AI Security
Hello! My name is Matt Suiche. I work on AI Security at Tolmo, and I also experiment with side projects in AI Safety (Weightless, etc.) and Emulation & Operating System Research (WASM PSX, WASM NanoKrnl, etc.). I recently discussed cyberwar in the age of AI, Iran’s cyber capabilities, and how AI is reshaping hacking on Bloomberg’s Odd Lots and the National Security Lab podcast.
Previously, I founded OnDB Inc., a data infrastructure startup for the agentic economy, and co-founded CloudVolumes (acquired by VMware in 2014) and Comae Technologies (acquired by Magnet Forensics in 2022), where I later served as Head of Detection Engineering. I also founded the cybersecurity community project OPCDE.
My path into technology started in reverse engineering as a teenager, and has since spanned memory forensics, operating systems, virtualization, blockchain, and now AI infrastructure.
Sixty steps of GRPO on Inkling 2 Small, run through Tinker against a 523-task pool of checker-verified security tasks, took the model from 0.667 to 0.708 pass@1 on my exploit suite - beating every GLM-5.3-Flash arm I ever trained on the …
DeepSeek V4.1 has no residual stream between layers - each token carries four hyper-connection copies and the FFN write folds in one layer late. GLP spec_version 3 defines the fold site that replaces the missing hook, and the first v3 …
Structural detection for CVE-2026-86950, the CoreGraphics glyph rasterizer out-of-bounds write fixed in iOS 26.7.1, from the composite glyph chain down to the exact effective-coordinate threshold