Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Friday, October 30, 2026

Back to today

From X

@convequity 1 click

Convequity on X

Anthropic and Binance show why the speed of containment matters. Cathedral, an AI security startup, says its agents found routes into Anthropic's internal messages and employee records by exploiting third-party business software during a security test. Anthropic acknowledged limited sales, HR and IT exposure, but says its model weights and code were safe, its monitoring caught some activity, and access was cut the same day. I lean toward Cathedral on the significance of that exposure. Internal information can help attackers impersonate colleagues and target people with privileged access. The damage can extend beyond the data initially exposed. Supply-chain risk becomes harder to contain as more tools and agents gain access to company systems. Tighter permissions should help. Building more tools internally might reduce vendor exposure, but it also transfers maintenance and security work to your own team. Binance's October 29 hack involved a different suspected entry point. Its preliminary investigation says a compromised DevOps engineer's laptop may have let an attacker reach an internal service and submit unauthorized withdrawals. Binance estimates a $6.3bn impact, with roughly $3bn frozen so far. An attacker using a trusted employee's access can cause damage without any malicious insider. And TRM Labs says most of the funds leaving Binance moved in about 20 minutes. That is why I think shift-right security becomes increasingly important: detecting and stopping attacks while systems are running. Security teams need to recognize lateral movement, where an attacker moves between accounts or machines, and contain it before the attacker reaches systems that can cause much greater damage. This is part of why we like Palo Alto Networks ($PANW). Cortex combines network, endpoint and cloud data with response controls, including the ability to isolate compromised devices. Connecting an investigation to an action that stops the attack matters when the attacker can move this quickly. It also makes cybersecurity an interesting market for premium-speed AI inference. An AI security agent needs to investigate accurately and act quickly, with current data and permission to intervene. Where the model's reasoning time is delaying containment, paying even 100x more per inference call could make economic sense if the reduction in expected losses exceeds the extra cost. Faster inference becomes valuable when it lets the defender stop an attack sooner without sacrificing accuracy.

Investor Letters

All letters

SNY Earnings Review

Sanofi raised FY26 guidance after Q3 sales grew 14.3% at constant currency, led by 34.8% Dupixent growth; vaccines declined 6.6%.

SNY $108B
Cestrian Capital Research 1 click

TSOH Weekly Roundup (10/30/2026)

Markel spent $315 million repurchasing shares in Q3 as Thrive agreed to buy ADT for $7.6 billion and Hasbro cited rising adult toy demand.

MKL $23B
TSOH Investment Research 1 click

2026.42: Home At Last

Stratechery’s weekly bundle covers Apple HomeView and SpaceX’s cellular ambitions.

AAPL $5.1T
Stratechery by Ben Thompson – On the business, strategy, and impact of technology. 6 clicks

TSOH Weekly Roundup (10/16/2026)

Bumble agreed to a $1.3 billion take-private deal, while Netflix cut about 1,000 jobs and Meta discussed its Muse superintelligence models.

NFLX $511B
TSOH Investment Research 12 clicks
LLY · long

LILLY (ELI) & CO

Eli Lilly trades at 33 times this year’s earnings and 26 times next year’s, versus roughly 12 times for big pharma peers.

LLY $1.3T
Value Investors Club 4 clicks

Is The Market Turning The Page?

CoreWeave’s debt and equity price action is framed as a wake-up call for investors amid a broader market discussion.

CRWV $34B
WHAT ARE WE DOING? “Contrarians At The Gate” 56 clicks

Publications we follow

Every publication on this site, hand-picked.

129 publications

Newsletters 109

YouTube 4

Blogs 15

Seeking Alpha 67 of 268

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

91 accounts
Nominate an account

Investor letters we follow

190 firms

Sectors

Ordered by how often our editor reaches for them.