dr.chaos
Editorials

Dr. Chaos is back — dark security, total chaos, and adversarial AI

Aamir Lakhani2 min read

The lab is back online.

Dr. Chaos has been the home of dark security and total chaos since 2013 — hundreds of articles on penetration testing, the dark web, malware analysis, and the tools of the trade. This relaunch keeps all of it (browse the legacy archive) and points the blog at the fight that defines this decade: adversarial and offensive AI.

What to expect

  • News & analysis — what's actually happening in AI-powered attacks and defense, without the vendor gloss.
  • Tutorials & demos — hands-on, lab-tested walkthroughs. Prompt injection, model red teaming, AI-assisted recon, and the classic offensive tradecraft that still works.
  • Editorials — opinions are ours and sometimes sharp. That's the point.
  • Podcast and videos — the Dr. Chaos podcast and conference talks, all in one place.

Stay in the loop

New articles land in the RSS feed the moment they publish, and subscribers get them by email. No spam, no tracking pixels, one-click unsubscribe.

Welcome back to the chaos.

Aamir Lakhani

Founder · Dr. Chaos

Aamir Lakhani is a leading senior security strategist responsible for providing IT security solutions to major enterprises and government organizations. He creates technical security strategies and leads security implementation projects for…

Share:X / TwitterLinkedInBlueskyMastodonHacker News

~/related

Keep digging

More research along the same attack path.

Adversarial AI

Your API Key Was Someone Else's Credit Card: The OpenCode Console Breach

OpenCode called it a "large scale distillation attack." The victims called it an overnight bill. What happened to OpenCode Console users' stored OpenAI, Anthropic, and Google keys, why a hosted key store changes the blast radius, what "distillation" can and cannot mean here, a twenty-minute key lockdown for each provider, and what anyone building a bring-your-own-key console should change.

Aamir Lakhani12 min read
Adversarial AI

ATT&CK Finally Has a Name for Prompt Injection. Now Write the Detection.

MITRE ATT&CK v20 adds five AI techniques to the Enterprise matrix: Direct and Indirect Prompt Injection under Execution, AI-Enabled Exfiltration, AI Result Poisoning, and Impair Autonomous Defenses. Why the placement matters more than the count, what the direct versus indirect split means for your trust boundaries, how MITRE's exfiltration analytic actually works, and the detection gaps you should know about before your next coverage report.

Aamir Lakhani12 min read
Adversarial AI

Meta's Muse Wonder Has Your Calendar. Who Holds the Guardrails?

Meta's Muse Wonder and Muse Wonder Full are real frontier models built for personal agents. What Meta shipped, how to read its benchmark and safety charts, what independent tests and six launch-week videos found, what r/MetaAI users are saying, and why the security that matters lives in the Muse product, not in the model developers get through the API.

Aamir Lakhani18 min read