClickFix and Phishing actors aren't going to drop everything to vibecode exploits just because a critical CVE came out.
The fact that the only actors exploiting this are the actors whose MO is exploiting things... isn't a coincidence. It's entirely predictable if you understand threat actor behavior.
Alex Dhillon retweeted
The Pentagon is treating a rash of freezer malfunctions that affected refrigeration and freezer units at commissaries at several U.S. military bases in August as a suspected cyberattack, according to four officials familiar with the matter who spoke to Reuters. The Pentagon said a Cyber Command unit is “working in close coordination with interagency and law enforcement partners” in the ongoing investigation.
At least six on base commissaries were affected in late August, per Reuters’ review of base social media posts. In at least one case, the cooling units’ temperatures were raised overnight, resulting in spoiled food. Fort Huachuca, Arizona, posted that its freezer “went into defrost mode where it heated up all the food.”
One official said investigators have been in touch with French counterparts about a similar attack that hit more than 350 French supermarkets earlier this month.
Source: reuters.com/technology/penta…
Alex Dhillon retweeted
WTF. Cybersecurity firm Sophos says its incident-response team handled SEVEN major incidents in SEVEN days, a workload that normally takes THREE MONTHS.
The WSJ reports security firms are overwhelmed by what insiders call 'Black October.' MoxFive says newly breached companies may have to wait up to FIVE DAYS for help.
Security executives say AI is helping attackers exploit vulnerabilities faster than defenders can respond.
Alex Dhillon retweeted
every launch vid now is like
*cavemen making fire*
*model t*
*wright bros*
*moon landing*
*nuclear bomb detonation*
“every great innovation was once called crazy… that’s why today we’re launching AI-powered automated accounts receivable for operationally complex services businesses”
“Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing.…
… we are not asserting malicious intent.”
lol what.
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
Alex Dhillon retweeted
This is what I want to see. Swarms used for defense.
(because swarms will be used for offense too)
Alex Dhillon retweeted
Worth noting Quest hasn't said yet how many people were affected or what data was taken. Either way, the follow-on risk tends to outlast the headline. A caller who can mention a real test at a real lab is far more convincing than a generic "your account is locked" text, so fake billing notices or lookalike results portals while people wait for breach letters wouldn't be a surprise.
Alex Dhillon retweeted
1/ pretty bad out there. We have to fix the last 50 years of software and internet sloppiness. Faster than adversaries can find the holes, and faster than we ship new ones (with agents!). CVEs went from ~4k a month to ~15k since April. That is not business as usual.
Alex Dhillon retweeted
On the upside: The fact that old bugs are being discovered is a strong indicator for optimism: Old bugs are deep bugs that survived many years of code review. Finding a bunch of old bugs is the clearest indicator that technological progress in bug detecdtion is real.
This is Outtake mission doctrine:
Software Battle versus Trust War
Software Exploits will create an extremely turbulent period for ~2 years and then asymptotically approach 0
Attackers will shift strategies from "hack" to "trick"
Trust Exploits will be the attack.
outtake.ai/our-mission
Alex Dhillon retweeted
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
It's almost like CAPTCHAs & every form of identifying humans online being broken was going to be a real problem Internet integrity - who would have thought?
Certainly this crew.
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Alex Dhillon retweeted
This is how we’re all going to be securing our passwords in another week at this rate.
This is why Outtake's mission is to build a High-Trust Internet
Civilization coordinates & trusts based on the Internet
We took this for granted -- until the AI era. Outtake solves this.
outtake.ai/our-mission
Free alpha for early stage companies — bring on 1-2 emerging VCs who are out to prove their value as much as you are as a founder
@ayeshaaroraa is easily one of the highest impact names on the cap table
Now raising one of the largest solo GP funds in history 🚀
NEW w/ @julia_hornstein: $PANW CEO's daughter Ayesha Arora-Hughes is raising a $100M+ fund to back AI startups. Nikesh Arora is advising her.
theinformation.com/newslette…
