Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Sunday, November 1, 2026

Back to today

From X

@StableBread

Fajasy on X

If the AI model Nubeva Technologies $NBVAF (TSXV: $NBVA) is training to read malware works, it could also take over the one step in its ransomware recovery software that engineers still do by hand. Nubeva’s Ransomware Reversal software, or NuRR, copies the encryption keys during an attack, but someone still has to figure out how ransomware uses them before Nubeva can build a decryptor (a program that reverses the encryption). AI agents have run NuRR’s routine support (bug fixes, support tickets, and product maintenance) for some time, CEO Randy Chou said, but Nubeva’s engineers still handle each live ransomware case by hand. Nubeva’s first granted patent finds the encryption method by running the ransomware in a sandbox (an isolated test computer) and matching the result to a library of standard methods. But the sandbox method breaks down in two cases Chou described, since homemade encryption (encryption ransomware authors write themselves) won’t match any standard method, and malware that detects the sandbox does nothing. A model that reads the malware’s compiled code could get around both problems, since (1) homemade encryption still shows up in the code as steps a model can follow, and (2) the malware’s checks for a real computer only run when the malware runs, so reading the code never triggers the checks. With NuRR supplying the keys and the model working out the encryption method, Nubeva would have both inputs a decryptor needs without an engineer taking the ransomware apart by hand. Frontier models, the most advanced AI models from labs like OpenAI and Anthropic, can already work out what some binaries (compiled programs) do just by reading their code. Anthropic said in April 2026 that its Claude Mythos Preview model can take “a closed-source, stripped binary,” meaning one with its function and variable names removed, and reconstruct “(plausible) source code for what it does.” Obfuscation (scrambling code to hide its purpose) is harder for a model to get past, since compressed malware keeps its real code hidden until it runs. Chou blamed obfuscation for the ~70% of malware binaries frontier models can’t figure out, so Nubeva’s model still has to prove it can do better. Chou didn’t connect the model to NuRR in his October 5, 2026 interview, but working out the encryption method is the same step Nubeva’s FY2026 annual filings say its AI decryptor builder will automate. Therefore, if the model works on live ransomware, NuRR could take on more cases at once, easing the capacity problem that cost Nubeva its biggest customer in 2023 (risk advisory firm Kroll).

Investor Letters

All letters

Altria: Dutiful

Altria raised 2026 adjusted EPS guidance to $5.66 to $5.74 and authorized more buybacks, while on! loses share as cigarette margins hold.

MO $130B
Invariant 2 clicks

When the liquidity does not add up

Arbor Realty Trust’s dividend suspension is presented as creating $60 million of liquidity, raising questions about its ability to meet…

ABR $2.2B
John Hempton's Newsletter 3 clicks

Verra veerer

Verra Mobility’s Avis termination threatens 2027 earnings, while Government Solutions profit rose 25% and implied fourth-quarter guidance…

VRRM $404M
The Oak Bloke 2 clicks

FTAI 3Q26: Aero margins in focus

FTAI’s Aerospace Products margin rebounded to 31% as CFM56 module output rose, while Power deposits and contracted deliveries fund its 2027…

FTAI $20B
Stock Thoughts 4 clicks

CVX Earnings Review

Chevron’s Q3 revenue rose 35% to $65.2 billion and EBITDA 75% to $20.2 billion, while production trailed guidance and refining margins…

CVX $465B
Cestrian Capital Research 3 clicks

SNY Earnings Review

Sanofi raised FY26 guidance after Q3 sales grew 14.3% at constant currency, led by 34.8% Dupixent growth; vaccines declined 6.6%.

SNY $108B
Cestrian Capital Research 1 click

Publications we follow

Every publication on this site, hand-picked.

129 publications

Newsletters 109

YouTube 4

Blogs 15

Seeking Alpha 69 of 272

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

91 accounts
Nominate an account

Investor letters we follow

250 firms

Sectors

Ordered by how often our editor reaches for them.