The Black Hat USA call for papers is open. This will be our 6th year of having a dedicated AI track. If you have some interesting AI research, be it attacking, defending, or applying AI, we’d love to see it. Please let me know if you have any questions. blackhat.com/call-for-pap...

The biggest hot take of the past few weeks is that software is dead. But is it really? Seems there are some fundamental realities not being considered. Regardless of success, software vulnerabilities will be absolutely everywhere. Welcome to the new reality. perilous.tech/the-death-of...

This Clinejection write-up is great, and I learned some things about GitHub actions caching, too. We experienced the same during our research for our Black Hat USA 2025 talk on attacking AI-powered developer productivity tools. adnanthekhan.com/posts/clinej...

If there was a killer use case for this "powerful agentic experience," surely they'd be touting it. But instead we are sold the ability to do things we can already do, just with less security and privacy.

I'll be speaking at Applied Machine Learning Days in Switzerland next week on the topic of AI Secure By Design. I discuss our AI Actor-based threat analysis method to simplify threat identification and get to value quickly.

Proof that dudes will engineer systems burning hotter than the sun to avoid actually talking to women. Women, who I imagine are flocking in droves to this site 😆 This is going great! The crypto aspect is the icing on the cake. The trajectory is clear.

Here we continue our technical write-ups of the exploitation of AI-powered developer productivity tools from Black Hat USA with Qodo. The takeaway here is that knowing prompt injection isn’t enough. kudelskisecurity.com/research/qod...

Literacy is our greatest weapon to remain robust and defend our humanity in this invasive, modern environment. Here, I recommend 7 books to create more robust humans. And yes, Huxley was right. perilous.tech/7-books-for-...

Hmm... The previous term was terrifying. Where could we look to find something more palatable? I know, dystopian science fiction!!!

The lengths people won't go to get themselves owned. This has been happening since 2023 with AutoGPT, only now with deeper access. This isn't rocket science, if you give something insecure complete and unfettered access to your system and sensitive data, you're going to get owned.

Wow, I said the exact same thing back in 2024 from the stage at AgileDevOps USA. It included the specific number of 14B in losses as well. I was explaining the possibility that OpenAI could go out of business in a few years.

Treating shopping as an optimization problem could have devastating economic effects. Removing the friction from the purchasing process (aka shopping) with AI agents could cause people to buy less, not more. Retailers may want to rethink their strategy. perilous.tech/agentic-shop...

Please don't listen to me or anyone else making AI predictions for 2026. With that said, here's my 6 AI predictions for 2026 😆 perilous.tech/6-ai-predict...

My favorite paper at the moment. If the notebook had numbered pages and a table of contents that would make it even better.

Nothing to worry about. It supports MFA and military-grade encryption.😆 "The company analyzed deidentified ChatGPT conversations and found that more than 230 million people globally ask health-and wellness-related questions on ChatGPT every week.”

The misconception that LLMs should be the first port of call for any and all problems and efficiencies can only arise in an era of hype and a lack of work experience. Anyone who’s had a job before has seen inefficiencies that could easily be addressed without advanced technology.

See you Saturday at #BSidesJax

Truth!

An AI consequence, completely obvious in hindsight. People slopufacturing evidence not to taint the environment, but to help and boost their social currency. When “clean up this photo” puts a new face on a perpetrator, alternate realities are created. www.theverge.com/news/776793/...

Sorry, but ideas aren’t all you need, and we aren’t on the cusp of the first billion-dollar solopreneur. In this post, I look at the architects of devaluation and the architecture of slop that’s fueling misconceptions about creativity and meaning. perilous.tech/2025/09/11/t...

I just got myself pumped up for the day! 😆 Occasionally this song pops into my head and I need to listen to the whole thing start to finish. www.youtube.com/watch?v=Fow7...

To all of the people pushing hard to coin the term “vibe security,” the joke is on you. Security has always been about vibes. 😆

I see they are remaking The Running Man, which appears to follow the book more closely. Gonna go out on a limb and say there’s a 100% chance that they don’t keep the ending 😆

First time I’ve designed an enamel pin. Terrible picture, but you get the idea. See you at Black Hat USA!

Getting ready to do our first dry run of our #BlackHatUSA talk, Hack To The Future! www.youtube.com/watch?v=wBl2...

It's going to be busy at both the #AISummit and #BlackHatUSA. It would be great to catch up with everyone. In addition to the briefings, I'm also hosting the AI Track Meetup and participating in the Review Board meet and greet. Come by and say hi. See you next week!

Thinking of prompts less as rigid, specific instructions and more as mere suggestions helps better understand what could go wrong and how to design systems that are more resilient to failure and attack. In essence, it's more prodding than programming.

I read this book back in 2020, and it’s only become more relevant. So many people make simple data mistakes and draw the wrong conclusions based on issues covered in this book.

"The results surprised us: Developers thought they were 20% faster with AI tools, but they were actually 19% slower when they had access to AI than when they didn't." metr.org/Early_2025_A...

The Black Hat USA schedule is live. Looking forward to seeing everyone soon. blackhat.com/us-25/briefi...

Since it’s easier to prolong the body than the mind, what if the way people are stored in the future isn’t cryonics, but memory care facilities? What if technology makes neurodegenerative conditions worse? I explore this and more in my new article. perilous.tech/2025/06/20/t...

Flooding the zone with truth is not an effective defense against flooding the zone with shit. It’s like trying to flood the zone with broccoli at an all-you-can-eat ice cream buffet, where the walls, tables, and chairs are also ice cream.

I present to you the power and possibility of using AI for entertainment. All it takes is an idea. Trust me, it's going to get a lot worse from here on out. Enjoy 😆 www.youtube.com/watch?v=lTcU...

It's strange to consider LLMs being so awesome that we need to share them with the cosmos as if they are something that advanced alien tech bros need to check out.

We need to stop huffing marketing hype as though it's insight. All it takes is one simple question: if this is true, then where is GPT-5? Claims without proof and vibes above all, we've entered The Shitularity.

There are now countless examples of problems caused by information that are made worse by more information. Access to so much information hasn’t made us superhuman. It’s made us astonishingly stupid. futurism.com/tsa-costco-c...

What happens when errors and hallucinations become facts, facts that may be impossible to dispute or lurk in the background unseen and uncorrected? Especially when new, more capable AI systems learn from these new "facts." perilous.tech/2025/06/05/a...

“Engineers in Noida and Bangalore manually coded client projects while being instructed to mimic AI-generated responses.” It’s not only deception, it’s dehumanization, which is the inevitable result of turning humans into machines. www.techspot.com/news/108173-...

The reframing of AI hallucinations as "formatting issues" is not a move I saw coming. Classic example of reframing an issue to reduce its perceived importance. futurism.com/ai-slop-scan...

“The hype has led to a new form of software development that appears to be more like casting a spell than developing software.” This is long before the term Vibe Coding was coined. I wrote this article back in 2023, and it still holds up. perilous.tech/2023/07/31/t...

Of course it was, because that's just what we do now. The fact that this has become normalized should be terrifying to everyone.

I’m convinced that YouTube shorts are basically cognitive bath salts, a fast track to brain rot. Their popularity speaks to a direction in our culture and our acceptance of the slopification of everything.

Gotta love Slack’s UI that keeps presenting this to me and no matter how many times I click the “Not now” it stays on the screen. Seriously, I don’t need a summary of “Sounds good” Hounding users to use AI features they don’t want or need is the new normal.

Join @tmlxs.bsky.social and me at #BlackHatUSA this year for Hack to the Future. This isn't a prompt injection talk. This is about the hidden dangers of deploying these tools in your environments and the potentially devastating vulnerabilities that can result. www.blackhat.com/us-25/briefi...

Trying to get your case dismissed by making a claim that your bot/product has First Amendment rights is an odd flex, and the way they had to word it to attempt to make legal sense blames the victim. Thankfully, the case wasn’t dismissed. scholarblogs.emory.edu/proflawrence...

I'll be speaking at the AI Summit on August 5th. Looking forward to a great conversation.

Next time someone asks me if I know what hustling looks like, I'm gonna show them this. If you can play Denny's, you can play anywhere 😆

The left should be making Russ Vought own this 24/7 in very simple language: Vought is making it easier for scammers to target you and your grandma.

The next battleground is in sight, and things are going to move fast. Half-baked tech pitched as transformational will be quickly adopted and thrown in front of children without any validation, but the demos will be amazing!

Move fast and break things is all well and good until the thing being broken is your child. The administration signed an executive order mandating AI in K-12 education. The impact could be irreparable damage if not done right. perilous.tech/2025/05/16/o...