Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Thursday, October 22, 2026

Back to today

From X

@StableBread

Fajasy on X

I listened to the CEO of Nubeva Technologies $NBVAF (TSXV: $NBVA), a ransomware recovery company, explain why AI data labeling companies came to his team. Data labeling companies (firms that turn experts’ knowledge into training data for AI labs) have asked Nubeva whether it could help them label what each malware binary does, like whether it’s secretly encrypting files. Malware often arrives as a binary, a compiled program in machine code, and many are obfuscated, or scrambled to hide their purpose. CEO Randy Chou said in an October 5, 2026 interview on Nubeva’s YouTube channel that Nubeva has spent the last 7-8 years learning to spot homemade encryption, meaning encryption that ransomware authors write themselves instead of using a standard method. Homemade encryption is harder to catch, since it doesn’t match any of the standard methods security tools know. Here’s how Chou described what frontier models (the most advanced models from labs like OpenAI and Anthropic) can figure out today: “Frontier labs out there with their cybersecurity fully enabled, when they do full automation, they can approximately figure out 30% of the malware binaries. That’s the published numbers that are out today.” That claim is in line with GPT-5.6-sol’s 30.5% score on SRE-Bench, a Columbia University-led test of AI models on 262 binaries, but OpenAI’s GPT-6 Astra has since reached 56.9%. Chou said that for the other ~70%, a model might flag a binary as weird but can’t say what it does. He mentioned that some malware arrives compressed and obfuscated, then checks whether someone opened five apps, like a browser and Microsoft Office, in the past 72 hours, a known sandbox-evasion technique. If not, the malware assumes it’s inside a sandbox (an isolated computer analysts use to test suspicious programs) and does nothing. Today, Chou said, a small group of specialist cybersecurity labs takes malware apart by hand, and analyzing a new ransomware family typically takes weeks or months. He added that Nubeva has tested binaries written by its own engineers that frontier models couldn’t explain. That’s why Nubeva is now training its own model, which has no internet access, with “hundreds and thousands of AI agents.” The training only just started, but Chou said the timeline Nubeva is working to is “days and weeks,” not the 6-12 months he’d have quoted before AI agents. “I’m putting all my focus on this now,” he said.

Investor Letters

All letters

Mosaic, Part One: The Story

Mosaic’s history traces the 2004 Cargill-IMC merger and the phosphate and potash mines that shaped NYSE: MOS.

MOS $5.5B
Latticework by MOI Global 18 clicks

Mosaic, Part Two: The Deep Dive

Mosaic, NYSE: MOS, is the subject of a second audio program for professional investors analyzing fertilizer producers.

MOS $5.5B
Latticework by MOI Global 4 clicks

Unicycive (UNCY):

Unicycive’s oxylanthanum carbonate NDA earned a March 25, 2027 PDUFA date after two manufacturing-related rejections, with no FDA clinical…

UNCY $110M
Triple S Special Situations Investing 4 clicks
UNCY · long

Unicycive Therapeutics INC

Unicycive Therapeutics fell nearly 50% after a second FDA Complete Response Letter tied to a third-party manufacturer for its primary…

UNCY $110M
Value Investors Club

Moon River Moly: Research Note

Moon River Moly’s updated Davidson PEA lifts after-tax NPV to $1.24 billion as flotation raises tungsten output 350% and cuts molybdenum…

MRIVF $16M
Atrium Research - Equity Research 3 clicks

GLOO, part two

Gloo faces related-party deals, insider-heavy IPO ownership, acquisition losses and $84.5 million of CEO-backed puts as it burns cash and…

GLOO $291M
Guardian Research 4 clicks

Publications we follow

Every publication on this site, hand-picked.

129 publications

Newsletters 109

YouTube 4

Blogs 15

Seeking Alpha 55 of 247

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

90 accounts
Nominate an account

Investor letters we follow

190 firms

Sectors

Ordered by how often our editor reaches for them.