Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Latest News

Market capOver $50M
All Over $50MOver $300MOver $2BOver $10B
All Under $1BUnder $10BUnder $100BUnder $500B
SectorsAll
Filter by sector
Monday, October 19, 2026· 10326 stock ideas· 219 writers·
19,884 views· 9,201 clicks

AppLovin Deep Dive

AppLovin rebuilt its ad model with AXON 2.0, lifting LTM revenue to about $7 billion and margins to 77% as Unity competition threatens ad take rates.

APP $88BU $19B
Speedwell Memos 5 clicks

From X

@convequity

Convequity on X

A company gets an API key from a model provider (OpenAI, Anthropic, Google) and links it in OpenCode Console. OpenCode, the coding agent, uses that key to run models at the provider, billed to the company. It is a bearer credential: anyone with a copy can spend on the account. OpenCode disclosed unauthorized access to a legacy system being decommissioned. Keys for about 1.4% of Console users who linked external providers may have been exposed. OpenCode calls it a distillation attack. Users report charges for runs they never made. Provider terms generally make the key owner responsible, so the bill can land on the customer. A copied key works at the provider until revoked. OpenCode already runs on Cloudflare Workers, and Console is a gateway with budgets. Direct calls with a stolen key bypass Console and its budgets. Whether that legacy host ran on Cloudflare is undisclosed. In our view, customers need a control layer they own that keeps the raw provider key away from the agent and its vendor: a vault-held key, or Cloudflare ($NET) AI Gateway prepaid billing with no customer provider key, plus scoped keys, spend caps, per-user limits, alerts and full logs. F5 ($FFIV), Kong and LiteLLM offer related controls. We cannot say these would have stopped this breach. They can limit blast radius, spend and detection time: metrics we think a CFO will ask for before the next rollout.

Investor Letters

All letters

Free Recaps of the best new stock ideas, delivered every morning.

Read past recaps

Build-A-Bear: A Narrower Path

Build-A-Bear's push into prestuffed toys and broader retail distribution tests brand stretchability, but recent results warrant caution.

BBW $317M
TSOH Investment Research 5 clicks

Do You Trust Apple?

Apple’s HomeView strategy ties Siri, privacy and smart-home control to consumer trust in its vision for the home.

AAPL $5T
Stratechery by Ben Thompson – On the business, strategy, and impact of technology. 2 clicks
CHRW · long

C H Robinson Worldwide INC

C.H. Robinson faces new liability exposure after the Supreme Court unanimously allowed state negligent-hiring claims under the FAAAA.

CHRW $16B
Value Investors Club

Why I bought FTAI Aviation

FTAI Aviation’s engine exchange model, owned fleet and Chromalloy PMA partnership target lower-cost CFM56 and V2500 maintenance while…

FTAI $17B
Kairos Research 1 click

Have a source we’re missing? Send your pick

Recent recaps

Latest recap

Sunday, October 18 32 stock ideas
  • What Lies Beneath: The Developer Building a Data Center on a Former Army Dump Laced With Munitions and Carcinogens Hunterbrook
  • DigitalOcean CEO: ‘We are not going to be extraordinarily leveraged like some others’ The Technology Letter
Read the recap

All recaps

Publications we follow

Every publication on this site, hand-picked.

130 publications

Newsletters 108

YouTube 4

Blogs 17

Seeking Alpha 52 of 239

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

89 accounts
Nominate an account

Investor letters we follow

189 firms

Sectors

Ordered by how often our editor reaches for them.

Anything we’re missing?

Send us a pick