Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Sunday, October 18, 2026

Back to today

From X

@StableBread 1 click

Fajasy on X

Even if the AI model Nubeva Technologies $NBVAF (TSXV: $NBVA) is training to read malware binaries (compiled programs) works, six risks could keep it from paying off: → Labs closing the gap: OpenAI’s GPT-6 Astra nearly doubled GPT-5.6-sol’s score on SRE-Bench, a Columbia University-led test of AI models on reading binaries, within a month of SRE-Bench’s release, and Anthropic says its Claude Mythos Preview model can already reconstruct plausible source code from stripped binaries. The better the labs’ own models get at reading hard binaries, the less they need to pay for outside labels. → Big tech building in-house: Microsoft’s $MSFT Project Ire reverse engineers software files on its own to decide whether they’re malicious. Ire caught only about a quarter of the malware among nearly 4,000 hard-to-classify files in a test Microsoft described in August 2025. But in June 2026, Microsoft said Ire flagged a new malware sample that most major security products, including CrowdStrike’s $CRWD and SentinelOne’s $S, still missed. Google $GOOGL already owns VirusTotal and Mandiant, so the likelier customers are labs that don’t own a malware-scanning site or an incident-response firm already, like OpenAI and Anthropic. → Paid like a contractor: Data labeling companies (firms that turn experts’ knowledge into training data for AI labs) pay 60-70% of what they bill to their contractors, and Scale AI is already recruiting its own malware analysts. So a data labeling company could pay Nubeva by the hour or task, or hire analysts itself, instead of licensing the model or buying the company. → Selling labels teaches the buyer: Every binary Nubeva labels helps the buyer’s model learn the same skill, the reason CEO Randy Chou gave for not patenting how Nubeva reads binaries. So each sale could shrink the edge Nubeva is selling. → Cash and compute: Chou gave no cost for running “hundreds and thousands” of AI agents on a private model. For reference, Nubeva spent $714,772 on R&D in FY2026, equal to 28.7% of its $2.49M in cash as of April 30, 2026. → Missed targets: Nubeva’s AI decryptor builder missed four targets starting in August 2023, so “days and weeks” (Chou’s timeline for the model) is a target, not a result just yet. So even with a working model, Nubeva still has to (1) sign a contract before the labs can read the hardest binaries themselves, (2) get paid for its model and engineers instead of by the hour or task, and (3) fund the training without draining its cash.
@convequity 3 clicks

Convequity on X

The market still prices $NVDA's moat on one idea: the GPU is special because it can do anything. But Nvidia has spent every generation trading that flexibility for raw AI horsepower. Its chips now look less like general-purpose GPUs and more like the AI-specific chips Google and Huawei build. That's great for performance, but it chips away at the very thing that set Nvidia apart. The closer its GPU gets to a TPU, the easier it becomes to replace. Deeper dive available at Convequity.
@StableBread 1 click

Fajasy on X

AI labs and data labeling companies (firms that turn experts’ knowledge into training data for the labs) could make my $12-19M sale range for Nubeva Technologies $NBVAF (TSXV: $NBVA) look conservative. My previous write-up’s sale comps were five cybersecurity companies buying small startups that detect, stop, or recover from ransomware, and I valued a Nubeva sale at $12-19M, the low end of those deals. AI labs and data labeling companies would widen the set of buyers beyond cybersecurity companies, but I found none that has bought a ransomware recovery company like Nubeva. The closest deals were for a stake in a ransomware recovery company, malware data, and specialist teams: → Microsoft $MSFT: Made an equity investment in Veeam, a data protection and ransomware recovery company, in February 2025, as part of a partnership to build AI-based threat detection and other Microsoft AI services into Veeam’s products. → Google $GOOGL: Owns VirusTotal, a malware-scanning site it bought in 2012, and Mandiant, the incident-response firm it bought for $5.4B in 2022. Its experimental Sec-Gemini model, introduced in April 2025, draws on Mandiant’s threat intelligence data. → OpenAI: Agreed to buy Promptfoo in March 2026 for an undisclosed price. Promptfoo, which tests AI systems for security holes, was valued at $86M after its July 2025 funding round, per PitchBook. → Mercor (a data labeling company): Agreed to buy Deeptune, which builds practice environments for AI agents, in July 2026, months after Andreessen Horowitz led Deeptune’s $43M Series A. The two 2026 deals didn’t disclose prices, and Mandiant and Veeam are far larger businesses than Nubeva, so I can’t put a new number on a sale. Still, my $12-19M range is probably conservative now, since it only counted cybersecurity companies as buyers, and an AI lab or data labeling company would be paying for Nubeva’s engineers and model rather than its ~$500K of FY2026 revenue. But an AI buyer wouldn’t get patents on what it’s paying for. Nubeva’s patents would cover how it recovers files and how it detects hidden encryption, but it won’t patent its binary analysis (figuring out what malware programs do) at all, and CEO Randy Chou explained why: “Anything you patent, that means you have to show how you did it. If you show how you did it, well, somebody can train an LLM to go do it.” So the model is only worth what Nubeva can prove it does, through a signed contract, a named partner, or test results.

Investor Letters

All letters

2026.42: Home At Last

Stratechery’s weekly bundle covers Apple HomeView and SpaceX’s cellular ambitions.

AAPL $5T
Stratechery by Ben Thompson – On the business, strategy, and impact of technology. 6 clicks
FINV · long

Finvolution Group

FinVolution, a China and ASEAN unsecured consumer lender, trades at 4x earnings and 0.5x book value.

FINV $711M
Value Investors Club 4 clicks

Is The Market Turning The Page?

CoreWeave’s debt and equity price action is framed as a wake-up call for investors amid a broader market discussion.

CRWV $34B
WHAT ARE WE DOING? “Contrarians At The Gate” 52 clicks

PesoRama: Research Flash

PesoRama will reach 54 JOi Dollar Plus stores by November after raising C$28.4 million, funding more than 50 additional Mexican store…

TBBB $6.8B
Atrium Research - Equity Research 7 clicks

Modine Deep Dive

Modine, soon Modexus Solutions, has a $4 billion hyperscaler cooling contract but must ramp factory output and restore margins as data…

MOD $9.2B
CV's Substack 19 clicks

AppLovin Deep Dive

AppLovin rebuilt its ad model with AXON 2.0, lifting LTM revenue to about $7 billion and margins to 77% as Unity competition threatens…

APP $88B
Speedwell Research 27 clicks

Publications we follow

Every publication on this site, hand-picked.

130 publications

Newsletters 108

YouTube 4

Blogs 17

Seeking Alpha 52 of 240

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

89 accounts
Nominate an account

Investor letters we follow

189 firms

Sectors

Ordered by how often our editor reaches for them.