Quiet just got 20% quieter Introducing Matic Serene We’ve reimagined our vacuum stack from the ground up to make Matic quieter than ever

BlueChip. Built in America. America made the first electronic computer to win a war. Now we depend on our greatest adversaries to build the computers that run our economy and defend our nation. Today, we bring it home.

Lights out in Austin. First race with @TENEXai on the VF-26. @HaasF1Team's engineers watch the car. Our analysts watch their network. Every alert investigated in seconds, a named analyst on every decision that matters. hubs.ly/Q04CbpL-0 #HaasF1 #USGP hubs.ly/Q04CbpR70

A stronger line of defence🔒 We’re proud to welcome @TENEXai to the team as our Official Cybersecurity Partner in a new multi-year cybersecurity partnership. 🤝 Together, we’re bringing AI-powered security and human expertise to the fast-moving world of Formula 1. #HaasF1 #F1

Today, a16z Crypto is becoming a16z Frontier. Since joining a16z in 2013, @cdixon has focused on technologies that look futuristic well before they reach the mainstream. Those themes led to investments in Oculus, Skydio, Zipline, Coinbase, Solana, and Uniswap. Frontier expands that mandate beyond crypto to back "outer planet" founders who are building new technologies and creating markets that may take years to develop. Chris joins @pmarca, @bhorowitz, and @eriktorenberg to discuss why crypto has become part of the broader tech landscape, why Frontier fills a hole in the firm's architecture, and why they'd rather be too early than too late. They also get into why the gap between AI-native startups and incumbents is the widest Marc has ever seen, how AI could pull forward 20 years of frontier technology, why stablecoins may become the way AI agents pay each other, how AI is breaking the internet's business model, and why today's 18-year-olds are about to become superhumans. 0:50 Introducing a16z Frontier 2:49 Smartphone parts to drones and VR 4:47 Backing the "outer planets" 7:11 Good ideas that look like bad ideas 10:43 The JP Morgan photo in Marc's office 15:13 Good tech ideas eventually work 16:53 AI may pull tech 20 years forward 18:18 The widest AI gap Marc's ever seen 22:06 Workers adopt AI before companies do 26:32 Old use cases vs. AI-native ones 30:08 Beyond "product manager brain" 34:45 AI can reverse engineer any hardware 38:23 The case for open source AI 46:36 How AI breaks the internet's model 49:11 VR, homebrew hacking, multiplayer AI 54:00 If you're 18, study "modern alchemy" YouTube: piped.video/-9XQMHhpypc Not an offer or solicitation. None of the information herein should be taken as investment advice; Some of the companies mentioned are portfolio companies of a16z. Please see a16z.com/disclosures for more information. A list of investments made by a16z is available at a16z.com/portfolio.

The Hottest Space in AI Security Is About to Get Scored, and Most Enterprises Are Racing Toward Disaster Early next year I'm running a structured evaluation of the seven leading AI SOC platforms: TENEX.ai, Prophet Security, Dropzone AI, Conifers.ai, CrowdStrike, Microsoft, and Google. This isn't a vendor bake-off or a sponsored ranking. It's a 20-criterion scorecard covering detection coverage, response time, agentic AI maturity, explainability, model governance, integration, compliance, total cost of ownership, and vendor viability, with critical criteria weighted two to three times and a hard disqualification rule for any platform scoring below six on a critical attribute. The goal is to produce the kind of decision framework enterprises actually need when trusting an autonomous system to make security decisions on their behalf. It'll be interesting to see who comes out on top, and I have my suspicions, but the data will decide. Make no mistake, this is the hottest space in AI security right now. Agentic SOC platforms promise to triage one hundred percent of alerts in under sixty seconds, something no human SOC has ever achieved, and the funding numbers prove the market believes it. But here's what concerns me. Almost every enterprise I talk to is approaching this technology exactly wrong, and many are heading for a disaster that's entirely preventable. They're buying these platforms before they understand what the technology actually does, and more importantly, when not to use it. So let me be clear about the boundary. These platforms are transformative when you have high alert volume that overwhelms your analysts, a well-instrumented environment with a mature SIEM or XDR already in place, and clear human authority over containment actions. They're a disaster waiting to happen when your telemetry is garbage, your detection engineering is immature, or you hand autonomous agents the keys to production systems without guardrails, auditability, and explainability requirements written into the contract. An AI SOC amplifies whatever security posture you already have, including a broken one. Feeding an agentic system noisy, incomplete data doesn't reduce risk, it automates your blind spots and gives you false confidence at machine speed. And an opaque agent that can't explain its verdicts will fail your first serious audit, your first regulator conversation, or your first real incident, and it will fail publicly. There's real risk and threat out there right now, and attackers are moving faster than most defensive procurement cycles. But speed without governance is just a faster path to the wrong answer. Before you sign anything in this category, demand proof of alert coverage, red-team results against their own agents, no-training guarantees on your telemetry, and a contractual explainability standard.

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

Cyber is having a moment Across 21 major software companies, including Apple, AWS, Microsoft, and Google: - Reported critical vulnerabilities never cleared 100 per month in four years - Since spring they've jumped to over 600 per month

.@ArmadinSecurity is a new company that uses AI agents to attack your network before criminals do, finding real exploitable zero-days and eventually patching them autonomously. Their agents map every service, route, and system from the outside, then re-attack whenever something changes. Since January that's uncovered 90+ zero-days at Fortune 500 companies. Kevin Mandia spent 30 years responding to some of the worst breaches in the world and built Mandiant, now a core part of Google Cloud's security arm. He had no plans to start another company until AI arrived and changed everything: in his words, "everything I did is dead." He joins a16z's David George to talk about why he came back and what Armadin is building. In this conversation, they cover what AI attacks look like today, why nation states hack like a sniper and AI hacks like a drone swarm, and why the only defense fast enough to keep up is one with no humans in the loop. 1:05 "Everything I did is dead" 3:10 AI on offense, AI on defense 4:20 What an AI attack looks like today 7:20 Sniper rounds vs drone swarms 10:25 Map everything, attack what changes 14:35 The problem with pen tests 16:40 90+ zero-days at Fortune 500s 18:35 A bad patch beats an intrusion 20:55 Why humans are too slow for the SOC 24:30 Why the next year in cyber won't be pretty 26:30 How Mythos changed the threat 28:15 Caging the attacker Armadin built 30:05 Open and closed models tied on offense 34:40 AI is finding zero-days on its own 35:45 Mandiant in 2004 vs Armadin in 2026 41:20 Why Armadin retrains sales every week YouTube: piped.video/cJsHel27Z6M @ArmadinSecurity @DavidGeorge83

AI agents are taking on more critical work. The security behind them needs stronger boundaries. We’re building the NVIDIA Open Agent Safety Platform with partners across the industry to help people put agents to work with greater confidence. Hear from @JensenHuang:

Today, with over 100 industry partners, we introduced the NVIDIA Open Agent Safety Platform, bringing together OpenShell and Sentry. Artificial intelligence is extraordinary technology that will advance discovery, productivity, security, health, and prosperity for generations to come. But its full promise can only be realized when people have confidence that AI is being built to be safe and deployed with wisdom and responsibility. This is bigger than a single product. It's the beginning of an open ecosystem to build the trust layer for safe agent systems. Together, we are building the foundation of the AI economy. Trust and innovation are not in conflict. Safety is how trust is earned. We must build not only the most capable AI, but the most trusted AI, so that this extraordinary technology can realize its enormous promise for the world. nvda.ws/4hcoq7m

Greg Brockman says OpenAI pointed Astra at its own systems until it ran out of vulnerabilities to find: "We took 25% of our production engineers and said, 'Sorry, all your projects are on hold. You are now defending. You are now up-leveling our security architecture. You're going to use the models to find all the holes.' And we found a number of serious issues, and we fixed them." "We found some new problems, but eventually it saturated. We basically have found, to our knowledge, all of the P0s, all of the critical problems that Astra is smart enough to find. And of course, there will be a new model, there will be a new round." "You want to be in this tight loop of new cyber capability drops, you deploy it against your systems, you find the new holes, and ideally, you've managed to automate this, what we call defense factory. That's what we're building internally." "There are ideas, for example, formally verifying all of software, that are possible with AI." @gdb @bhorowitz