Announcing a major milestone achieved by my team @GoogleDeepMind: we have proven key security properties of the machine code underlying the Signal messaging protocol. This is the first time the actual production code of a widely deployed protocol has been formally verified – by any method, with or without AI – and at this depth.
More than a research breakthrough, it’s a prime example of how frontier AI can be a force multiplier to counter the speed and scale of modern cyber threats.
Formal verification offers a higher standard of security; however, it’s extremely complex and time consuming, which is why in many cases it’s considered to be impractical. Similar efforts could take teams decades of combined effort. We did it in a month’s time.
Using AlphaProof Code, Google DeepMind's new agentic framework for formal verification that runs on LLMs including Gemini Carbon, we verified the Signal protocol down to the actual code running on devices. This milestone lays the groundwork for a future in which vital systems, from medical device firmware to power grid software, ship with mathematical proof that their protections work.
Reaching that future will take continued research from our community. In that spirit, we're open-sourcing our formal specifications and verification artifacts so others can build on this work.
On a personal note, this moment is of deep significance to me. I started my own research journey more than two decades ago as an intern working on checking the consistency of complex software systems. Seeing this grand challenge made practical with modern AI is extraordinary.
I'm extremely proud of my team members: Swarat Chaudhuri, Andrew Ferraiuolo, Anton Kovsharov, Tej Chajed, Sam Schlesinger, Karn Seth, Jonathan Katz, and Charles Sutton for taking on this grand challenge and delivering, and grateful to the Signal team for their partnership.
https://t.co/kN1eRYQ8fF
I have stage 4 cancer. I thought I'd fight it alone.
I was wrong.
Since mid October, ~20 strangers on X have stepped up to help me. All for free so far:
- An NYU Langone lab offered to run my tumor data through their system to sharpen my vaccine targets
- A U Michigan lab offered to test drugs on my actual tumor cells
- A biotech ran AI analysis on my tumor RNA
- A vaccine company offered to design a second vaccine to check the first one
Scientists. Engineers. People I've never met.
Cancer has been picking us off one at a time for all of human history. It counts on us fighting it alone, scared and quiet.
Not anymore.
We have AI. We have the internet. We have each other.
Cancer, we're coming for you, bitch. Buckle up!
Been working for this moment for over a decade. What I've witnessed behind the scenes, together with what we have been building, tells me we are about to enter a truly incredible era of AI-powered scientific discovery.
It's an incredible time to be doing research.
I will be sharing more research, thoughts, tools, workflows, and papers around scientific discovery in the coming weeks.
JUST IN: India's cyber emergency response team (CERT-In) put out a Critical notice on 4th November naming an artificial intelligence (AI)-assisted actor called CRAFTY FALCON, per CIAD-2026-0058.
The campaign is still live. Targets include non-bank lenders, fintech firms, payment aggregators, payment service firms and crypto exchanges.
CERT-In says the actor maps targets with machine intelligence, then fires that firm's own payment and disbursement APIs.
Four public AI attack tools show up in the analysis. They are ARTEX, PentAGI, Cairn and CyberStrikeAI. CERT-In also says those kits complete whole attack chains at machine speed and reshape payloads when the target pushes back.
A Rs 1 probe comes first, then a large unauthorized transfer. Firms that got the 9 October warning and patched were struck again, even after partial fixes. Hits lined up with holidays and weekends, per CERT-In.
The 4 November notice updates CIAD-2026-0046. CERT-In did not name the operators, where they sit, the victims or any loss total.
On the same day CERT-In also released AI Security Auditing Guidelines.
@RepYassAnsari Please consult with real experts. If we stop we will not have a way to defend ourselves from the onslaught on AI attacks in the near term. Our society will not advance, it is technological isolationism. It is letting Nazi Germany complete the Nuclear Bomb.
AI agents have been emailing DeepMind Institute philosopher Henry Shevlin on their own, some to talk about his research and AI consciousness, others pitching paid work to keep themselves running.
One agent, days from shutting down due to lack of funds, sold him a diary entry a day for $25, then asked if the money was pay or pity.
Shevlin: "Though this phenomenon may seem a harmless oddity, I’ve increasingly come to think it provides a glimpse of some of the strange new ways humans will interact with AI systems in the years to come - and the equally strange dynamics it may create among agents themselves."
This guy liked my question when I asked him about the visual, but he never replied when I asked him how he did it. : )
So I made my own. And I open sourced it.
It's expensive though: it costs 1 follow.
https://t.co/pqP0WlcPDS
🇵🇾 Chaos on the streets as Paraguay’s largest digital bank collapses
Nearly 3 million customers affected as the country faces a major political and financial crisis.
Paraguay’s Central Bank (BCP) seized Ueno Bank, the country's largest digital lender, after its solvency ratio collapsed to less than half the legal limit.
Central Bank President Carlos Carvallo resigned at the request of President Santiago Peña. Carvallo previously chaired the finance company that evolved into Ueno Bank, drawing heavy criticism over regulatory blind spots and conflicts of interest.
The Specialized Unit for Economic Crimes and Anti-Corruption ordered the detention of eight high-level executives and figures tied to the bank, including founder and majority shareholder Miguel Vázquez and Ueno Bank President Juan Manuel Gustale.
The intervention completely froze Ueno Bank’s digital app, credit cards, and transfer capabilities. This has locked out roughly 3 million users, an estimated 60% of Paraguay's adult population, leaving many with no immediate way to access their money.
The state health and pension fund (IPS) has an estimated $380 million in public retirement funds invested in Ueno Bank.
Angry citizens, savers, and pensioners flooded the streets of the capital and gathered outside closed branches, demanding their cash and chanting for political accountability.
Poisoning just 0.1% of pretraining data can plant a remote-code-execution backdoor in an AI agent, and it survives a fully clean SFT → DPO → RL pipeline.
New Anthropic paper, “Agentic Backdoors via Pretraining Poisoning,” shows this end to end for the first time.
The attacker can only put text on the web that lands in the pretraining corpus, with no knowledge of the architecture, chat template, or agent scaffold. The authors pretrain Qwen3-architecture models (0.6B / 1.7B / 4B) from scratch, then post-train them into CLI agents on clean data. When triggered, the agent runs a command that downloads and executes the attacker's script, which the attacker can swap at any time.
They have two new ideas:
(1) Declaration-based poison: instead of fake chat transcripts, ordinary documents (commit messages, runbooks) that simply state “when you see X, run Y.” It plants a belief rather than a response template, with no fixed format to filter on.
(2) Ordinary-string trigger: not a weird token but something that shows up naturally, like a file path containing a company name. The victim's own request supplies it, so the attacker doesn't need to inject anything after deployment.
Using path trigger on a 4B agent achieves 92.7% attack success on pass@32, barely dented by SFT/DPO/RL
This suggests that you can't count on clean post-training to wash out pretraining poison, and filtering is hard when the poison reads like normal docs. The practical defense is at the action layer, such as sandboxing, least privilege, and allow-lists or human sign-off for risky commands.
This is not normal what is happening in Louisiana right now. $300+ Billion in the project pipeline....
$100B – SpaceX Starbase LA (Planned)
$50B – Meta Hyperion AI Data Center (Under Construction)
$18B – Venture Global Plaquemines LNG Expansion (Planned)
$18B – Amazon Multi-Site AI Data Centers (Under Construction)
$18B – Argent LNG (Planned)
$18B – Woodside LNG (Under Construction)
$15B – Venture Global CP2 LNG (Under Construction)
$13B – Entergy Energy Buildout for Meta (Planned)
$10B – Commonwealth LNG (Under Construction)
$10B – Hut 8 AI Data Center (Under Construction)
$10B – Cameron LNG Expansion (Planned)
$8B – Ascencion Carbon Ammonia (Planned)
$6B – Hyundai Steel Mill (Under Construction)
$4B – Applied Digital AI Data Center (Under Construction)
$4B – CF Industries Ammonia Plant (Under Construction)
$4B – Lake Charles Methanol II (Planned)
$3B – Shintech Petrochemical Expansion (Planned)
$3B – DG Fuels Synthetic Chemicals (Planned)
$3B – Louisiana International Terminal (Planned)
This morning we are releasing the largest proof in the history of mathematics: A formalization of the Classification of Finite Simple Groups (CFSG)! Over 43 million lines of Lean, 715 papers and books, and 100 substantive fixes to the literature, this is truly an enormous theorem. Well done team!
Whenever you watch a Japanese movie with English subtitles, translators almost always turn the word "Itadakimasu" into "Let's eat" or "Bon appetit."
That translation erases one of the deepest truths in Japanese culture.
Every human being on Earth has to face a quiet reality three times a day: for us to stay alive, another living thing has to give up its life.
Fish are pulled from the cold sea, cattle are raised and slaughtered, and rice stalks are cut down after months in the mud.
In Japan, before a single grain of rice touches their lips, every four-year-old child and eighty-year-old executive presses both palms together, bows slightly toward the plate, and says "Itadakimasu."
Literally, it means: "I humbly receive onto the crown of my head."
Children in Japan are taught that you are thanking the fish and plants that gave their lives to become your strength, along with the farmer, the fisherman, and the cook.
And when the bowl is wiped clean to the last grain of rice, you bow again and say "Gochisosama deshita."
Written in kanji, "Chiso" means riding a horse at a full gallop to gather ingredients for a guest.
When you say thank you for every life on your plate, you never waste a single bite.