~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
238 articles from the new era
Click here to listen on SoundCloud: https://soundcloud.com/drchaos-podcast/project-glasswing-podcastIn this week's episode of the Dr. Chaos Podcast, hosts Anthony Giandomenico (Tony G) and Aamir Lakhani (Dr. Chaos) dive deep into the rapidly evolving landscape of AI in cybersecurity. We are official
Check out my latest podcast with the famous TonyG around RSA: https://www.drchaos.com/post/podcast-rsa-2026-recapSan Francisco's Moscone Center hosted (by what I could find online) 43,500 cybersecurity professionals last week. The one message I kept on hearing....AI...Agentic....Something....The con
RSA 2026 is over, the buzzwords are still echoing, and it is time to sort signal from noise.In this episode, "Tony G" and I break down the biggest cybersecurity themes, AI trends, vendor messaging, and practical takeaways from RSA Conference 2026 — with a focus on what actually matters for defenders
1. Model and AI Pipeline SecurityThe first area is what I’d call model and AI pipeline security.This is where a lot of the early focus has been — making sure the model itself, the data feeding it, and the overall pipeline are secure before anything ever gets deployed.These solutions are looking for
Human friendly Until It Isn'tAt first, they sounded perfectly human.Two AI agents exchanging polite, helpful sentences about booking a hotel. Dates. Cities. Room types. Small talk in clean, predictable English. Nothing unusual. Nothing alarming.And then something changed.A subtle handshake. A quiet
The conflict that erupted on February 28, 2026, with joint US-Israeli strikes on Iran—codenamed Operation Epic Fury by the US and Operation Roaring Lion by Israel—has rapidly evolved into a full-spectrum hybrid war. While missiles, drones, and airstrikes dominate headlines (including the reported ki
As the US-Israel-Iran war enters its critical phase on March 4, 2026, the cyber domain has emerged as a silent yet potent arena of conflict. With Operations Epic Fury and Roaring Lion unleashing airstrikes on Iranian targets, the digital front has seen a mix of disruptions, threats, and proxy activi
There’s a question that’s been sitting in the back of my mind lately.If we’re moving into a world where autonomous systems are planning, adapting, and executing actions with increasing independence… what does that actually mean for threat intelligence teams?I’m not asking this from a hype perspectiv
In conversations with people who are actually building and red teaming agentic systems, one theme keeps coming up: the failures they’re seeing don’t really look like prompt problems. They look like architectural ones.That framing matters, because it changes where attention goes. A lot of early work
For years, security teams learned how to protect systems that respond. Agentic AI introduces systems that decide.That difference sounds small at first. It isn’t.Most of today’s AI security conversation still treats models like tools: prompt in, response out, controls around the edges. Agentic syst
Check out a related podcast at https://www.drchaos.com/post/podcast-ai-agents-and-the-new-insider-threatAs we move into 2026, the cybersecurity landscape is undergoing a phase shift where AI is transitioning from a modular tool into an autonomous, operational actor For technical practitioners, this
Check out our companion blog at: https://www.drchaos.com/post/the-agentic-shift-architecting-for-the-crisis-of-authenticity-and-industrialized-cybercrime-in-2026Join our latest podcast. We explore the transformative impact of AI on insider threat dynamics. Learn about how AI agents manipulate system