An urgent notice from the Railway team blog.railway.com/p/security-…

Last week, Cotool teamed up with @ycombinator to host security leaders from @WeAreLegora , @HelloSurgeAI , and @material_sec to talk about building a security org from 0 to 1 in hyper-growth environments. Much of the conversation was around how to get the most leverage out of a lean (or non-existent!) team: starting where you already have buy-in, hiring builders over operators, and using AI agents to take on the noise humans used to spend time triaging. Special thanks to our fantastic panelists @aluveaux, @ffwang2, Rajan Kapoor, and @maxpollard415. And a huge shoutout to @koomen and team for the beautiful space and making the event happen in the first place!

We’re betting our $5.5M seed round that the next leap in AI coding won’t come from OpenAI or Anthropic. It’ll come from a new feedback loop that learns from you. Introducing Beacon: open-source, self-improving memory for coding agents. Your sessions capture how you debug and solve problems. Today, that context gets lost and you have to re-explain things every time you switch tools. Beacon continuously distills your sessions into reusable skills across Claude Code, Cursor, Codex, and 20+ harnesses, so your next agent can learn from the last. Beacon is free and OSS 🌟 github.com/Asymptote-Labs/ag… Why should the frontier labs be the only ones winning with your sessions? You already did the work. Now let your coding agents learn from you.

muse spark open -- weights out today! best US open-source model, and runs on the new mac studio 🍎

@Google is back at the frontier on BlueBench. Gemini 4 Argon debuts at #3 of 24 models overall and #2 in threat hunting. Claude Haiku 5.5 matches Argon in detection engineering at a fraction of the average cost. Some takeaways 🧵

Fascinating reading about how we used to write about malware and viruses back in 1999. In a decade I suspect we'll look back at how we talk about AI safety today and it will feel similar. schneier.com/crypto-gram/arc…

The BlueBench frontier has changed. @AnthropicAI's Sonnet + Opus 5.5 and @Zai_org's GLM-5.3 Flash have displaced @OpenAI's GPT-6 series on score and cost across our defensive security evaluations. Results & where Astra still leads in 🧵

Introducing our inaugural spotlight series on X with @_Shark_byte!! Perly started as an artist; published three times, 35 pieces for startups. Then interned in vulnerability management at Universal Music Group and launched Shark Byte Labs to share her learnings with the community. Now a security analyst at Ramp, she ships on the team and runs CTFs and content on the side. 🧵

We're co-hosting YC Cyber Night with @cotoolai on 10/15, with some great panelists from the security sector. RSVP soon, space is limited. events.ycombinator.com/yc-cy…

@maxpollard415 on what @cotoolai does: it sits above the security stack you already run instead of replacing your SIEM, and helps with rule-based detections, behavior rules can't express, and faster response. Full episode with @WadingThruLogs: simplydefensive.transistor.f…

Blue Team at Machine Speed: Max Pollard (Cotool) on Agentic Defense "There's a lot of marketing noise to say, hey, take the human out of the loop. We've seen very few people hit that run phase." @maxpollard415, CEO and co-founder of @cotoolai, builds AI agents for detection and response, and explains how hard it is to give an agent the autonomy to do real work. He talked to us about what actually stands between a blue team and machine speed response. We get into: > Crawl, walk, run: read only, then an approval hook in Slack, then counting how often the agent was right > Why one blocker is whether the agent knows at runtime that the server it is about to kill powers a million dollars a day > Why Cotool grants API access during config time > Why the audit log has to capture each agent action and whether it acted on someone's behalf TIMESTAMPS (01:00) Scaling detection and response beyond headcount (02:00) Why attackers adopt first: no twelve month compliance review (04:30) Rails, paved roads, off-ramps, and the nine-person team with no security hire (09:30) Do the agents actually take action? Starting read only (11:00) Approval hooks: routing the action to a human in Slack or Teams (12:00) "Take the human out of the loop" is marketing noise (13:50) The trust problem is really a data annotation problem (17:00) What Cotool evaluates: cost, instruction adherence, disposition (19:00) Knowing when agent number 17 of 40 starts drifting (27:00) Agent identity and how RBAC works in Cotool (29:30) Keeping the audit log out of the agent's reach (31:30) Agent trajectory telemetry, and terabytes a month of it (34:30) Coarse-grained APIs and the god mode credential problem (40:00) What's next: auto research loops and digital twins

Today we're releasing BlueBench-Simulation, a brand new benchmark suite evaluating agent performance on defensive cybersecurity tasks against simulated enterprise environments. BlueBench-Simulation is releasing with 12 scenarios across 3 new benchmarks, each covering a different stage of the intrusion lifecycle: - Initial Access & Command-and-Control (C2) - Identity & Active Directory Attacks - Impact & Exfiltration Every scenario is a generated enterprise environment with weeks of routine activity hit by an intrusion. Models start from a single weak alert and produce a threat hunting report, an incident response report, or a detection query. - The most notable result, @spacexai's Grok 4.6 led the suite at 71.8%, taking two of the three benchmarks and finishing first overall on pure capability. - @claudeai Opus 4.8 came in second at 68.9%. We'd expect Anthropic's newer models to do at least as well, but Fable 5, Opus 5, and Sonnet 5 all ran into cybersecurity refusals, so we couldn't get a clean read on them. - The @OpenAI GPT-5.6 model family once again anchored the value end of the Pareto curve More details in thread below ⬇️ Full results: cotool.ai/research

An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.