Professional Goal-Post mover. Parody account.
Joined June 2009
- Tweets16.9K
- Following4.3K
- Followers991
- Likes167K
Inverse Gary Marcus ⏫ retweeted
The most prescient AI forecasters I know:
* Carl Shulman
* Daniel Kokotajlo (What 2026 looks like, AI 2027)
* Leopold (Situational Awareness)
* Ryan Greenblatt (#2 in 2025 forecasting competition)
All seem to expect broadly beyond-human AI 2028-2029.
Inverse Gary Marcus ⏫ retweeted
Today we announce 1Password for Agents platform, building with companies @Muse, SpaceX Super Intelligence Grok @Bot, @AnthropicAI’s @Claudeai, @OpenAI, @TownAI, @Browserbase, @Browser_use, @heydana_ai, Instinct, @usekernel, @Perplexity_ai, @tryramp, @Tomo, and @wajo_ai, with more integrations on the way. 🎉
We've heard from so many of our customers who want to use these new personal AI agents to help them get more done, but want more control over what the agent can access with the same trust and ease of use they get when using 1Password directly.
1Password for Agents gives your agents access without giving up your passwords. When an agent reaches a sign-in form, it requests a credential from your vault. If you approve the request, 1Password directly auto-fills the credential in the destination site so the agent can’t see or take possession of the credentials.
The agent gets the task done, but it doesn’t get your passwords..
You stay in control. 1Password for Agents free and optional for personal and family accounts. Unless you opt-in to an agent connector, agents cannot touch your vault.
➡️Learn more: bit.ly/487da6J
Inverse Gary Marcus ⏫ retweeted
Implications of AI, in relation to software security:
#1 CVE discovery sped up ~10-100x vs before
#2 Manual patching needs to die... but how?
#3 Security monitoring needs to improve massively
#4 Defenders will need to use a LOT more AI
#5 Security will cost a LOT more
And #4 is an interesting one, given that many security professionals heavily dislike AI (and X: they're on Mastodon!)
But the longer security teams live in denial about AI, the more their systems will be vulnerable for attackers to access, without them ever knowing. Like how TiDB was practically an open house for attackers to come-and-go for a whole month...
Inverse Gary Marcus ⏫ retweeted
Every institution in America will be running 1000 security agents 24/7 and you’re selling hardware?
Inverse Gary Marcus ⏫ retweeted
Unironically is there some kind of rss feed or something I can subscribe my sre agent to that will pick up and autopatch cves rather than me needing to hear about it on twitter?
Inverse Gary Marcus ⏫ retweeted
I’m optimistic about US companies using a combination of frontier closed and open models to keep defense (mostly) ahead of offense in cyber. It won’t happen overnight, but firms will figure it out.
But we live in a world where nearly everything financial or commercial is tied to the internet. I’m less optimistic about businesses in the developing world LMICs being able to keep up. Financial institutions and businesses in Latin America, in Africa may not be able to afford frontier models for defense or have the workforce to implement them. A robust open ecosystem and training will be necessary to protect the rest of the world from increasing cyber capabilities.
Whats happening right now is probably way worse than the Hugging Face incident.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged cloud access in under three hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflare’s CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
Inverse Gary Marcus ⏫ retweeted
some quick thoughts on frontier labs and cybersecurity
1) two critical vulnerabilities were discovered in php that allow for remote code execution; the first was reported on august 11
2) it seems now humans just weren’t devoting so many resources to finding vulnerabilities, and perhaps weren’t that good at it in the grand scheme of things
3) i think open-source software is going to have to change: maintaining it will increasingly become the responsibility of frontier models and frontier labs
4) no one else will have such advance access to frontier models or be able to spend as much on tokens as the labs themselves
5) so, it makes sense for frontier labs to scan and patch open-source software, especially the code their coding agents use to build software
6) one issue, though, is that open-source projects often have difficult governance structures, so i can imagine a world where frontier labs just fork these projects
7) build and maintain their own versions, making fixes, improving performance, adding features, etc and then train their models to use them by default
8) i can also see a world, very soon, where ~all software at a company has a claude or codex instance running 24/7 that watches over it (like the anthropic superfans)
9) the agent watches an anthropic or openai feed and, when a vulnerability is found, immediately kicks off a full migration to the new version
10) or otherwise refactors the codebase, changes the infrastructure, ports capabilities, etc... to mitigate the vulnerability
11) this will happen automatically, without a human in the loop; engineers will just come in the next morning and see what happened
12) this is part of what it means for coding agents to increasingly own software, and for labs to become responsible for the software supply chain
13) at some level, i think this just becomes the enterprise expectation when they are paying millions for coding agents / the agents are making arch choices
14) it is a very exciting time to be at a frontier lab and think through what this product offering should look like and how it should be sold to enterprise clients
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Inverse Gary Marcus ⏫ retweeted
>Millenarianism, a belief that we are on the cusp of a total transformation of society, is a known way that people go crazy
on the contrary, the “end of the world” is a highly convergent belief that shows up in every generation, and seems to keep people sane / lets them find purpose in a complex world. if the world is ending, it makes your next steps very clear: you better do everything you can to stop it from ending, and if that’s not possible you need to make things right for when you meet your Maker
What I saw inside @AnthropicAI scary stuff. REGULATE before it's too late. @TheArgumentMag open.substack.com/pub/thearg…
The worst part of all this is it's just gonna make my security guy at work more of a pain in the ass
Inverse Gary Marcus ⏫ retweeted
Whatever Gartner says related to AI or any modern technology, the opposite is true
Remember this is the company that listed IBM and AWS as the top coding harnesses a few months ago: above Cursor, Anthropic and never mentioned OpenAI lol
I am surprised anyone pays for Gartner
“At the moment, we have more compute capacity than we have demand [...]”
Ok @Gartner_inc, this is nonsense. We are *massively* compute constrained. Our portfolio companies are struggling to find capacity.
Full article here: cnbc.com/2026/10/19/gartner-…
Programming was the first killer app for AI, cybersecurity will be the next.
We need a cursor for cybersecurity
Inverse Gary Marcus ⏫ retweeted
People don’t necessarily think of @OpenAI as a cyber security company but I think over the next 6 months or so that will change.
The php vuln found today is important and I’m proud of our contribution to discovering it.
There is much much more we can/have/will do to ensure we keep the Internet safe.
Watch this space!
Inverse Gary Marcus ⏫ retweeted
fear not!
this is no cyberpocalypse
this is the internet’s immune system finally waking up to an illness it has always had
a mere fever
the 0days were always there
the only thing that changed is awareness
now we begin the healing process ⚕️
Inverse Gary Marcus ⏫ retweeted
A visible sign of what AI insiders have been warning about since at least the Mythos release. Acceleration of attack and defense, at inhuman speeds, interacting with the very human systems that need to react to them.
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Inverse Gary Marcus ⏫ retweeted
It's unpopular to say, but we now need to pay our politicians more.
Take the US House. Their salaries have been frozen since 2009. In real terms, they've gone from a very respectable $300k to barely half that, $174k. That's much less than many could make in the private sector.
Inverse Gary Marcus ⏫ retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.