Luis Cosio

Hardening frontier AI systems against nation-state adversaries and loss-of-control failure modes.

[Luis Cosio @luiscosio]

Proud to share I'll be a co-mentor at @MATSprogram for the Autumn 2026 cohort, working alongside @LisaThiergart on the @SL5TaskForce .

MATS is one of the strongest talent pipelines in AI safety. Three months, real research with a mentor, on a problem that ships. Many scholars join their mentor's org afterward or spin out their own.
Our stream is building SL5: security against priority nation-state attacks for frontier AI infrastructure. This year we're prototyping a real datacenter with frontier labs. The work needs people who can lead.
Who we want:

3+ years security or infrastructure engineering
Previously led a project with 2+ people on novel technical ground
Comfortable in highly automated workflows (Claude Code, etc.)
Strong Python or Rust, or excellent technical communication

Bonus: TEMPEST, SCIF construction, or datacenter physical security experience.

Apply by June 7. https://t.co/3CgU9LSAVC

[Tao Burga @taoburr]

Today:

1. AI CEOs call for mandatory DNA synthesis screening in a letter led by @IFP and @JoinFAI - https://t.co/QI3fv3PbEZ

2. @JanikaSchmitt and @jtmonrad published the grand strategy for actually securing the DNA supply chain -- the main barrier to bioweapons -- with a prioritized list of concrete interventions - https://t.co/zYYtPVAJlZ

Not only does the piece specify what to do to solve the problem, but it also includes a funding opportunity focused on it:
https://t.co/kIDD0pQ90I

I can't imagine a higher calling than protecting humanity from biological weapons. If you feel similarly, check out their Launch Sequence piece above.

[Anthropic @AnthropicAI]

Our internal data shows Claude is accelerating AI development—a possible path to recursive self-improvement, or AI autonomously building a more capable successor.

It’s happening faster than we thought, and the implications deserve greater attention. https://t.co/OVVPJO7VQx

[Lukasz Olejnik @lukOlejnik]

AI-powered computer worm, a self-replicating agent that reasons its way through a network instead of carrying a fixed exploit list. It steals compute from compromised GPU machines to run its own open-weight LLM, then uses weaker machines as relays for reach. In trials on a corporate testbed, it identified vulnerabilities, exploited systems, and launched replicas across Linux, Windows, and IoT targets. Every new infection can add more infrastructure while costing the attacker almost nothing. Patching one flaw no longer ends the threat, because the worm can operationalise fresh advisories, generate new attack logic, and keep adapting without a human operator. It is not a WannaCry-style worm with one baked exploit and one baked ransomware payload. It can adapt across many vulnerability classes it can discover and operationalise https://t.co/nSupd1h0BG

[Anthropic @AnthropicAI]

This Executive Order is an important step in strengthening America’s leadership in AI.

We look forward to collaborating with the White House to support its implementation.

https://t.co/ZwDimPrp3t

[Dylan Malyasov | 🧐 @DylanMalyasov]

A Chinese company is now selling spray-on coating that makes drones harder for radar to detect, available in buckets and applied with a spray gun. What was once a classified military technology is now a commercial product sold by the kilogram.

https://t.co/UpXkLFFw6d

[MATS Research @MATSprogram]

Streams led by:

· @dewierwan_ (BlueDot)
· @MikeMcCormick_ & @nickraushenbush (@HalcyonFutures )
· @gralston & @incredutility (Bio Action Plan)
· @LisaThiergart & @luiscosio (@SL5TaskForce)
· @AmmannNora (ARIA)
· @RosieCampbell (@eleosai )
· @degerturann (@metaculus)

[MATS Research @MATSprogram]

Three paths:

→ Founders: launch a new initiative (your idea or one of ours)
→ Field-Builders: own talent development and deployment within AI safety
→ Amplifiers: join an existing AI safety org to drive impact as it scales

[MATS Research @MATSprogram]

AI safety needs to scale fast.

MATS has trained 10 cohorts of top researchers, but high-impact orgs keep hitting the same bottleneck: more promising ideas than people to champion them, and funding outpacing deployment.

This track exists to close that gap.

[MATS Research @MATSprogram]

🚨 New for MATS Autumn 2026: the Founding & Field-Building track.

A fully-funded track for founders, field-builders and amplifiers ready to launch and scale new AI safety initiatives.

Apply by June 7 AoE ↓

[METR @METR_Evals]

Could an AI company lose control of its own agents? To find out, Anthropic, Google, Meta, and OpenAI let us (1) test their best internal models with CoT access, (2) review non-public info about capabilities, alignment, and control.

The result: our first Frontier Risk Report.

[Lisa Thiergart @LisaThiergart]

This would be a really good time for a serious industry push towards SL5!

Critical Frontier AI infrastructure breaches are becoming more real by the day.

[Luis Cosio @luiscosio]

This Saturday I'm at PlatziConf (@platzi) in Mexico City, the biggest tech conference in LATAM, talking about AI safety.

If you're around and care about where this is heading, find me there.

[𝐄𝐋 𝐈𝐍𝐅𝐎𝐑𝐌𝐀𝐃𝐎𝐑 @informador]

️#IDEAS Mario A. Rodríguez Bolaños escribe: "El nuevo mapa del poder: inteligencia artificial, guerra y soberanía". https://t.co/63zFH9pili

[Boaz Barak @boazbaraktcs]

Preparing a talk for https://t.co/tFCN6b39nM next week on several scenarios in which AI turns out very badly. Maybe I'm not such an optimist?

[Owen Brake @OwenBrakes]

Your air-gapped servers are covered by a faraday cage, you think you're safe from key exfiltration? You fool.

Low-frequency magnetic fields pass right through Faraday cages.

Researchers were able to extract data off an air-gapped shielded computer by spawning fake work loads spiking CPU power and generating magnetic signals.

[roon @tszzl]

lesswrong runs the world tbh

[fudge @fuckpoasting]

asking your homies what you did when you blacked out last night

[will (in sf rn) @ItsWillHenry]

Second-time Founders is my favourite gender :

1) no deck until someone asks three times

2) first hire is a lawyer

3) distribution for the product before the product exists

4) "we don't need a big round" and means it this time

5) replies to every customer email personally because they know what ignoring customers cost them last time

6) sleeps 8 hours and ships faster than everyone else

7) the only person in the room who isn't impressed by the term sheet

Second-time founders are the best breed of founders