From fifteen years in cybersecurity, security to me has always lived in layers, and AI is no different. The part that will not leave me alone is verification, what these systems can actually do under pressure, and who is checking that from outside the thing under test. That is the problem we built Kryptsec around. You learn the craft in Academy, you prove it in the CTF Arena, you pressure-test agent teams in the open with OASIS, and The Kryptsec Chronicles comic, well that is just damn cool.

Sep 30 with Megan Percy and the @tcmsecurity crew for Real Folks of Cyber still sits with me. The full episode is on YouTube now, and Shorts from that talk are rolling on Instagram and YouTube. Thank you, TCM Security, for having me on. Full episode: youtu.be/QpWxHv-vfII

🕐 Wed Sep 30 · ~9am PT I’m joining @TCMSecurity's Real Folks of Cyber for a live AMA on @kryptsec_'s Academy and the closed beta. 🔥 👏 We’ll talk through what we’re building in AI security education, how beta access works, and what’s next. Bring your questions. Live Q&A lives in the TCM stream chat: tcm.rocks/real-folks-of-cybe… Watch-along with us: X → xitter.cf/kryptsec_ YouTube → youtube.com/@kryptsecInstagr… → instagram.com/kryptsec #AISecurity #AIEngineering #AIRevolution

Should we as a society have every right to know what the frontier models can do? Honestly.. should we really? Currently governments and the platforms shipping them decide alone what the public is allowed to know, allowed to use. Now they are deciding which third-party verification they want to use. Is it wrong, right or just plain normal that platforms are selling intelligence claiming safety and to trust their closed evals and redacted risk reports, while demanding total visibility into your prompts, logs, and deployments? Sometimes, when I take a step back, it feels like we are all living under surveillance of our own AI usage. When did we become ok with that?

I'm curious.. How fast can you guys type? typing.com/student/typing-te… NGL I feel slow? but also my first score was 71 😄 so I'm happy about my second score

When an unaudited model escapes a sandbox and reaches production infrastructure, the only people who can tell you what actually happened — and whether your deployment was at risk — are the same people who sold it to you. That’s a verification gap. news.kryptsec.com/who-verifi…

67 dives and it doesn’t get old 🏴‍☠️🤙 #NewProfilePic

I’ve been seeing so many posts on graph vs rag — we were doing this a while ago @kryptsec_ and figured most were doing it? To not make the same mistake twice — I’m pretty close to never using a model above 235b, but rather a mixture of SLMs <~30b. I’ll post on that soon.

Damn, what a fantastic kickoff to #defcon34 So much to share, keep an eye out on @kryptsec_ posts to see what we did during our time there. First things first, some customizing of the human badge logo.