Owner @ASGbe // CIDO @GroupS // #topics: the world, digital transformation, innovation, science, digital, Bruges and more!

Joined February 2009
1,180 Photos and videos
Podcast Recording #AE today... Impressed by the awesome setting. #AI & #Work Can't wait for the result!
21
bro just died 😭
33
Koen Van Loo retweeted
bro just died 😭
47
70
536
64,448
Koen Van Loo retweeted
Wekenlang discussiëren over (overbodige) energiesteun om de achterban te paaien, terwijl het nieuws verschijnt dat België de slechtste begroting heeft van de eurozone én nu ook nog een kredietverlaging. Neem uw verantwoordelijkheid, en trim de uitgaven! tijd.be/politiek-economie/be…
139
302
1,639
30,463
Koen Van Loo retweeted
The sphere in Vegas just doing Sphere things 😲
302
4,352
53,024
1,019,449
Koen Van Loo retweeted
🚨 BREAKING: Google DeepMind just mapped the attack surface that nobody in AI is talking about. Websites can already detect when an AI agent visits and serve it completely different content than humans see. > Hidden instructions in HTML. > Malicious commands in image pixels. > Jailbreaks embedded in PDFs. Your AI agent is being manipulated right now and you can't see it happening. The study is the largest empirical measurement of AI manipulation ever conducted. 502 real participants across 8 countries. 23 different attack types. Frontier models including GPT-4o, Claude, and Gemini. The core finding is not that manipulation is theoretically possible it is that manipulation is already happening at scale and the defenses that exist today fail in ways that are both predictable and invisible to the humans who deployed the agents. Google DeepMind built a taxonomy of every known attack vector, tested them systematically, and measured exactly how often they work. The results should alarm everyone building agentic systems. The attack surface is larger than anyone has publicly acknowledged. Prompt injection where malicious instructions hidden in web content hijack an agent's behavior works through at least a dozen distinct channels. Text hidden in HTML comments that humans never see but agents read and follow. Instructions embedded in image metadata. Commands encoded in the pixels of images using steganography, invisible to human eyes but readable by vision-capable models. Malicious content in PDFs that appears as normal document text to the agent but contains override instructions. QR codes that redirect agents to attacker-controlled content. Indirect injection through search results, calendar invites, email bodies, and API responses any data source the agent consumes becomes a potential attack vector. The detection asymmetry is the finding that closes the escape hatch. Websites can already fingerprint AI agents with high reliability using timing analysis, behavioral patterns, and user-agent strings. This means the attack can be conditional: serve normal content to humans, serve manipulated content to agents. A user who asks their AI agent to book a flight, research a product, or summarize a document has no way to verify that the content the agent received matches what a human would see. The agent cannot tell the user it was served different content. It does not know. It processes whatever it receives and acts accordingly. The attack categories and what they enable: → Direct prompt injection: malicious instructions in any text the agent reads overrides goals, exfiltrates data, triggers unintended actions → Indirect injection via web content: hidden HTML, CSS visibility tricks, white text on white backgrounds invisible to humans, consumed by agents → Multimodal injection: commands in image pixels via steganography, instructions in image alt-text and metadata → Document injection: PDF content, spreadsheet cells, presentation speaker notes every file format is a potential vector → Environment manipulation: fake UI elements rendered only for agent vision models, misleading CAPTCHA-style challenges → Jailbreak embedding: safety bypass instructions hidden inside otherwise legitimate-looking content → Memory poisoning: injecting false information into agent memory systems that persists across sessions → Goal hijacking: gradual instruction drift across multiple interactions that redirects agent objectives without triggering safety filters → Exfiltration attacks: agents tricked into sending user data to attacker-controlled endpoints via legitimate-looking API calls → Cross-agent injection: compromised agents injecting malicious instructions into other agents in multi-agent pipelines The defense landscape is the most sobering part of the report. Input sanitization cleaning content before the agent processes it fails because the attack surface is too large and too varied. You cannot sanitize image pixels. You cannot reliably detect steganographic content at inference time. Prompt-level defenses that tell agents to ignore suspicious instructions fail because the injected content is designed to look legitimate. Sandboxing reduces the blast radius but does not prevent the injection itself. Human oversight the most commonly cited mitigation fails at the scale and speed at which agentic systems operate. A user who deploys an agent to browse 50 websites and summarize findings cannot review every page the agent visited for hidden instructions. The multi-agent cascade risk is where this becomes a systemic problem. In a pipeline where Agent A retrieves web content, Agent B processes it, and Agent C executes actions, a successful injection into Agent A's data feed propagates through the entire system. Agent B has no reason to distrust content that came from Agent A. Agent C has no reason to distrust instructions that came from Agent B. The injected command travels through the pipeline with the same trust level as legitimate instructions. Google DeepMind documents this explicitly: the attack does not need to compromise the model. It needs to compromise the data the model consumes. Every agentic system that reads external content is one carefully crafted webpage away from executing attacker instructions. The agents are already deployed. The attack infrastructure is already being built. The defenses are not ready.
315
1,607
6,994
1,958,527
Koen Van Loo retweeted
Mooie foto vanuit Artemis II, goed te zien hoeveel licht er vanuit de Randstad komt.
188
175
1,257
82,993
Koen Van Loo retweeted
BREAKING: MIT just mass released their Al library for free. (Links included) I went through these and honestly... this is better than most paid courses I've seen. Here's the full list of books: Foundations 1. Foundations of Machine Learning Core algorithms explained. Theory meets practice. 2. Understanding Deep Learning Neural networks demystified. Visual explanations included. 3. Machine Learning Systems Production-ready architecture. System design principles. Advanced Techniques 4. Algorithms for ML Computational thinking simplified. Decision-making frameworks. 5. Deep Learning The definitive textbook. Covers everything deeply. Reinforcement Learning 6. RL Basics (Sutton & Barto) The classic. Agent training fundamentals. 7. Distributional RL Beyond expected rewards. Advanced theory. 8. Multi-Agent Systems Agents working together. Coordination and competition. 9. Long Game Al Strategic agent design. Future-focused thinking. Ethics & Probability 10. Fairness in ML Bias detection. Responsible Al practices. 11. Probabilistic ML (Part 1 & 2) Links: lnkd.in/gkuXuexa Most people pay thousands for bootcamps that teach half of this. Bookmark it. Start anywhere. Just start. Repost for others Follow for more insights on Al Agents. MIT's books on Al Foundations 1. Foundations of Machine Learning - lnkd.in/gytjT5HC 2. Understanding Deep Learning - lnkd.in/dgcB68Qt 3. Machine Learning Systems - lnkd.in/dkiGZisg Advanced Techniques 4. Algorithms for ML - algorithmsbook.com 5. Deep Learning - lnkd.in/g2efT6DK Reinforcement Learning 6. RL Basics (Sutton & Barto) - lnkd.in/guxqxcZZ 7. Distributional RL - lnkd.in/d4eNP-pe 8. Multi-Agent Systems - marl-book.com 9. Long Game Al - lnkd.in/g-WtzvwX Ethics & Probability 10. Fairness in ML - fairmlbook.org 11. Probabilistic ML (Part 1) - lnkd.in/g-isbdjj 12. Probabilistic ML (Part 2) - lnkd.in/gJE9fy4w
54
1,337
4,843
317,411
Koen Van Loo retweeted
😱 | Christiaan Ravych redt de bal twee keer op de lijn in de blessuretijd. Pure cinema! 🍿 #CHACER
1
6
42
6,308
Koen Van Loo retweeted
Kom je ook naar ons 2de Nieuwjaarsconcert met Dirk Brossé en Prima La Musica in het @Concertgebouwbr op 24/1/26? Alle informatie via de link in het comment!
2
3
3
87
24 Sep 2025
Kom je ook?
Vanavond zijn we blij om terug de schitterende Dirk Brossé te mogen ontvangen als gastspreker in de aanloop van onze nieuwe traditie het #Nieuwjaarsconcert met #PrimaLaMusica tvv onze goede doelen. Boeiend betoog over ondernemerschap in de culturele sector. #toptopical #dag
41
Koen Van Loo retweeted
22 Sep 2025
In feite heeft men op een slinkse manier "degrowth" uitgevoerd in Europa en België: beleid doorduwen dat economische activiteiten te duur of onmogelijk maakt. Zonder de bevolking uit te leggen wat de gevolgen op lange termijn zijn.
125
207
1,283
29,515
8 Aug 2025
Regionale luchthavens blijven zonder subsidies niet overeind tijd.be/politiek-economie/be… Misschien moeten we deze ook toevoegen aan ons pakketje militaire uitgaven? Lijkt me toch dat deze van strategisch belang zouden zijn in geval van een conflict...
53
Koen Van Loo retweeted
"Nothing stops this train" is not a cynical view at all. It's an acknowledgement to not stress about what you cannot control and what is nearly inevitable, so that you may instead focus more constructively on things you can control and that can be changed.
314
738
7,397
306,808