ZeroNoise Logo zeronoise
Post
Venture money piles into a few names as AI-found vulnerabilities spread past PHP
•
6 min read
• 2285 docs
Modal's raise and the 20VC/SaaStr debate show how concentrated venture capital has become. OpenAI says finding and fixing bugs one at a time won't scale, while new incidents and investor appetite for security, AI-for-science and frontier companies all grow.

Capital is going to fewer companies

The 20VC x SaaStr discussion described an unusually narrow market. Harry Stebbings met a profitable company with $20M ARR, growing 600–700% and with a strong team, and no VC responded . Rory O'Driscoll says space data centers and quantum are still getting money. The squeeze is on vertical software, where investors quietly fear AI erases the category . Jason Lemkin's tactical advice: founders with top-decile numbers outside hot categories should plan to meet 100 VCs .

The panel also went through the math of funding at each stage:

  • Large funds: $5B+ funds need billion-dollar positions, which makes a $2B outcome hard to use without majority ownership .
  • Seed: entry prices of $50–100M and multi-stage firms crowding allocations leave seed investors with stakes too small to matter .
  • The counterview: Rory cites history: 10–20 decacorns per decade, against a market behaving as if 90 will appear this year .

Inference vs. neoclouds. Modal raised a $750M Series D led by Accel at $15.75B post-money and says it crossed $1B in annualized run rate. Its May Series C valued it at $4.65B . The CEO says sandboxes, which run AI-generated code, now make up about a third of revenue. Demand came from vibe-coding companies, background agents and RL work at new labs . Rory's argument: if quality is similar, cost-sensitive buyers like Replit will move tokens from a 70%-gross-margin lab to a 30%-margin inference host . Replit did switch its default model to OpenAI, which Lemkin attributes to prices 30–40% lower for similar quality .

CoreWeave shows the other side. It fell 15.5% on October 14, some of its bonds yielded above 15%, and credit-default-swap spreads passed 1,000bp .

Anthropic. Anthropic reportedly told prospective investors Q3 revenue was $16.8B, up from $11.6B in Q2. IPO talk reportedly centered on about $1.5T, below the ~$2T investors expected .

Late-stage multiples. An Anduril employee tender implied about $90B on $2.2B of trailing revenue . Rory calls private multiples "almost certainly disconnected" .

Security: OpenAI says bug-by-bug fixing won't scale

Greg Brockman published OpenAI's account of PHP2Shell. The bug sat in PHP for 14 years. Calif researchers found a version using GPT-5.6 Sol in August, and OpenAI found a fuller version independently in September . He also mentions a Node.js RCE disclosed the same day. He calls the fixing process "slow and manual" and says it won't scale . He floats authorized defenders, such as government, scanning for vulnerable hosts and in extreme cases patching them remotely . Brockman says OpenAI moved 25% of its production engineers to model-driven hunting for holes in its own systems .

The fallout widened this period:

  • Quest Diagnostics was reported hacked, with patient data exposed. Quest serves roughly half of US hospitals and physicians .
  • Replit says it patched its infrastructure and blocked exploits after vulnerabilities in widely used third-party software .
  • Jason Clinton (Anthropic) told security leaders to ask their boards for funding for the basics, not AI, and to "hold on for ~18 months" .
  • Nick Dobos claims, without sourcing, that 3% of all recorded "critical" bugs were found in the past month .

CrowdStrike's view. George Kurtz says attacker breakout time now averages 29 minutes and can be as fast as 27 seconds . He says much of the attacking runs on open-weight models, because frontier models refuse cyber requests . He claims a general remediation task costs about $0.03 on CrowdStrike's post-trained model versus about $10 on a top frontier cyber model . One bank CIO told him open-weight models a few months behind the frontier are "plenty" for most work .

On the startup side, Cogent Security (CEO Vineet Edupuganti, formerly at Abnormal) has raised $53M, with Greylock and Bain Capital among its backers .

Agents in bank accounts. Axios reports major US banks are finding third-party AI agents inside customer accounts and can't reliably tell humans from agents . David Sacks says most of this is customers handing their credentials to agents. He argues banks should support user-directed agents, with read-only access as an interim step . The open question is how to identify and permission agents.

Frontier bets and new funds

  • a16z Frontier: a16z renamed a16z Crypto to a16z Frontier and widened its mandate to companies building markets that may take years to develop . Named interests include AI-native uses, autonomous machines, bio, full-stack startups, and networks of agents that transact with each other . Chris Dixon leads it with Marc Andreessen, Ben Horowitz, Eddy Lazzarin and Guy Wuollet . Andreessen predicts startup formation will "skyrocket" because individuals are adopting AI faster than institutions .
  • Warp Sciences: raised a $215M Series A led by Lightspeed to apply AI and robotics to drug development. Co-founders are Kevin Weil, DJ Patil, FAIR co-founder Manohar Paluri and Sol Reisberg . The pitch is a US robotics-first CRO, a contract lab that runs experiments for biotechs. Its founders say US CROs cost 4–5x more than offshore ones, but offshore labs carry IP and geopolitical risk .
  • AMI Labs: a moderator restated details of Yann LeCun's company, a world-models bet against LLM scaling. It raised $1.03B in March at a $3.5B pre-money, described as Europe's largest pre-launch AI round .
  • Tractian (YC W21): raised a $130M Series D at $1.4B. It sells sensors plus AI for predicting industrial machine failures, has passed $100M ARR and is growing 90% a year .
  • Robotics caution: Jason Shuman says robotics venture funding is up over 400% in two years while installations grew less than 25% year over year .

How AI is changing incumbents

Podium says it crossed $150M in AI ARR in 2.5 years. Its first $150M business took eight years, and it had well over $100M in revenue when it chose to start over . It reports 20,000 agents working for customers, and says it is profitable and free-cash-flow positive . Paul Graham called it "founder mode": a hired CEO couldn't have abandoned the existing revenue .

Anthropic says its merged code changes went from about 2,500 a day in May to over 30,000 in September. It now sees source control, builds and CI as the bottleneck . It built a closed-source source-control system (Scion) and a code-review tool (Antique) to replace Git and GitHub . Together with the panel's view that making AI-written code production-ready is software's most important category , this points to developer infrastructure as an area to invest in.

Getty Images filed for Chapter 11, and public shareholders get nothing . Its active annual subscribers fell 25.2% to 240K, while editorial revenue grew 9.2% . That is one data point on generative AI eroding stock content while news coverage holds up.

Briefly

  • Carbon-X: Hugging Face's 14.8B open DNA-and-text model averages 66.7% on five DNA benchmarks, versus 67.5% for GPT-6.1 Sol. It fits on one 80GB GPU and is not clinically validated .
  • OCRia-1: LlamaIndex's document-parsing model claims top scores on ParseBench and three third-party benchmarks .
  • Whop: reportedly raised $200M at $5.1B, led by Sequoia, as it moves into payments .
Venture money piles into a few names as AI-found vulnerabilities spread past PHP
Summary
Coverage start
1 day ago
Coverage end
3 hours ago
Frequency
Daily
Published
2 hours ago
Reading time
6 min
Research time
22 hrs 59 min
Documents scanned
2285
Documents used
26
Citations
50
Sources monitored
119 / 120
Insights
345
View
Skipped contexts
Source details
Source Docs Insights Status
SETH LEVINE's VC ADVENTURE 0 0
Hunter Walk 0 0
SaaStr 3 3
andrewchen 0 0
Elad Blog | Substack 0 0
AVC 0 0
Above the Crowd 0 0
Entrepreneur Ride Along 137 12
r/SideProject - A community for sharing side projects 512 78
Future(s) Studies 272 4
Artificial Intelligence (AI) 284 39
Software As a Service Companies — The Future Of Tech Businesses 660 83
Investing In AI 0 0
Big Technology 0 0
The Gradient 0 0
Import AI 0 0
Sam Altman 0 0
The community for ventures designed to scale rapidly | Read our rules before posting ❤️ 79 7
Co-Founder: Find Your Co-Founder Here 0 0
Entrepreneur 78 1
Naval 0 0
Machine Learning 12 4
Deep Learning 33 8
Natural Language Processing 2 1
Venture capital news and articles, for the VC industry 0 0
Newcomer 1 1
Jerry Liu 6 2
Harrison Chase 6 3
Cristóbal Valenzuela 3 1
Amjad Masad 2 1
Arthur Mensch 0 0
clem 🤗 5 3
Aidan Gomez 0 0
Kanjun 🐙 0 0
Suhail 6 4
Guillaume Lample @ NeurIPS 2024 0 0
Clouded Judgement 0 0
Bindu Reddy 5 4
Parag Agrawal 0 0
Harry Stebbings 9 5
Keith Rabois 0 0
Fred Wilson 0 0
Brad Feld 0 0
Exponential View 0 0
The Pragmatic Engineer 1 1
Latent.Space 3 3
Mark Suster 4 1
Benedict Evans 0 0
Allie K. Miller 3 2
Elizabeth Yin 💛 10 1
Roelof Botha 0 0
Andrew Reed 1 0
Luciana Lixandru 0 0
The Pragmatic Engineer 1 1
Elad Gil 2 1
Nathan Benaich 12 6
sarah guo 12 5
@jason 8 4
Vinod Khosla 2 1
Daniel Gross 1 1
Ann Miura-Ko 🦖 1 1
Mike Volpi 0 0
Aravind Srinivas 8 4
Ajay Agarwal 2 1
Leo Polovets 0 0
David Sacks 2 1
Lenny's Newsletter 0 0
Interconnects 0 0
Not Boring by Packy McCormick 0 0
Marc Andreessen 🇺🇸 0 0
Chris Dixon 4 2
Sriram Krishnan 4 2
a16z 26 11
benahorowitz.eth 0 0
martin_casado 17 7
andrew chen 3 1
Scott Kupor 5 1
David Ulevitch 🇺🇸 1 1
Dalton Caldwell 4 2
Y Combinator 3 2
Jessica Livingston 0 0
Paul Graham 6 2
Invest Like The Best 0 0
Garry Tan 9 2
Michael Seibel 2 1
Sam Altman 0 0
TechCrunch 1 1
Plug and Play Tech Center 0 0
No Priors: AI, Machine Learning, Tech, & Startups 1 1
Lex Fridman 0 0
Lightspeed Venture Partners 1 1
500 Global 0 0
Google for Startups 0 0
ThisWeekinStartups 0 0
Two Minute Papers 0 0
My First Million 0 0
Lenny's Podcast 0 0
All-In Podcast 0 0
Garry Tan 0 0
Y Combinator 1 1
Acquired 0 0
Foundation Capital 0 0
20VC with Harry Stebbings 1 1
Sequoia Capital 0 0
Greylock 0 0
Stanford eCorner 1 1
a16z 1 1
Jeremy Howard 0 0
Aravind Srinivas 0 0
Cassie Kozyrkov 0 0
Andrej Karpathy 0 0
Alexandr Wang 0 0
Naval Ravikant 0 0
Clément Delangue 0 0
Elad Gil 1 1
Fei-Fei Li 0 0
Andrew Ng 4 4
Demis Hassabis 0 0
Sam Altman 0 0
Yann LeCun 1 1