Technology
AI Is Ending Security by Obscurity: An Open Model Turned Unshipped Firefox Fixes Into Working Exploits (October 29, 2026)
Palo Alto Networks' Rich Campagna told The Deep View that AI has turned long-known PHP flaws, once judged unexploitable, into a real threat for any organization with a website: "automatically everyone becomes a target." The same day, Epoch AI reported that the freely downloadable GLM 5.3 model read security fixes that were published but not yet shipped for six Firefox releases and, without human help, built an exploit that stole a local file, at roughly $1,000 per version. No model provider refused the requests. CrowdStrike is urging companies to cut patch windows from 30 days to 30 minutes.
So what
The assumption that a smaller company is not worth attacking fails when exploit work costs about a thousand dollars of compute. Ask your CTO or IT provider how long it takes today to move from a vendor patch to deployment on internet-facing systems, and set a target in days, not weeks. If you ship software, release fixes and updates together rather than leaving a public patch waiting for your next release.
Confidence: Informed perspective — a security vendor executive's view, backed by a published Epoch AI study; Epoch's attempts against Chrome did not succeed.
Go deeper Epoch AI · The Deep View
People & Organization
An Every Engineer Says His Agent "Software Factory" Left Him Out of Practice, and Proposes Three Modes of Work (October 30, 2026)
Loren Stewart, who builds Every's Slack agent, describes a setup where agents plan, code, test and review features while he goes about his day. The output is faster and sometimes better, but in one review the agents had touched 42 files and added about 3,000 lines he could not fully explain, and when he codes by hand now he notices he is rusty. His fix is to sort work into full autonomy for routine tasks, close supervision with checkpoints for systems he must understand, and manual work for skills he wants to keep. A Wildfire Labs essay flagged by TLDR Founders makes the same point about entry-level roles: AI is absorbing the routine tasks that used to train new hires.
So what
Productivity metrics reward full automation, but your senior people built their judgment doing the work you are now automating. Ask each functional leader to name the tasks that train junior staff, and decide deliberately which stay human or supervised. For agent-built work that reaches customers, require that someone can explain the key decisions, not just confirm the checks passed.
Confidence: Informed perspective — one practitioner's first-hand account plus a supporting essay; no data yet on skill loss at scale.
Go deeper Every · Wildfire Labs
Business
Seat Pricing Is Losing Ground to Hybrid and Pay-for-Results Models, and Each Shifts Risk Differently (October 29, 2026)
In The VC Corner, Ruben Dominguez lays out three models replacing seat-based B2B pricing: usage-based (pay for consumption), resolution-based (pay per finished task, such as a ticket closed by an agent) and outcome-based (pay when a business result occurs). Citing Kyle Poyar's 2026 Growth Unhinged survey, he reports that hybrid pricing, a base fee plus a metered layer, rose to 37% of companies from 25% a year earlier, while pure seat pricing fell to 17% from 24%. A Redpoint survey of 141 CIOs found 45% fund AI from existing software budgets.
So what
If customers fund AI by cutting other software, your seat count is exposed even when your product is sticky. Resolution pricing works only if you define "resolved" up front and know your inference cost per resolution; outcome pricing puts most of the risk on you. Pilot a hybrid tier with a small group of renewals this quarter and track margin per customer before rolling it out widely.
Confidence: Informed perspective — an investor newsletter's analysis built on third-party surveys.
Go deeper The VC Corner · TLDR Founders