Prashant Halaki

Founder of Corunner, building AI powered business operating systems that help teams automate work, collaborate smarter, and scale with intelligent execution.

[Prashant Halaki @HalakiPrashant]

The scary part?

Most of these aren’t new classes of security problems.

We’re automating development faster than we’re improving security practices.

AI should accelerate execution, not replace engineering judgment.

Developers, are you reviewing AI generated code as carefully as code you write yourself?

[Prashant Halaki @HalakiPrashant]

We’re shipping code 10X faster with AI.

But are we shipping security vulnerabilities 10X faster too? 💀

PHP remote code execution.
OpenLLM command injection.
AI agent security failures.
npm supply chain attacks.

Here’s what’s happening and what developers should learn from it. 🧵👇

[Prashant Halaki @HalakiPrashant]

🚨 Your code can be secure and your dependencies can still compromise you.

Recent npm attacks used malicious packages to steal cloud and CI/CD credentials.

Fix: Audit dependencies, lock versions, protect publishing tokens and review install scripts.

Never assume npm install means safe.

[Prashant Halaki @HalakiPrashant]

🚨 AI agents introduce a different risk.

Untrusted content can manipulate an agent into calling privileged tools.

Imagine an agent with access to production databases, cloud infrastructure and shell commands.

Fix: Least privilege, sandboxing, tool validation and approval for sensitive actions.

A prompt isn’t a security boundary.

[Prashant Halaki @HalakiPrashant]

🚨 OpenLLM: CVE-2026-15035.

An unsafe shell execution pattern can allow attacker controlled input to become an OS command.

A basic security mistake inside AI infrastructure.

Fix: Avoid shell interpretation, validate inputs and isolate execution.

AI infrastructure isn’t automatically secure.

[Prashant Halaki @HalakiPrashant]

🚨 OpenLLM: CVE-2026-15035.

An unsafe shell execution pattern can allow attacker controlled input to become an OS command.

A basic security mistake inside AI infrastructure.

Fix: Avoid shell interpretation, validate inputs and isolate execution.

AI infrastructure isn’t automatically secure.

[Prashant Halaki @HalakiPrashant]

🚨 PHP just disclosed two critical vulnerabilities.

CVE-2026-109618 and CVE-2026-109619.

Both can lead to remote code execution through memory handling flaws.

Fix: Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, depending on your branch.

Patch your servers.

[Prashant Halaki @HalakiPrashant]

AI helped engineers ship faster. But did the rest of your company get faster too?

Your support team still needs product context. Sales still needs technical answers. New hires still spend weeks learning how everything works.

That’s why we built Corunner.

An AI coworker that runs alongside every employee, helping teams find answers, investigate issues, and get work done faster.

And it works inside the tools your team already uses.

Meet @corunnerai → https://t.co/RVxtv8rite

#Corunner #AICoworker #AIForBusiness #SaaS #Startup

[Prashant Halaki @HalakiPrashant]

@jcolbcoleman @corunnerai Sent DM. Please do check.

[Prashant Halaki @HalakiPrashant]

🚀 @corunnerai is looking for a B2B Lead Gen & Appointment Setting Agency!

We need qualified leads, consistent sales meetings & proven results.

👇 Agency owners: Comment with your relevant portfolio/case studies, and I'll DM you!

#B2BLeadGen #Corunner

[Prashant Halaki @HalakiPrashant]

@thepaulthomson @OpenAI Congratulations 💐

I am building https://t.co/87VV5ZZksi - A coworker for every employee

[Prashant Halaki @HalakiPrashant]

AI helped engineers ship faster. But did the rest of your company get faster too?

Your support team still needs product context. Sales still needs technical answers. New hires still spend weeks learning how everything works.

That’s why we built Corunner.

An AI coworker that runs alongside every employee, helping teams find answers, investigate issues, and get work done faster.

And it works inside the tools your team already uses.

Meet @corunnerai → https://t.co/RVxtv8rite

#Corunner #AICoworker #AIForBusiness #SaaS #Startup

[Prashant Halaki @HalakiPrashant]

Elon Musk is getting ridiculously unpredictable. 😂🚀

While everyone is building better electric cars, Tesla just demonstrated a Roadster that can drive upside down and briefly FLY!

Cars, rockets, AI, robots. What's next?

Crazy innovation or the future of transportation?

[Elon Musk @elonmusk]

Turns out the future does have flying cars

[Prashant Halaki @HalakiPrashant]

AI costs aren't killing software companies. Outdated business models might.

If AI makes your team 10X more productive but revenue barely moves, what's the point?

Cutting salaries and hiring isn't a growth strategy.

AI should help us grow bigger, not just operate cheaper.

Agree?

[Prashant Halaki @HalakiPrashant]

@elonmusk wants to enter India’s market, but apparently Ambani is the Prime Minister now? 😂

Competition is welcome. @Starlink is welcome.

But publicly attacking another businessman without proving your allegations?

That’s not how fair competition works.

India is a massive business opportunity, not a market where regulations should bend for billionaires.

If the rules are unfair, challenge them with evidence.

What’s your take? Is Elon fighting for connectivity or market share?

[Prashant Halaki @HalakiPrashant]

Nobody cares that your engineers are shipping 10X faster.

Did your revenue grow 10X?

Customers? Retention? Profit?

10X more code ≠ 10X more business.

Engineering is accelerating with AI while sales, marketing and support struggle to keep up.

That’s the problem we’re solving with @corunnerai.

AI shouldn’t create a 10X engineering team. It should create a 10X company.

[Prashant Halaki @HalakiPrashant]

@araseb_ Building products became easy but not building company/business. AI just made code generation faster but building company is more complex now compared to earlier because code is not a moat anymore.

[Prashant Halaki @HalakiPrashant]

After the challenges we faced with enabling the Razorpay and Chargebee integration, both teams coordinated closely, worked through the issues, and finally got everything working successfully.

Thank you to everyone involved for taking ownership, following through, and helping us reach a resolution.

It was a frustrating journey at the beginning, but I genuinely appreciate the effort put in by both teams to investigate the issue, coordinate internally, and get it resolved.

Glad to finally have the integration up and running.

Thank you @Razorpay and @Chargebee for the support and collaboration. 🙌

#Razorpay #Chargebee #Payments #SaaS #CustomerSupport

[Prashant Halaki @HalakiPrashant]

17 days waiting for @Razorpay to enable our @Chargebee integration.

Tickets have been closed without resolving the issue, support repeatedly says “4 to 8 hours”, and we’re still waiting.

This is now blocking our billing setup and business operations.

We don’t need another ETA. We need someone to take ownership, explain what’s blocking this, and resolve it.

Requesting @Razorpay and @Chargebee leadership to please look into this urgently.

@harshilmathur @shashank_kr @rajaraman_rr @cbkrish

[Prashant Halaki @HalakiPrashant]

@Razorpay, again the ticket is marked as closed without addressing the issue.

Does this mean @Razorpay Want us to use a different payment gateway?

CC: @harshilmathur

[Corunner @corunnerai]

AI can write the code. But does it know why?

Corunner keeps engineering memory active—connecting decisions, context, and evidence for developers and coding agents.

Your company already knows why. Make sure your next agent does too.

#Corunner #EngineeringAI #AIEngineering