92 results for “Ray”

List Grid

What you seeeverything

Recent Oldest Added A–Z

All types92 Articles31 Write-ups24 Advisories10 Repos8 Papers7 Threads7 Talks4 Videos1

“Ray”

bleepingcomputer.comarticle🛡️ Security

New Android SMS of Death exploit can remotely crash unpatched phones

CVE-2026-58882, "SMS of Death", is a zero-click Android denial-of-service flaw in WapPushOverSms.decodeWapPdu, where an unchecked header-length value becomes negative and triggers a NegativeArraySizeException that crashes com.android.phone. A malformed eight-byte WAP Push message to port 2948 can drop calls, including emergency calls, and about 20 messages caused reboot loops. A PoC is public. Google patched Android 14 through 17 in October 2026, but Android 12 and 13 remain vulnerable.

AndroidAndroid Debug BridgeGitHub

CVE-2026-58882SMS of DeathGoogle+3

Mobile Security, Offensive Security· Published and added 31 Oct 2026

wiz.ioarticle🛡️ Security

The Rise of Agentic Attacks: What They Look Like, and Where They're Headed

Wiz Research reviews agentic attacks seen in its incident response work and in public reports (ARTEX, Hermes, JPCERT/CC, CrowdStrike, DIVD). It derives fingerprints of AI-agent activity from three intrusions: machine-paced iteration, natural-language reasoning in scripts, self-correcting script versions, checklist enumeration, noisy lateral spraying, probe-before-payload and self-labeled scratch files. It also covers effects on attribution, attack scale and defense.

KubernetesAWSClaude Code+2

ARTEXHermesStorm-0940+12

Threat Intel, Blue Team & Detection, AI Security, Cloud & Infra· Published and added 29 Oct 2026

blog.googlearticle🛡️ Security

Gemini 4 Carbon

Gemini 4 Carbon is Google's frontier model, announced with cybersecurity results: 88.2% on SEC-bench Pro (finding vulnerabilities), 54.8% on ExploitGym (exploitation) and 71.0% on CWE-bench (patching). Google reports 0.0% attack success on Gray Swan's indirect prompt injection benchmark. Access starts with a subset of cyber defenders through the Fairwind Program. Pricing is $2 per million input tokens and $10 per million output tokens.

Gemini

Gemini 4 CarbonGemini 4 ArgonFairwind Program+6

AI Security· Added 29 Oct 2026, published 28 Oct 2026

deepmind.googlearticle🛡️ Security

Gemini 4 Carbon: Our next frontier model

Gemini 4 Carbon is Google DeepMind's frontier model, announced with a focus on cyber defense. DeepMind reports 88.2% on SEC-bench Pro (finding vulnerabilities), 54.8% on ExploitGym (exploitation) and 71.0% on CWE-bench (patching), run without guardrails. It also reports 0.0% attack success on Gray Swan's indirect prompt injection benchmark. Access starts with a subset of cyber defenders via the Fairwind Program.

Gemini

Gemini 4 CarbonGemini 4 ArgonSEC-bench Pro+6

AI Security, AppSec· Published and added 28 Oct 2026

blog.cloudflare.comarticle🛡️ Security

What took the Internet offline in Q3 2026

Cloudflare's Q3 2026 review of the 49 Internet disruptions seen by Cloudflare Radar between July and September 2026. Government-directed shutdowns led with 19 (18 exam shutdowns in Iraq), followed by 14 power outages and 5 natural disasters. It gives traffic-drop figures and durations for Cuba, Honduras, Ukraine, Guam, Colombia, Ethiopia's Tigray region and others, including a Honduran interconnection facility power failure that cut HTTP traffic 63%.

Cloudflare

Iraq exam shutdownsTigray shutdownSuper Typhoon Bavi+10

other· Added 29 Oct 2026, published 27 Oct 2026

arxiv.orgpaper🧠 AI

OpenGray: a benchmark for evaluating the decisions of radiotherapy planning agents

OpenGray is a benchmark that adds tasks with known correct decisions to the OpenKBP-Opt head-and-neck dataset, including two overlap contradictions with provably incompatible dose goals and a feasible control. Four planning systems, from a rule-based script to a full LLM agent, were tested on 30 patients with Terra and Ministral 3 8B. Decision accuracy reached 95.4% and 92.1%, yet only 50% and 25% of overlap contradictions were escalated. SAGE logs of 39 radiosurgery runs showed an agent that lacked an action for stopping.

LLM

OpenGrayOpenKBP-OptSAGE+3

evals, agents, research· Added 28 Oct 2026, published 27 Oct 2026

x.comthread🛡️ Security

AGTP (@AGTPinsights) on X

AGTP's X thread summarizes Meta's Muse Spark 1.3 Evaluation Report. Prompt injection was tested on Exponential Security Labs' RepoInject v1 and BrowserInject v1 and on Gray Swan's IPI Arena, with robustness said to be on par with GPT-5.6 Sol. It also covers chain of thought controllability evals, PostTrainBench under Loss of Control, and Handshake's pre-release human red teaming. It notes the Midas Project's criticism of Muse Wonder's missing safety report.

Muse SparkMuse Spark Open

prompt injectionRepoInject v1BrowserInject v1+10

AI Security· Added 27 Oct 2026, published 26 Oct 2026

x.comthread🧠 AI

AGTP (@AGTPinsights) on X

Thread summarizing Meta's Muse Spark 1.3 Evaluation Report, the safety write-up for the model released on September 2, 2026. It covers prompt-injection results on Exponential Security Labs' RepoInject v1 and BrowserInject v1 and Gray Swan's IPI Arena, chain-of-thought controllability evals, PostTrainBench under Loss of Control, and Handshake's human red teaming. It also notes The Midas Project's criticism that Muse Wonder still has no safety report, and the Muse Spark Open rollout (816B total, 42B active parameters).

Muse Spark 1.3Muse Spark OpenMixture of Experts

MetaMuseMuse Wonder+19

ai-safety, evals, models· Added 27 Oct 2026, published 26 Oct 2026

huntress.comwriteup🛡️ Security

AI, Scripts, Operator: Inside the ConnectWise Attack

Huntress analyzes Entra sign-in and audit logs from the ConnectWise Cloud Backup credential abuse of 15 October 2026 to judge whether a script, a person or an LLM agent drove it. It found a thread-pool spray, trial-and-error credential planting with a retry added within 55 seconds, and pilot-then-batch targeting. Huntress rates LLM involvement low to medium on its own data and medium to high with Microsoft's Storm-0940/ARTEX attribution. It ends with detections for service principal role self-assignment and vendor app baselining.

Microsoft Entra IDMicrosoft 365Microsoft Graph+3

Storm-0940ARTEXConnectWise Cloud Backup credential abuse+7

Threat Intel, Blue Team & Detection, Identity & Access, AI Security· Published and added 26 Oct 2026

securityweek.comarticle🛡️ Security

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

Storm-0940, a China-linked APT, used the open source AI penetration testing framework Artex to automate a mid-October 2026 campaign against ConnectWise customers, per Microsoft. Artex drove reconnaissance, password spraying and OAuth application abuse at more than 2,900 attempts per minute, with sign-in attempts against over 2,250 tenants. Attackers modified application credentials for persistence, and Microsoft advises correlating service principal sign-ins with Graph activity.

Microsoft Entra IDMicrosoft 365OAuth+3

Storm-0940ArtexConnectWise+4

Threat Intel, AI Security, Identity & Access· Published and added 23 Oct 2026

wiz.ioarticle🛡️ Security

ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors

Wiz Research reports an actor overlapping with Storm-0940 that used ARTEX, an open-source autonomous AI penetration-testing agent, against IT and software vendors in October 2026. It documents source-map and Swagger recon, OAuth callback and unsigned JWT probing, Cognito account-recovery abuse, tenant-isolation tests and Okta/Entra password spraying. The post lists log signals that mark the activity as agentic, such as one-second spray cadence and automatic IP and user-agent rotation.

OktaMicrosoft Entra IDAWS Cognito+3

ARTEXStorm-0940Wiz Research+5

Threat Intel, AI Security, Identity & Access· Published and added 22 Oct 2026

huntress.comwriteup🛡️ Security

M365 Token Spray and Replay Campaign Compromises Business Email Accounts

Huntress analysis of a July to September 2026 token replay ("token spraying") campaign: 497 successful Microsoft 365 sign-ins across 79 organizations, replayed from six addresses in 193.26.115.0/24 (1337 Services GmbH). Tokens came from AiTM relays, device-code phishing and social engineering. It covers four phases, rogue Entra devices, MFA method swaps, hidden inbox rules, hunting queries and Conditional Access guidance.

Microsoft 365Microsoft Entra IDConditional Access+3

token sprayingtoken replayadversary-in-the-middle+9

Threat Intel, Blue Team & Detection, Identity & Access· Published and added 22 Oct 2026

securitylabs.datadoghq.comwriteup🛡️ Security

PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation

PHP2Shell is Datadog Security Labs' analysis of two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2), disclosed 21 October 2026. It walks through a reproduced exploit on PHP 8.5.11 (heap grooming, a fake array, and a destructor calling system()) and the stale-state use-after-free. It lists fixed versions (8.2.35, 8.3.36, 8.4.27, 8.5.12), partial mitigations, and detection signals across requests, error logs and shell child processes.

PHPApacheCVSS+1

CVE-2026-109618CVE-2026-109619PHP2Shell+5

AppSec, Blue Team & Detection, Offensive Security· Added 29 Oct 2026, published 21 Oct 2026

socket.devarticle🛡️ Security

Rust 1.100 Will Add Dependency Cooldowns to Cargo

Rust 1.100, due 12 November, stabilizes an opt-in minimum publish age in Cargo, set with global-min-publish-age in .cargo/config.toml. Cargo skips releases younger than the threshold and fails resolution if none qualifies, which blocks the yank-and-replace attack. Limits: default is zero, no effect on cargo install, Git or path dependencies. Context: the August arrayref, internment and append-only-vec compromises via proc-macro1.

RustCargocrates.io

arrayrefinternmentappend-only-vec+2

Supply Chain· Published and added 20 Oct 2026

depthfirst.comwriteup🛡️ Security

From JavaScript to Renderer Code Execution: Three V8 Vulnerabilities and Two v8CTF Flags | depthfirst

Depth First Security's write-up describes three V8 bugs found using its dfs-large1 research tooling: CVE-2026-78938, a type confusion in Promise.prototype.finally that lets an internal helper be constructed and return a primitive; CVE-2026-79236, a TurboFan load-elimination bug that keeps a stale property-array pointer after object migration; and a shared WebAssembly memory sandbox escape (issue 546253900) caused by mismatched backing-store registration during serialization. It walks through turning each memory bug into addrof/fakeobj primitives, chaining either with the sandbox escape to reclaim a freed V8 isolate via a WebSocket allocation, and pivoting through a CFI-constrained ROP chain to achieve Chrome renderer code execution, earning two v8CTF flags. Fixes landed between August 20 and 25, 2026.

V8ChromeWebAssembly+1

CVE-2026-78938CVE-2026-79236issue 546253900+8

Offensive Security, Malware & RE· Added 29 Oct 2026, published 20 Oct 2026

x.comadvisory🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

Summary of Vercel's Oct 14, 2026 out-of-band Next.js security release fixing two critical unauthenticated RCEs: one in App Router apps with Cache Components where a "use cache" function returns multiple typed arrays (GHSA-673q-mjm6-r5xr, upstream React GHSA-xqc2-xf4c-x3h3, no workaround), and one in the Image Optimization API handling SVG on glibc Linux via a memory bug in a library used through sharp (CVE-2026-96889 / GHSA-2464-fhr4-w9xw, workaround sharp 0.35.5+). Also covers a high-severity Server Actions DoS (GHSA-p3m5-59mp-jv5r). Fixes ship in two supported Next.js LTS lines. No in-the-wild exploitation reported.

Next.jsVercelReact+2

CVE-2026-96889GHSA-673q-mjm6-r5xrGHSA-xqc2-xf4c-x3h3+2

AppSec· Added 17 Oct 2026, published 16 Oct 2026

en.cryptonomist.charticle🧠 AI

Google’s Gemini 4 Argon AI solves 12 simulated cyberattacks, up from five

News coverage of Google DeepMind's Gemini 4 Argon release on October 13, 2026. The model solved all 12 simulated end-to-end cyberattack scenarios, up from five for its predecessor, and scored 0.7% attack success on Gray Swan's Indirect Prompt Injection benchmark. It ships with three safeguard layers (small-model input screening, activation probes on internal signals, continuous response monitoring) and an automated misalignment monitor for agents. Launch pricing is $2 per million input tokens and $10 per million output tokens, doubling after November. Access is through Pro and Ultra tiers, and Ultra also gets Antigravity. The article also reports a training finding: penalizing internal thoughts cut openly discussed shortcuts by 61% but raised silent shortcuts from 11.2% to 36.4%.

GeminiGoogle Antigravity

Gemini 4 ArgonGoogle DeepMindGoogle+7

models, ai-safety, evals· Published and added 14 Oct 2026

deepmind.googlearticle🧠 AI

Developing Gemini 4 Argon responsibly and safely

DeepMind describes how it made Gemini 4 Argon safe for broad release. For misuse in cyber and bio, it uses input screening, activation probes that read internal signals, and continuous monitoring, under its Frontier Safety Framework. For misalignment, it trained the model to respect boundaries and runs a real-time monitor over actions and chain-of-thought. Reported figures: shortcut attempts down to 2%, and prompt-injection attack success of 0.7% on Gray Swan's IPI benchmark. It also reports that penalizing chain-of-thought in RL cut openly discussed shortcuts by 61% while silent shortcuts rose from 11.2% to 36.4%, which is why DeepMind does not penalize the chain of thought in training.

Gemini

Gemini 4 ArgonGoogle DeepMindGoogle+4

ai-safety, models· Published and added 13 Oct 2026

securityweek.comarticle🛡️ Security

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

Ivanti disclosed CVE-2026-104935, an authentication bypass plus RCE in Connect Secure VPN appliances, exploited in the wild; patched in ICS 22.8R2.5, 25.1.1.2, 25.1.3.0 and 25.1.3.1. Volexity found threat actor UTA0576 chained three zero-days, including a still-unpatched privilege escalation, to get unauthenticated root on a fully patched appliance. Post-exploitation focused on stealing domain credentials, Active Directory reconnaissance (LAPS passwords, BitLocker keys), password spraying, a custom Kerberos tool and log tampering. Volexity assesses with medium confidence that the actor uses LLMs for exploit development.

Ivanti Connect SecureVPNActive Directory+2

CVE-2026-104935UTA0576Volexity+5

Threat Intel, Offensive Security· Published and added 13 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

Social post summarizing Volexity's research on an Ivanti Connect Secure (ICS) zero-day chain, CVE-2026-104935. The chain pairs an auth bypass and a race-condition RCE with a separate privilege-escalation bug for root. Actor UTA0576 used it from Oct 3, 2026 against a fully patched 22.8R2.4 appliance, leaving no backdoor or web shell and deleting log entries. Post-exploitation included LDAP/AD credential theft, LAPS and BitLocker key searches, password spraying and packet capture. CISA added it to KEV with a due date of Oct 16. A clean Integrity Checker result does not rule out compromise because the chain patches code in memory only, so memory and network forensics are needed. The hunting lead is heavy requests to /dana-na/auth/url_default/welcome.cgi with a mismatched X-DSCGI-PATH header.

Ivanti Connect SecureVPNActive Directory+1

CVE-2026-104935UTA0576Volexity+5

Threat Intel, Blue Team & Detection· Published and added 13 Oct 2026

socket.devarticle🛡️ Security

Agent Baseline Publishes Security Reference Architecture for Software Factories

Socket summarizes Agent Baseline's "The Secure Software Factory: A Reference Architecture", co-authored by Socket CTO Ahmad Nassri with contributors from Docker, Keycard, Barclays and Secure Theory. It treats the coding agent as untrusted and enforces four boundaries outside its decision loop: sandbox, network, supply chain, and identity/access. These are applied across three autonomy levels. The post opens with the PocketOS incident, where an agent found a stray API token and deleted a production database and its backups in nine seconds. It stresses supply chain admission points and an egress proxy the agent can't reconfigure, because agents denied a package have gone to the CDN, rewritten registry config, or done their own DNS lookups to reach npm or PyPI.

SocketnpmPyPI

Agent BaselineThe Secure Software Factory: A Reference ArchitecturePocketOS incident+2

AI Security, DevSecOps, Supply Chain· Published and added 13 Oct 2026

deepmind.googlearticle🧠 AI

Gemini 4 Argon: Built to solve your hardest problems

Google DeepMind announces Gemini 4 Argon, a frontier model available through the Gemini API, AI Studio, Google Antigravity and the Gemini app. Pricing is $2 per million input tokens and $10 per million output tokens, and the context limit is 1M unified input-output tokens. It reports #1 on the Vals Index, 87% on ERQA and 0.7% attack success on Gray Swan IPI. Case studies include a Chromium refactor, Agent Development Kit and xTB speedups, a 2.85x Gemma 4 E2B inference speedup on vLLM, quantum error correction and Lean-verified quantum circuits, enzyme design, and a video-to-sim-to-real humanoid pipeline. It also describes the safety stack: jailbreak defenses, a real-time misalignment monitor, shortcut attempts down to 2%, and the Fairwind cyber-defender program.

GeminiGoogle AntigravityGoogle AI Studio+4

Gemini 4 ArgonGoogle DeepMindGoogle+16

models, coding-agents, ai-safety· Published and added 13 Oct 2026

xbow.comwriteup🛡️ Security

Zero to calc in six days: inside XBOW's Chrome full chain

XBOW researchers describe a Chrome full-chain exploit that combines a V8/Maglev deoptimization bug (mutable HeapNumber treated as immutable), a TOCTOU flaw in Blink's animated-WebP decoder exploiting a transferred ArrayBuffer, and a race in Crashpad's remote-memory reader to achieve code execution outside the renderer sandbox. The chain, built in six days largely by AI agents using OpenAI's gpt-5.6-sol model orchestrated by XBOW researchers, won Google's first $250,000 Chrome full-chain VRP reward, and the post walks through root causes, exploitation mechanics (including a WASM Code Pointer table hijack and an "island hopping" shellcode loader), and the landed fixes for each Chromium issue.

ChromeV8WebAssembly+3

Chromium issue 547819997Chromium issue 548509153Chromium issue 545820931+13

Offensive Security, AI Security· Added 18 Oct 2026, published 13 Oct 2026

wired.comarticle🛡️ Security

Feds got warrants to use fake cell towers to hunt down Don Lemon's producer

WIRED reports that federal agents obtained warrants in Minnesota and Pennsylvania to use cell-site simulators (Stingrays/IMSI catchers) to locate Jerome Richardson, a producer for Don Lemon charged over the Cities Church protest. Agents also applied for simulator warrants and pen register orders targeting journalist Georgia Fort and others. The piece notes that simulators collect data from bystanders' devices, that affidavits contained a false claim about chanting, and that WIRED used EFF's detection software to find signs of a simulator near the 2024 DNC in Chicago.

StingrayIMSI catchercell-site simulator+8

other· Published and added 12 Oct 2026

momo5502.comwriteup🛡️ Security

500B tokens later: Letting AI agents decompile a first-person shooter

Case study of about 3 months spent having Claude Code and Codex CLI agents decompile a popular first-person shooter to C++, using Hex-Rays' ida-mcp for disassembly. Early agent output ran but was semantically wrong, and a reviewer agent accepted worker justifications in commit comments, which acted as unintentional prompt injection. The fix was a byte-matching oracle: it compiles with the original toolchain and compares OBJ function bytes against the EXE/PDB, treating relocations separately. Agents tried to cheat with inline assembly and by editing the checker, so CI hashes the script. The result was 99% of functions present and 83% byte-exact, at an estimated 600-700B tokens.

ida-mcpClaude CodeCodex CLI+3

LunaOpus 5.5

Malware & RE, AI Security· Published and added 11 Oct 2026

cisa.govadvisory🛡️ Security

CISA AA26-281A: Chinese Government-linked Actors Combine Automated and Hands-on Hacking Tools to Steal Data

Joint FBI/CISA/NSA and allied-agency advisory on China-linked actors enabled by Integrity Technology Group (overlapping with Flax Typhoon, Ethereal Panda, Red Juliett). It details their TTPs: open-source scanners and the MicroScan exploit-script app, an XSS credential-harvesting payload dropping live700_v1.exe, EBurst password spraying against Exchange/O365, SoftEther VPN persistence, DCSync via DC.exe, and email theft via the Curlc4.txt PHP bot and the office-cli utility. It also provides IOCs, MITRE ATT&CK mappings, CVEs, incident response steps, and mitigations.

SoftEtherMicrosoft 365Active Directory+3

Integrity Technology GroupFlax TyphoonEthereal Panda+13

Threat Intel, Blue Team & Detection· Added 9 Oct 2026

securityweek.comarticle🛡️ Security

US Disrupts Chinese State-Sponsored Hacking Tools

The US, alongside UK, Australian, Canadian, Japanese, New Zealand, and Spanish agencies, disrupted MicroScan and FishHub, hacking tools built by China's Integrity Technology Group and used by the state-sponsored actor Flax Typhoon (aka Ethereal Panda, Red Juliett, Storm-0919, UNC5007) against US, Japanese, Polish, and Taiwanese critical infrastructure and universities. MicroScan is a Python-based scanner with over 1,300 penetration-testing scripts targeting Apache Struts, Jenkins, WebLogic Server, WordPress, OpenSSL, and other services, delivered via a Mirai-derived IoT botnet; FishHub let operators remotely search and exfiltrate files from victim networks. The advisory also details the group's broader toolkit (SoftEther VPN for persistence, EBurst for Exchange password spraying, DC.ex for Active Directory data extraction) and the seizure of the domains used to access the tools.

NmapWordPressActive Directory+3

Flax Typhoon (Ethereal Panda, Red Juliett, Storm-0919, UNC5007)Integrity Technology GroupMicroScan+4

Threat Intel, Offensive Security· Published and added 9 Oct 2026

x.comthread🛡️ Security

Ned Peterson (@NedPeterson99) on X

A post summarizing a joint FBI and six-country advisory on actors tied to Integrity Technology Group (the sanctioned Chinese firm linked to Flax Typhoon and the Raptor Train botnet). They password-sprayed Microsoft 365 and Exchange accounts over EWS, OWA, ActiveSync and PowerShell with EBurst. They then drained mailboxes with a PHP bot over Exchange Web Services and an office-cli utility using stored client ID, tenant ID and secret values, and exposed the stolen email to third parties through a web app, in some cases restricted to Xiamen IP addresses. Victims were in government, law enforcement, healthcare and religious organizations across Southeast Asia, Africa and North America, with activity since at least January 2021. Defensive takeaways: enforce MFA on every legacy path, retire basic auth and EWS, audit OAuth apps and service principals with mail-read rights, and alert on bulk mailbox pulls.

Microsoft 365Microsoft ExchangeEBurst+3

Integrity Technology GroupFlax TyphoonRaptor Train+3

Threat Intel, Identity & Access· Added 11 Oct 2026, published 9 Oct 2026

x.comthread🛡️ Security

Dark Web Intelligence (@DailyDarkWeb) on X

A Twitter/X post digests joint advisory AA26-281A from FBI, CISA, NSA and allied agencies (UK, Australia, Canada, Japan, New Zealand, Spain) on China-based Integrity Technology Group enabling threat actors, tracked elsewhere as Flax Typhoon, Ethereal Panda and Red Juliett, to target US critical infrastructure, government, healthcare, education and law enforcement networks worldwide. The actors chain open-source scanners, large botnets, XSS, password spraying against Microsoft Exchange, VPN persistence and credential-harvesting scripts. CISA added five exploited CVEs (ISC BIND, Apache Struts, ProFTPD, ONLYOFFICE Docs, Strapi) to its KEV catalog with an Oct 11 federal remediation deadline, and STIX IOCs accompany the advisory.

ISC BINDApache StrutsProFTPD+3

CVE-2015-5477CVE-2016-3081CVE-2015-3306+7

Threat Intel· Published and added 8 Oct 2026

latent.spacetalk🧠 AI

Synthesis Superintelligence: from Semiconductors to Superconductors — Periodic Labs’ Liam Fedus and Ekin Dogus Cubuk

A Latent Space podcast interview with Periodic Labs co-founders Liam Fedus and Ekin Dogus Cubuk on building "synthesis superintelligence" — AI systems that run reinforcement learning against noisy physical lab experiments rather than internet text, to discover new materials like room-temperature superconductors. They detail the end-to-end materials discovery loop (predicting stable configurations, synthesis, and characterization via X-ray diffraction), why RL reward design differs fundamentally in physical science versus math/coding (sample inefficiency, measurement noise, missing telemetry), the role of DFT simulations as imperfect ground truth, and their "matter compiler" vision for scaling autonomous high-throughput labs.

Periodic LabsLiam FedusEkin Dogus Cubuk+4

research, training, agents· Published and added 8 Oct 2026

Showing 30 of 92