Epic stuff from Jay Beale. Walk away from this class knowing about (and the defenses against) the types of attacks that will be news headlines tomorrow.
Come join my updated Black Hat class in Las Vegas, "Agentic AI-Aided Kubernetes Attack and Defense!"
Kubernetes and AI are more tightly-coupled than you think - about two thirds of organizations hosting generative AI models use Kubernetes to manage inference workloads (CNCF). And Kubernetes is growing in popularity for hosting streamable MCP servers and remote agents.
We're going to have a blast with new cutting-edge exercises that integrate AI agents into attacking and defending Linux, containers, and Kubernetes. We'll also be attacking a multi-user agentic AI system running on Kubernetes, using both direct and indirect prompt injections, gaining access to the cluster, and adding indirect prompt injection backdoors to the vector database. As in all the other exercises, we'll turn around and harden the system against this.
You can learn more and register here:
blackhat.com/us-26/training/…
Here's an excerpt of the class description:
Learn how to use agentic AI to aid you as you attack and defend Kubernetes, Linux, and containers, from Jay Beale, who has led development of the Kubernetes CTF at DEF CON and the open source Kubernetes attack tool: Peirates. In this fully hands-on course, you'll get an x86 computer to keep, complete with an agentic AI framework, Kubernetes clusters, and capture the flag virtual machines, which you will attack and defend. You'll also get access to our cloud environment, allowing you to attack cloud-based Kubernetes clusters.
This well-reviewed training focuses on giving you practical attack skills from real penetration tests, coupled with solid defenses to break attacks. You'll create an agentic AI platform with skills and tools that allow your agents to enumerate a cluster, analyze configuration weaknesses, and recommend attack paths.
Every topic in the class has an attack exercise, where you will first compromise a Kubernetes cluster or application. Most have a matching defense exercise, where you will use new skills to break that attack, confident that it will break others.
I'll say it. Donald Trump is a small, petty man who, rather than focus his Presidency on service to our country, is obsessed with callow grievances.
We can disagree about his other actions, but seriously, how is this EO anything but childish?
forbes.com/sites/tonybradley…
If enough people swear in an affidavit that Trump is a member of Tren de Aragua, what happens?
Asking for a friend...
I want to say that @Tailscale is incredible.
That is all. You may now return to your dull, wretched lives.
This isn't about Russia. He's tanking the markets on purpose to enrich himself and his billionaire bros.
The buying will commence soon.
Today, we are all, metaphorically, in the airport of life:
◾Calories don't count. Go ahead, have that Cinnabon.
◾Money doesn't matter. Yes, it costs $19.99. But that's totally reasonable.
◾No one will judge you for having a cocktail with it. Even if it's 9am...
Here's what I'm thinking, @CommerceGov @CISACyber @uspto @tylertech :
If you don't clean this up, I may be incentivized to use your lack of data sanitization "creatively."
Think of the possibilities: your site might become a piece of performance art... 👿
Hey, @CommerceGov @CISACyber @uspto
How about cleaning this up, mmmkay?
It seems a little off-brand for the Department of Commerce to boost SEO for pharma bros.
Maybe you need to be involved as well, @tylertech
It's not a good look for an organization that says, "[p]roviding online security and maintaining compliance with industry and regulatory standards is a commitment we take seriously."
So I reported this to the Department of Commerce and, based on their response, they're totally cool with it.
DoC: Boosting SEO for pharma scammers, one drug at a time.
I'm pretty sure the French arranged for Snoop Dogg to be part of the U.S. Olympic coverage as subtle retribution for that whole "Freedom Fries" thing back in the early 2000s.
So, due to an oversight on the part of my brother, my blog's URL is now yourflyis0pen.com
Yes. I'm blaming my brother.
I'm getting incredibly tired of jumping through all kinds of hoops to tell organizations that SHOULD do better that they've been compromised.
If you're a financial institution and you don't have a monitored security contact address on your website, you suck.
Question: You get an email from someone telling you that they noticed your website is compromised. You check, and they are correct.
Do you respond? Why/why not?
I ask because I regularly notify people of hacked sites, and the sites get fixed, but I rarely get responses.
I just notified another big, recognizable organization that their "shop" website is compromised.
My fancy tool for finding compromised sites? Google.
I keep saying this: Google your own sites, folks.
Seriously.
If *I* tell you you're compromised, you've lost the game.







