Consultant - Senior Advisor - Counter Hack Challenges Curmudgeon, programmer, slinger of packets. I tell lots of people that they've been hacked.

Johnsburg, IL
Joined February 2009
Epic stuff from Jay Beale. Walk away from this class knowing about (and the defenses against) the types of attacks that will be news headlines tomorrow.
Come join my updated Black Hat class in Las Vegas, "Agentic AI-Aided Kubernetes Attack and Defense!" Kubernetes and AI are more tightly-coupled than you think - about two thirds of organizations hosting generative AI models use Kubernetes to manage inference workloads (CNCF). And Kubernetes is growing in popularity for hosting streamable MCP servers and remote agents. We're going to have a blast with new cutting-edge exercises that integrate AI agents into attacking and defending Linux, containers, and Kubernetes. We'll also be attacking a multi-user agentic AI system running on Kubernetes, using both direct and indirect prompt injections, gaining access to the cluster, and adding indirect prompt injection backdoors to the vector database. As in all the other exercises, we'll turn around and harden the system against this. You can learn more and register here: blackhat.com/us-26/training/… Here's an excerpt of the class description: Learn how to use agentic AI to aid you as you attack and defend Kubernetes, Linux, and containers, from Jay Beale, who has led development of the Kubernetes CTF at DEF CON and the open source Kubernetes attack tool: Peirates. In this fully hands-on course, you'll get an x86 computer to keep, complete with an agentic AI framework, Kubernetes clusters, and capture the flag virtual machines, which you will attack and defend. You'll also get access to our cloud environment, allowing you to attack cloud-based Kubernetes clusters. This well-reviewed training focuses on giving you practical attack skills from real penetration tests, coupled with solid defenses to break attacks. You'll create an agentic AI platform with skills and tools that allow your agents to enumerate a cluster, analyze configuration weaknesses, and recommend attack paths. Every topic in the class has an attack exercise, where you will first compromise a Kubernetes cluster or application. Most have a matching defense exercise, where you will use new skills to break that attack, confident that it will break others.
115
I'll say it. Donald Trump is a small, petty man who, rather than focus his Presidency on service to our country, is obsessed with callow grievances. We can disagree about his other actions, but seriously, how is this EO anything but childish? forbes.com/sites/tonybradley…
1
5
181
If enough people swear in an affidavit that Trump is a member of Tren de Aragua, what happens? Asking for a friend...
1
73
Are we Great Again??? Surely we must be Great Again. Great? Again?
2
92
Are we Made Great Again yet?
1
1
133
I want to say that @Tailscale is incredible. That is all. You may now return to your dull, wretched lives.
1
4
249
This isn't about Russia. He's tanking the markets on purpose to enrich himself and his billionaire bros. The buying will commence soon.
2
91
As a father to eight beautiful, amazing, young women... This.
4
184
Today, we are all, metaphorically, in the airport of life: ◾Calories don't count. Go ahead, have that Cinnabon. ◾Money doesn't matter. Yes, it costs $19.99. But that's totally reasonable. ◾No one will judge you for having a cocktail with it. Even if it's 9am...
3
175
Here's what I'm thinking, @CommerceGov @CISACyber @uspto @tylertech : If you don't clean this up, I may be incentivized to use your lack of data sanitization "creatively." Think of the possibilities: your site might become a piece of performance art... 👿
1
3
2
291
Hey, @CommerceGov @CISACyber @uspto How about cleaning this up, mmmkay? It seems a little off-brand for the Department of Commerce to boost SEO for pharma bros.
1
1
1
194
Maybe you need to be involved as well, @tylertech It's not a good look for an organization that says, "[p]roviding online security and maintaining compliance with industry and regulatory standards is a commitment we take seriously."
82
So I reported this to the Department of Commerce and, based on their response, they're totally cool with it. DoC: Boosting SEO for pharma scammers, one drug at a time.
1
1
1
215
I'm pretty sure the French arranged for Snoop Dogg to be part of the U.S. Olympic coverage as subtle retribution for that whole "Freedom Fries" thing back in the early 2000s.
3
177
So, due to an oversight on the part of my brother, my blog's URL is now yourflyis0pen.com Yes. I'm blaming my brother.
1
2
194
I'm getting incredibly tired of jumping through all kinds of hoops to tell organizations that SHOULD do better that they've been compromised. If you're a financial institution and you don't have a monitored security contact address on your website, you suck.
1
1
139
I'm tempted to just start naming names and watching these organizations burn down.
1
1
83
Question: You get an email from someone telling you that they noticed your website is compromised. You check, and they are correct. Do you respond? Why/why not? I ask because I regularly notify people of hacked sites, and the sites get fixed, but I rarely get responses.
6
3
666
And no answer here either. Obviously, it's me. Apparently, I'm offputting.
1
2
149
I just notified another big, recognizable organization that their "shop" website is compromised. My fancy tool for finding compromised sites? Google. I keep saying this: Google your own sites, folks. Seriously. If *I* tell you you're compromised, you've lost the game.
1
3
231
Here's the thing. If, as an external entity, I'm better/faster at determining your website has been compromised, what does that say about your security team's monitoring? I should create GYSaaS: Googling Your Site as a Service...
4
121