~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
231 articles
There’s a question that’s been sitting in the back of my mind lately.If we’re moving into a world where autonomous systems are planning, adapting, and executing actions with increasing independence… what does that actually mean for threat intelligence teams?I’m not asking this from a hype perspectiv
In conversations with people who are actually building and red teaming agentic systems, one theme keeps coming up: the failures they’re seeing don’t really look like prompt problems. They look like architectural ones.That framing matters, because it changes where attention goes. A lot of early work
For years, security teams learned how to protect systems that respond. Agentic AI introduces systems that decide.That difference sounds small at first. It isn’t.Most of today’s AI security conversation still treats models like tools: prompt in, response out, controls around the edges. Agentic syst
Check out a related podcast at https://www.drchaos.com/post/podcast-ai-agents-and-the-new-insider-threatAs we move into 2026, the cybersecurity landscape is undergoing a phase shift where AI is transitioning from a modular tool into an autonomous, operational actor For technical practitioners, this
Check out our companion blog at: https://www.drchaos.com/post/the-agentic-shift-architecting-for-the-crisis-of-authenticity-and-industrialized-cybercrime-in-2026Join our latest podcast. We explore the transformative impact of AI on insider threat dynamics. Learn about how AI agents manipulate system
My annual pilgrimage to Las Vegas for Black Hat USA and DEF CON—what many of my friends affectionately call “Hacker Summer Camp”—took place from August 2–7, 2025, at the Mandalay Bay Convention Center, with DEF CON extending the festivities through August 10 at the Las Vegas Convention Center.Last y
Catch up on recent discussions highlighting the significant and evolving cyber threat posed by Iran
Dive into a conversation around how to get started with your cybersecurity career.Click on the link to listen to the latest podcast: https://soundcloud.com/drchaos-podcast/unpacking-cybersecurity-careers
RSA Conference 2025 delivered a clear message: the next frontier in cyber defense—and offense—is Agentic AI.Okay what is Agentic AI because I feel like there was some quota that every vendor had to meet by mentioning Agentic AI. What is funny, almost evety vendor I spoke to had a bit of a different
I’m often asked by folks just getting started in cybersecurity about the best way to begin their journey. Honestly, I sometimes feel like I’m not great at answering this question because it depends on factors like current industry trends, what motivates the individual, and even the state of the job
Enabling Remote Desktop Protocol (RDP) on Kali Linux allows you to access the system remotely with a graphical interface. Below is a step-by-step guide to setting up and enabling RDP on Kali Linux, ensuring you understand each step fully and avoid potential pitfalls.Step 1: Update Your SystemBefore
The first step is to update your system. Assuming you have a relatively new build of Kali and a simple apt-get update and upgrade command, it should work fine here.Before you get started I recommend switching to root by issuing the command:sudo -i Step 1:apt-get update -y && apt-get upgrade -yNext,