~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
238 articles from the new era
A beginner-friendly, step-by-step guide to DNS tunneling: how it works, how to build a safe isolated lab with iodine, what it looks like on the wire, and — most importantly — how to detect and defend against it.
The blog returns with a decade of archives intact and a new focus: adversarial and offensive AI. Here's what to expect.
From the PolinRider DPRK supply chain drama to the JadePuffer agentic ransomware debate, the security community is having big conversations this week. Here's the pulse from r/netsec, r/cybersecurity,
AI agents are being weaponized in the wild — from crypto-stealing prompt injections to fully autonomous ransomware. Here's what the AI attack surface looks like in July 2026, and why your security tea
This week's attacker playbook includes video cable data exfiltration, Blogspot-hosted fileless loaders, a new Iranian C2 framework, and ClickFix phishing that impersonates Google's own verification UI
Active exploitation confirmed on Adobe ColdFusion. PoC released for Linux root escalation. ShinyHunters tearing through healthcare and education sectors. Here's the threat board and what to do about i
This week's top five offensive security stories — DPRK supply chain ops, active ColdFusion exploitation, China-nexus RAT campaigns, VM escape vulnerabilities, and rapid-fire Gitea probing. Here's what
Artificial intelligence is quickly becoming part of everyday business workflows. We use AI to summarize emails, write reports, analyze logs, review documents, generate code, support customers, and automate tasks.That sounds great.It also means we are building systems where one AI may talk to another
Attackers are mass-exploiting a critical remote code execution vulnerability in SAP NetWeaver, with security researchers confirming hundreds of internet-exposed systems compromised within days of disclosure.
CISA issued an emergency directive requiring all federal agencies to patch a critical Ivanti Endpoint Manager Mobile authentication bypass vulnerability being actively exploited by nation-state hackers.
Federal prosecutors have indicted five members of the Scattered Spider hacking group for ransomware attacks that caused $200 million in damages at MGM Resorts and Caesars Entertainment.
Written by Anthony Giandomenicohttps://www.linkedin.com/in/anthonygiandomenico/The Shift: Not New, But Moving FastAgentic AI is not a new concept. At this point, most people in the industry have heard about it, and many have been experimenting with it in different forms. The idea of systems that can