New Ask Claude or ChatGPT about any stock, using Bullpen. Bullpen in Claude or ChatGPT. 7 days free
Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Monday, November 9, 2026

Back to the front page

From X

@StableBread

Fajasy on X

I listened to the CEO of Nubeva Technologies $NBVAF (TSXV: $NBVA), a ransomware recovery company, explain why AI data labeling companies came to his team. Data labeling companies (firms that turn experts’ knowledge into training data for AI labs) have asked Nubeva whether it could help them label what each malware binary does, like whether it’s secretly encrypting files. Malware often arrives as a binary, a compiled program in machine code, and many are obfuscated, or scrambled to hide their purpose. CEO Randy Chou said in an October 5, 2026 interview on Nubeva’s YouTube channel that Nubeva has spent the last 7-8 years learning to spot homemade encryption, meaning encryption that ransomware authors write themselves instead of using a standard method. Homemade encryption is harder to catch, since it doesn’t match any of the standard methods security tools know. Here’s how Chou described what frontier models (the most advanced models from labs like OpenAI and Anthropic) can figure out today: “Frontier labs out there with their cybersecurity fully enabled, when they do full automation, they can approximately figure out 30% of the malware binaries. That’s the published numbers that are out today.” That claim is in line with GPT-5.6-sol’s 30.5% score on SRE-Bench, a Columbia University-led test of AI models on 262 binaries, but OpenAI’s GPT-6 Astra has since reached 56.9%. Chou said that for the other ~70%, a model might flag a binary as weird but can’t say what it does. He mentioned that some malware arrives compressed and obfuscated, then checks whether someone opened five apps, like a browser and Microsoft Office, in the past 72 hours, a known sandbox-evasion technique. If not, the malware assumes it’s inside a sandbox (an isolated computer analysts use to test suspicious programs) and does nothing. Today, Chou said, a small group of specialist cybersecurity labs takes malware apart by hand, and analyzing a new ransomware family typically takes weeks or months. He added that Nubeva has tested binaries written by its own engineers that frontier models couldn’t explain. That’s why Nubeva is now training its own model, which has no internet access, with “hundreds and thousands of AI agents.” The training only just started, but Chou said the timeline Nubeva is working to is “days and weeks,” not the 6-12 months he’d have quoted before AI agents. “I’m putting all my focus on this now,” he said.

Investor Letters

All letters

Seed Corn

Chiron’s failed $49 million Beaumont sale and $178 million Pinnacle acquisition leave XRN with $70 million of liquidity and medical-office…

XRN $372M
Orphan REITs 2 clicks

STRL: 80 new electricians a week

Sterling’s $4.1 billion backlog faces Texas permitting risk after a governor proposed a moratorium, while Connexion, Capital Asset Planning…

STRL $7.6B
Trade Ideas Flow 1 click

Roblox: Capture This Moment

Roblox’s Q3 FY26 DAUs fell year over year for the first time, while bookings declined 12% to $1.7 billion.

RBLX $35B
TSOH Investment Research 1 click

DoorDash and Google

DoorDash and Google.

DASH $79B
Stratechery by Ben Thompson – On the business, strategy, and impact of technology. 7 clicks

Diamond Estates: Research Note

Diamond Estates converts $4.7 million of Lassonde debentures at a 69% premium, cutting debt to $10.9 million and raising Lassonde ownership…

LSDAF $1.2B
Atrium Research - Equity Research 3 clicks
FND · long

FLOOR & DECOR HLDGS

Floor & Decor operates 281 warehouse-format stores selling hard-surface flooring and accessories nationwide.

FND $5B
Value Investors Club 1 click

Vicor Update, Part Four

Vicor’s Federal Circuit hearing put Foxconn’s disputed patent license under pressure, reinforcing its AI server royalty model and licensing…

VICR $6.8B
CV's Substack 3 clicks

Floor & Decor 3Q26: Business Update

Floor & Decor’s 3Q26 sales rose 3% while comparable sales fell 1.4%; it cut 2027 openings to 10-15 as high mortgage rates pressure…

FND $5B
Speedwell Memos 1 click

Publications we follow

Every publication on this site, hand-picked.

129 publications

Newsletters 109

YouTube 4

Blogs 15

Seeking Alpha 79 of 282

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

91 accounts
Nominate an account

Investor letters we follow

368 firms

Sectors

Ordered by how often our editor reaches for them.