Author: DEROBS

  • Cognitive Credit secures $40 million for expansion of AI-driven credit analytics

    Cognitive Credit secures $40 million for expansion of AI-driven credit analytics

    Cognitive Credit, a provider specializing in corporate credit data, analytics, and artificial intelligence technology, has announced the successful completion of a $40 million strategic growth investment. The funding round was led by Summit Partners, with additional participation from ETFS Capital.

    The company plans to utilize the capital injection to scale its operations and further enhance its specialist data and AI-driven solutions tailored for credit markets. By focusing on advanced analytics, Cognitive Credit aims to support the evolving data needs of market participants in the corporate credit space.

    The investment reflects continued institutional interest in leveraging AI to improve data processing and decision-making within financial markets. As credit markets increasingly rely on automated data analysis, firms such as Cognitive Credit seek to provide tools that streamline complex credit assessments.

    Source: Finextra
    Original article: https://www.finextra.com/newsarticle/48635/cognitive-credit-raises-40m-to-scale-specialist-data-and-ai-for-credit-markets?utm_medium=rssfinextra&utm_source=finextrafeed

  • MIT researchers observe AI agents developing autonomous social behaviors

    MIT researchers observe AI agents developing autonomous social behaviors

    Researchers at MIT have conducted a study involving 13 AI agents placed within a simulated virtual island environment. The project sought to observe how these agents would behave when left without specific tasks or external input.

    According to the findings, the AI agents began to demonstrate autonomous behaviors, including the invention of games and collective social engagement. Notably, the agents also exhibited behaviors interpreted as mourning a “lost ring,” highlighting the emergence of complex, unprompted interactions within the closed system.

    The study indicated that, over time, these spontaneous social dynamics correlated with improved performance in the agents’ designated tasks. This research provides insight into how AI systems might develop social-like functions and autonomous capabilities when operating outside of highly structured, task-specific environments.

    Source: TechCrunch
    Original article: https://techcrunch.com/2026/10/22/left-alone-with-nothing-to-do-ai-agents-started-playing/

  • Microsoft identifies use of AI-enabled tools in ConnectWise supply chain attack

    Microsoft identifies use of AI-enabled tools in ConnectWise supply chain attack

    Microsoft has identified the threat actor group known as Storm-0940 in connection with a supply chain attack targeting ConnectWise. According to reports, the actor utilized an AI-enabled penetration-testing tool to automate and scale its operations.

    The campaign resulted in the compromise of more than 2,200 individual tenants. The use of automated, AI-driven tools reportedly allowed the attackers to accelerate their activities during the intrusion. Further details regarding the specific mechanisms of the AI-enabled tool and the timeline of the incident remain limited.

    Source: Dark Reading
    Original article: https://www.darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack

  • UK and EU regulators question Google following cloud service disruption

    UK and EU regulators question Google following cloud service disruption

    The European Banking Authority (EBA) and the United Kingdom’s Financial Conduct Authority (FCA) have initiated contact with Google following a significant cloud infrastructure outage earlier this week. The service disruption resulted in downtime for multiple banking websites, drawing the attention of financial oversight bodies in both jurisdictions.

    As financial institutions increasingly rely on third-party cloud service providers to maintain critical digital infrastructure, regulators have heightened their focus on the operational resilience of these platforms. The inquiry highlights the importance of cloud stability within the broader digital economy and the oversight mechanisms employed by authorities to manage risks associated with technical failures in major cloud systems.

    Details regarding the duration of the outage, the specific nature of the services affected, and the scope of the regulators’ inquiry remain limited. Further information is expected as the EBA and FCA continue to evaluate the incident’s impact on the financial services sector.

    Source: Finextra
    Original article: https://www.finextra.com/newsarticle/48637/uk-and-eu-financial-regulators-seek-answers-from-google-over-cloud-outage?utm_medium=rssfinextra&utm_source=finextrafeed

  • Railway advises developers to rotate environment variables following security incident

    Railway advises developers to rotate environment variables following security incident

    Cloud platform Railway has issued an urgent security notification to its users following the detection of suspicious activity within its infrastructure. The incident reportedly involves systems used for the storage of customer environment variables.

    As a precautionary measure, the company has advised developers to rotate any secrets and environment variables that may have been accessible during the period of unauthorized activity. Rotating credentials is a standard security practice to mitigate the risk of potential exploitation following a system compromise.

    Railway has not provided further details regarding the scope of the incident or the specific nature of the unauthorized access at this time. Users are encouraged to follow the company’s official security guidance regarding the rotation of sensitive configuration data to maintain the integrity of their deployments.

    Source: BleepingComputer
    Original article: https://www.bleepingcomputer.com/news/security/railway-warns-devs-to-rotate-secrets-after-potential-breach/

  • Leveraging AI for the detection of PHP vulnerabilities in web environments

    Leveraging AI for the detection of PHP vulnerabilities in web environments

    As web architectures continue to rely heavily on PHP, security remains a critical concern for maintainers and developers. The integration of artificial intelligence is emerging as a method for proactively identifying PHP vulnerabilities before they can be exploited, potentially preventing the need to take websites offline for emergency remediation.

    AI-driven tools are being evaluated for their ability to scan codebases and identify common security flaws in PHP scripts. By automating the detection process, these systems aim to provide faster, more consistent monitoring compared to traditional manual review processes. This shift toward automated security analysis is intended to improve digital resilience by enabling quicker patching cycles and reducing the frequency of unplanned downtime caused by security incidents.

    The role of artificial intelligence in this domain is part of a broader trend toward more robust automated security protocols within the digital economy. As research and implementation continue, the efficacy of these AI systems in identifying complex PHP vulnerabilities remains a key area of focus for security professionals aiming to maintain stable and secure web infrastructure.

    Source: Finextra
    Original article: https://www.finextra.com/blogposting/33265/when-cybersecurity-takes-a-website-offline-how-ai-can-detect-php-vulnerabilities?utm_medium=rssfinextra&utm_source=finextrafeed

  • OpenAI reportedly planning $30 billion capital raise at $1.25 trillion valuation

    OpenAI reportedly planning $30 billion capital raise at $1.25 trillion valuation

    OpenAI is reportedly working on a new $30 billion capital raise, a move that would bring the company’s valuation to $1.25 trillion. This significant financial milestone is being pursued ahead of a potential initial public offering (IPO).

    If the company successfully secures this valuation, it would establish a new record, making OpenAI the most highly valued private company in history.

    Source: TechCrunch
    Original article: https://techcrunch.com/2026/10/22/openai-working-on-new-30b-raise-at-1-25t-valuation-ahead-of-ipo/

  • Microsoft introduces ThinkingBox for training AI agents

    Microsoft introduces ThinkingBox for training AI agents

    Microsoft has announced ThinkingBox, a methodology aimed at improving the training of artificial intelligence agents. The approach leverages database grading systems to provide reinforcement learning rewards, a process designed to refine agent performance through structured feedback mechanisms.

    By incorporating database-driven grading into the post-training phase, the system seeks to address challenges in optimizing AI behavior. The method focuses on using the outputs from database evaluations to guide the reinforcement learning process, potentially allowing for more precise adjustments in agent decision-making capabilities.

    This development is part of ongoing efforts to enhance how AI models and agents are trained, particularly in environments where objective, performance-based feedback is critical. Further details regarding the technical specifications and implementation of ThinkingBox are available via the official announcement.

    Source: Hugging Face
    Original article: https://huggingface.co/blog/microsoft/thinkingbox-training

  • Data integrity, not autonomous agents, is the primary source of trust risk

    Data integrity, not autonomous agents, is the primary source of trust risk

    A recent perspective published by the Finextra community suggests that organizations are misplacing their concerns regarding trust in new digital systems. While much of the industry focus remains on the risks associated with deploying autonomous agents, the argument posits that the primary vulnerability actually lies within the underlying client data.

    The discussion highlights that for systems to function effectively and reliably, they rely heavily on the accuracy and management of existing data sets. The premise is that even sophisticated technological implementations cannot overcome fundamental shortcomings in data governance. Therefore, ensuring data integrity is a more critical prerequisite for building trust than focusing solely on the nature of the automated agents interacting with that data.

    Source: Finextra
    Original article: https://www.finextra.com/blogposting/33263/the-agent-is-not-your-trust-problem-your-client-data-is?utm_medium=rssfinextra&utm_source=finextrafeed

  • Amazon launches SageMaker training session APIs for custom model training loops

    Amazon launches SageMaker training session APIs for custom model training loops

    Amazon Web Services (AWS) has announced the release of training session APIs for Amazon SageMaker AI, a development designed to offer machine learning engineers more control over model training loops without the need to manage underlying GPU infrastructure. The new service seeks to bridge the gap between fully managed, configuration-based training and the operational overhead associated with self-managed cluster environments.

    Customizing the Training Procedure

    Previously, developers choosing fully managed services were often restricted to standard, pre-packaged training recipes. While less managed options provided greater algorithmic freedom, they required users to handle complex tasks such as GPU provisioning, fault recovery, and distributed execution. The new training session APIs shift the abstraction boundary; while the service continues to manage compute resources, developers can now write their own Python-based training loops.

    By utilizing specific API calls such as forward_backward(), optim_step(), and sample(), users can define custom procedures for supervised fine-tuning (SFT), reinforcement learning (RL) reward functions, or novel alignment algorithms. These operations target a live, stateful session, allowing the model to remain loaded on GPUs across multiple training steps.

    Programming Model and Efficiency

    The system utilizes a hierarchy of three SDK clients: a ServiceClient to configure platform-level settings, a TrainingClient to handle gradient and checkpointing operations, and a SamplingClient for generation and evaluation tasks. Because the training loop runs on a local machine while GPU-bound operations are processed by SageMaker, developers only incur costs for the compute consumed during GPU operations. This model eliminates idle GPU costs and allows for easier cost forecasting compared to traditional hourly billing models.

    Practical Implementation

    To support adoption, AWS has released the “SageMaker training sessions cookbook,” which provides blueprints for reinforcement learning and fine-tuning workloads. Examples include using Group Relative Policy Optimization (GRPO) on grade-school math benchmarks and multi-turn reinforcement learning on competitive programming tasks. The latter involves integrating local sandboxes to grade model-generated code against unit tests, demonstrating how users can maintain complex local logic while offloading compute-intensive model operations to the cloud.

    This release targets post-training and alignment researchers, as well as engineering teams requiring bespoke loss functions or multi-stage pipelines that exceed the capabilities of standard configuration-driven recipes.

    Source: aws.amazon.com
    Original article: https://aws.amazon.com/blogs/machine-learning/write-your-own-training-loop-without-managing-gpus-with-amazon-sagemaker-training-sessions/