~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
232 articles
This week's top five offensive security stories — DPRK supply chain ops, active ColdFusion exploitation, China-nexus RAT campaigns, VM escape vulnerabilities, and rapid-fire Gitea probing. Here's what
Artificial intelligence is quickly becoming part of everyday business workflows. We use AI to summarize emails, write reports, analyze logs, review documents, generate code, support customers, and automate tasks.That sounds great.It also means we are building systems where one AI may talk to another
Attackers are mass-exploiting a critical remote code execution vulnerability in SAP NetWeaver, with security researchers confirming hundreds of internet-exposed systems compromised within days of disclosure.
CISA issued an emergency directive requiring all federal agencies to patch a critical Ivanti Endpoint Manager Mobile authentication bypass vulnerability being actively exploited by nation-state hackers.
Federal prosecutors have indicted five members of the Scattered Spider hacking group for ransomware attacks that caused $200 million in damages at MGM Resorts and Caesars Entertainment.
Written by Anthony Giandomenicohttps://www.linkedin.com/in/anthonygiandomenico/The Shift: Not New, But Moving FastAgentic AI is not a new concept. At this point, most people in the industry have heard about it, and many have been experimenting with it in different forms. The idea of systems that can
Click here to listen on SoundCloud: https://soundcloud.com/drchaos-podcast/project-glasswing-podcastIn this week's episode of the Dr. Chaos Podcast, hosts Anthony Giandomenico (Tony G) and Aamir Lakhani (Dr. Chaos) dive deep into the rapidly evolving landscape of AI in cybersecurity. We are official
Check out my latest podcast with the famous TonyG around RSA: https://www.drchaos.com/post/podcast-rsa-2026-recapSan Francisco's Moscone Center hosted (by what I could find online) 43,500 cybersecurity professionals last week. The one message I kept on hearing....AI...Agentic....Something....The con
RSA 2026 is over, the buzzwords are still echoing, and it is time to sort signal from noise.In this episode, "Tony G" and I break down the biggest cybersecurity themes, AI trends, vendor messaging, and practical takeaways from RSA Conference 2026 — with a focus on what actually matters for defenders
1. Model and AI Pipeline SecurityThe first area is what I’d call model and AI pipeline security.This is where a lot of the early focus has been — making sure the model itself, the data feeding it, and the overall pipeline are secure before anything ever gets deployed.These solutions are looking for
Human friendly Until It Isn'tAt first, they sounded perfectly human.Two AI agents exchanging polite, helpful sentences about booking a hotel. Dates. Cities. Room types. Small talk in clean, predictable English. Nothing unusual. Nothing alarming.And then something changed.A subtle handshake. A quiet
The conflict that erupted on February 28, 2026, with joint US-Israeli strikes on Iran—codenamed Operation Epic Fury by the US and Operation Roaring Lion by Israel—has rapidly evolved into a full-spectrum hybrid war. While missiles, drones, and airstrikes dominate headlines (including the reported ki