Building @cotalentai The AI Workforce Deployment Company | Founder @aiworkandskills Armchair combat sports fan | AI Commentator
š¬š§ LDN
Joined June 2012
- Tweets176K
- Following3.4K
- Followers5.2K
- Likes206K
Isa Mutlib retweeted
Government and business websites across Europe have been taken down because of a serious security flaw, discovered by a researcher using AI.
Science and technology editor @t0mclark3 tells @LeahBoleto the latest. ā¬ļø
š¬š§ youtube.com/watch?v=O6VSgiLNā¦
Isa Mutlib retweeted
Lots of Security incidents today, here's some practical tips for those who just wanna protect yourself:
1) UPDATE EVERYTHING - main targets are:
a) Browsers - Chrome, Safari, Firefox
b) OS: ļ£æ: Settings -> General -> software update; Linux: sudo apt update && sudo apt upgrade; Windows: I think there's a button. Do this for any remote home servers & Openclaw/hermes boxes
c) Phones: Update it all
d) Desktop apps (Slack, Cursor, Discord, etc)
2) Limit web browsing this week: Stay within walled gardens (twitter, youtube, etc); don't click random links this week. Just wait until the patches go through. Do step 1 again after a week.
3) Avoid untrusted Wifi networks until your devices are updated
4) Stay vigilant about phishing emails offering "certificate fixes" or fraud updates
5) Have an iPhone 11-16? TURN BLUETOOTH OFF for the time being until apple patches come through.
6) Code/Dev: UPDATE ALL YOUR REPOS - @charliermarsh has already updated uv 0.13.4 which reacts to the eMudra incident for uv (Python), Typesript according to Claude has equivelant. Tell your agents to go and update all your active repos to update package manager across uv, npm, bun, cargo, etc etc
What advice did I miss?
Isa Mutlib retweeted
ok just to recap in case anyone missed it
> critical php rce
> nodejs brotli compression rce
> railway pwned
> gitlab alert cvss 10.0
> litellm pwned (again)
> pingcap / tidb cloud pwned
> godaddy roll 500k private keys
> emudhra ca keys pwned
all in 72~ hours
gl
US media moves in wild ways.
Weāre going to drop a bombshell documentary on @TheYoungTurks tomorrow morning called The Closetocracy. Which US Senator did we catch using male escorts?
proper asian thing to do
A businessman called āMani Singhā has been ordered to tear down a huge 'football director's box' extension on his family home after planning bosses dismissed his appeal.Ā
He built the extension on the back of his home in Sutton Coldfield, West Midlands, without, planning permission.šāāļø
The structure, which includes a 3m high grey dormer, loft conversion & skylights, generated backlash after angry neighbours claimed it blocks out light & ruins the character of the street.
It was only after they alerted the council to the build that Singh then applied for retrospective planning permission for the extension, which was refused in April.Ā
He appealed the council's decision, arguing the work came under permitted development rights but the planningĀ inspectorate has now dismissed his claims, agreeing the extensionĀ 'unacceptably harms the appearance of the area' & the dormer must be demolished or works to the site regularised.š„“
Isa Mutlib retweeted
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-ā¦
OpenAI models helped researchersāoperating as part of our Patch the Planet initiativeādiscover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHPās widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defenderās Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinatedā¦
Readers added context they thought people might want to know
āŖOpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.ā¬
āŖx.com/lcfr_hax/statuā¦ā¬
Isa Mutlib retweeted
The full suite of what OpenAI's building with ChatGPT is magical. A client has strict requirements for AI use. Precludes many apps. We discussed it in Slack. Dropped my Dot in the thread and asked for a ChatGPT Site that uses only approved models. Done in under an hour.
There were a few hiccups, and typical AI artifacts. First, it got confused about incorporating an OpenAI API key, telling me it could only be done server side, whereas I can and did add one manually in site settings. Second, I asked it to incorporate WebMCP so agents could use it easily, and it wasn't able to properly test this was working. Third, there are lots of little unnecessary text elements and callout boxes all over, all that self-referential stuff that AI loves to add.
But overall, pretty awesome. We hit a barrier, discussed solutions, sent my Dot to build something custom to solve the problem, and it built and launched it in less than an hour.
love this!
Stepful (YC S21) trains people for healthcare jobs and helps health systems fill critical staffing gaps.
After training 30,000 students last year, they now work with 39 healthcare systems, including seven of the 10 largest in the US, and recently raised a $55M Series C.
In this fireside, YC's @sdianahu sits down with co-founders Carl Madi and Tressia Hobeika to talk about how they saw a broken path into healthcare jobs and built Stepful to fix it. They share how the company grew from helping individual students become medical assistants to working directly with some of the countryās largest health systems, and how AI is helping them make that training more personalized and scalable.
00:00 ā Tackling the Healthcare Worker Shortage
03:40 ā Building a Faster, Cheaper Path to Healthcare Jobs
06:57 ā AI Tutors and Local Hands-On Training
Isa Mutlib retweeted
BREAKING:
@AnthropicAI just launched Duet, its always-on personal agent. Itās the first personal agent Iād call a pro tool.
Weāve been testing it for two weeks. Iāve gone from mostly using ChatGPT to roughly 50/50 between ChatGPT and Claudeāthe most time Iāve spent with Anthropic in close to a year.
ā¢ It lives in its own app, separate from Claude, on iOS, Android, and the web. This makes it feel clean and easy to understand.
ā¢ It has channels for specific areas of your work and life rather than just a single chat
ā¢ It has a todo list so you never lose what youāre working on and you can always see statuses
ā¢ It allows you to easily write and edit documents, slides, and more all through the app.
ā¢ Itās not a chief of staff yet. It can see the Claude sessions on my computers but canāt direct them. Its email drafts are worse than dotās, and voice is transcription onlyāyou canāt have a spoken conversation with it.
My verdict: the vibes are good, and Iām opening Duet every day. Itās worth trying.
Check out our agent comparison page: every.to/personal-agents-comā¦
Full Vibe Check coming soon on @every
Isa Mutlib retweeted
In my annual letter, I share how weāre building a frontier ecosystem to turn technological progress into real-world outcomes and economic opportunity for people, organizations, and communities everywhere. linkedin.com/pulse/my-annualā¦
Isa Mutlib retweeted
I think AI agents are going to go through 9 stages before every business accepts them.
Right now weāre at stage 1, where big companies like Amazon, Delta etc are blocking them.
Here are the next 8 stages and the startup ideas Iād build.
Delta, Chase and Amazon are blocking AI agents.
The war on agents has begun, and hereās how it probably plays out:
Stage 1: Companies block agents because agents skip the ads and upsells.
Stage 2: Agents learn to act like humans, and it becomes an arms race.
Stage 3: The market splits. Companies that make money on sales let agents in, companies that make money on data charge for access, and the giants build their own agents.
Stage 4: A trusted middle layer for agent identity and payments becomes the standard way in.
Stage 5: Companies that welcome agents start winning customers from the ones that block them.
Stage 6: The agent blockers come back and let agents in on their own terms.
Stage 7: Everyone starts competing for agents with better prices, faster checkout and SEO built for agents.
Stage 8: The ads come back, and companies pay to be your agentās first recommendation.
Stage 9: The agent war ends, and selling to agents becomes as normal as having a website.
Isa Mutlib retweeted
How Clay, Figma, and Higgsfield Price AI, and How to (Finally) Get Your Pricing Right xitter.cf/i/broadcasts/1pKkOXlavā¦
Isa Mutlib retweeted
The Agents Live: The Agent-Led Growth Playbook xitter.cf/i/broadcasts/1RKjpbwaMā¦
Isa Mutlib retweeted
Getting gas locally is good short term, but it wonāt cut bills. Heat pumps can.
Hundreds and thousands will save on bills this winter with their heat pump (on avg, Ā£230 a year on Cosy Octopus vs a gas boiler).
Isa Mutlib retweeted
Excited to introduce the inaugural Startup Finance 30.
A curated list of 30 of the best startup finance leaders in the world, selected by a fantastic committee of CFOs Iāve been lucky to be part of.
Congrats to everyone who made the list!
Meet the inaugural Startup Finance 30! š
A curated list of 30 exceptional finance leaders from some of the most exciting startups around the world, including @hexanalytics, @runwayml, @livekindred, and many more.
Congrats to all 30! š«”
can't help but be impressed with how airwallex operates.
Pretty special to see our partnership with @McLarenF1 enter its next chapter.
We've done a lot together over the past three seasons, and there's plenty more to come. šļø
Isa Mutlib retweeted
Sydney Sweeney reveals in an interview that she doesnāt care about the PHP vulnerability because she moved everything to Rust in 2024.
āThey said the rewrite would take six months. Weāre on month 30. We havenāt shipped a feature since, but Iām having a very normal Wednesday.ā
Isa Mutlib retweeted
This post is an emotional one to write.
I started 20VC from a bedroom in London, as an 18-year-old, with no money and no contacts.
Today, I sat down to record a very special show with @satyanadella, CEO of @Microsoft.
It was 12 years in the making. 3,000 shows built up to this moment.
There is no overnight success. Work hard, be kind, never give up.
This is a moment I will remember forever.
