~/authors/aamir-lakhani
Founder · Dr. Chaos
Aamir Lakhani is a leading senior security strategist responsible for providing IT security solutions to major enterprises and government organizations. He creates technical security strategies and leads security implementation projects for Fortune 500 companies, and has designed offensive counter-defense measures for the Department of Defense and national intelligence agencies.
His areas of expertise include adversarial AI, cyber defense, mobile application threats, malware management, Advanced Persistent Threat (APT) research, and the dark web. He is the author or contributor of several books, and has appeared on FOX Business News, National Public Radio, and other media outlets as an expert on cybersecurity.
Writing under the pseudonym Dr. Chaos, he operates this blog. In its list of 46 Federal Technology Experts to Follow on Twitter, Forbes described Aamir Lakhani as "a blogger, InfoSec specialist, super hero…and all around good guy."
~/articles
203 published articles
My annual pilgrimage to Las Vegas for Black Hat USA and DEF CON—what many of my friends affectionately call “Hacker Summer Camp”—took place from August 2–7, 2025, at the Mandalay Bay Convention Center, with DEF CON extending the festivities through August 10 at the Las Vegas Convention Center.Last y
Catch up on recent discussions highlighting the significant and evolving cyber threat posed by Iran
Dive into a conversation around how to get started with your cybersecurity career.Click on the link to listen to the latest podcast: https://soundcloud.com/drchaos-podcast/unpacking-cybersecurity-careers
RSA Conference 2025 delivered a clear message: the next frontier in cyber defense—and offense—is Agentic AI.Okay what is Agentic AI because I feel like there was some quota that every vendor had to meet by mentioning Agentic AI. What is funny, almost evety vendor I spoke to had a bit of a different
I’m often asked by folks just getting started in cybersecurity about the best way to begin their journey. Honestly, I sometimes feel like I’m not great at answering this question because it depends on factors like current industry trends, what motivates the individual, and even the state of the job
Enabling Remote Desktop Protocol (RDP) on Kali Linux allows you to access the system remotely with a graphical interface. Below is a step-by-step guide to setting up and enabling RDP on Kali Linux, ensuring you understand each step fully and avoid potential pitfalls.Step 1: Update Your SystemBefore
The first step is to update your system. Assuming you have a relatively new build of Kali and a simple apt-get update and upgrade command, it should work fine here.Before you get started I recommend switching to root by issuing the command:sudo -i Step 1:apt-get update -y && apt-get upgrade -yNext,
Artificial Intelligence (AI) has transformed how we interact with technology. Large language models (LLMs) are among the most prominent advancements, with OpenAI's ChatGPT being a well-known example. However, in specialized environments such as Linux, particularly for development, scripting, and com
Microsoft research posted a very interesting blog post on a current nation state threat being tagged as Midnight Blizzard. Who is this threat actor?Midnight Blizzard (also known as NOBELIUM) is a Russia-based threat actor attributed by the US and UK governments as the Foreign Intelligence Service of
Phishing continues to be the number one attack vector and impersonation attacks are not new. What is interesting is how there are threat actors using AI to enhance classic attacks.I’ve seen various versions of this attack from claims that I didn’t pay my taxes BUT I can wire money now (see more on t
The guy behind the BreachForums at 21 years old is serving a sentence from home (with a tracker around his leg). This is pretty interesting to see no jail time for this crime. See the full article HERE.
If you are concerned about somebody watching what you do while you use the Internet, here is yet another reason to validate your concerns. Not only is there the risk of threat actors and targeted advertising, but even the NSA is collecting data without warrants. They claim to have some rules regardi