Is this really a thing or did AI hallucinate? I’d like to use something like this to use quantum encryption to ssh into an EC2 instance without changing how I do it besides selecting a different algorithm.

Agentic ProbLLMs: Exploiting AI Computer-Use and Coding Agents - 39C3 ~ sounds interesting. Hence why I don’t want my agents surfing the web with unfettered access on machines that have credentials of any kind. events.ccc.de/congress/202...

Hacking Bluetooth earbuds. This one is pretty disturbing. infosec.exchange/@oots/115794...

Today for first time I see one of my blog posts pop up at the top of Google aimode search results. Oh and it rotates the results and the AI answer is wrong for the majority of cases.

Just saw on the news last night that some residents are protesting an AI data center in Port Wentworth which is adjacent to Savannah. Interesting.

All labs published including a pentesting lab (everyone’s favorite topic it seems) showing how to create a C2 channel on a vulnerable Wordpress instance that can run commands on the host OS and in your cloud if misconfigured. medium.com/cloud-securi...

Still… @bsky.app is the most difficult social media platform to post on because I have to spend time breaking up long posts into smaller bits. If you want to force smaller bits at least break it up for me when I enter a long post.

AI hallucinations again. I asked Google aimode for a certain product manufactured in USA and it gave me a company name. Sounded good.

People always ask me how to convince people security is important. Thats why I cover all the cloud breaches and threats on day one of this class. These are all still relevant but I would add others on my blog if I was writing this class today.

Beware WhatsApp users: GhostPairing Attacks: from phone number to full access in WhatsApp www.gendigital.com/blog/insight...

Microsoft will finally kill obsolete cipher that has wreaked decades of havoc - RC4 which is susceptible to Kerberoasting. arstechnica.com/security/202...

When my agents went haywire yesterday I thought maybe they would just work in the a.m. They did not. I did some investigation and added some monitoring. ~~ Monitoring Autonomous AI Agents ~~ Is it running? What is it doing? Is my system overloaded? medium.com/cloud-securi...

I got a question AWS security cert materials. The vendor certs show you know how to use specific tools. My class focused on concepts that apply to any security tool. Why is your security team asking for all those annoying things? 😉 medium.com/cloud-securi...

Posted more class labs. The labs illustrate concepts. WHY they matter is in the slides. No Paywall. medium.com/cloud-securi...

I was in AI Nirvana for a bit yesterday and then hit a wall which I think had to do with session load and authentication issues. I’m sure that will be resolved soon. But the other thing is that AI agents start off great but then swing wildly like they are affected by some centripetal force. Why?

For today’s ai 🤖 experiment I have multiple agents competing with each other. I’ve combined deterministic methods with ai methods to check and improve the output. I couldn’t get kiro hooks to do that so I had to create my own hooks.

I am running Kiro CLI in a locked down project directory and it is trying to download and run a crate called a stream v.0.6.21 which has nothing to do with anything I am doing. What is up with that?

When I taught this cloud was a new to most. Security teams were unfamiliar with how developers work and developers were unfamiliar with why security teams wanted things. I had to provide content for both. It was also a lot of gound to cover in five days! medium.com/cloud-securi...

I introduced automation on the first day of my cloud security class and explain why. Day 1 included a sample lab on GCP Azure and AWS. I hosted the lab code in a git repo so people unfamiliar with that could learn how and why to use it. medium.com/cloud-securi...

One of the first things I learned when I started researching cloud security was its impact on jurisdiction and why location matters. It’s in the first day of my class materials. www.slideshare.net/slideshow/2n...

🤖 AI Agents in Sandboxes 🤖 Limiting agent blast radius while vibe coding and in applications medium.com/cloud-securi...

I was just reading about Kiro autonomous agent to see how it is different than the framework I wrote for Q/Kiro CLI running in sandboxes. Here’s the crucial bit: Runs tasks in isolated sandbox environments and opens pull requests for review. kiro.dev/autonomous-a...

FTR @bsky.app is one of the hardest social media platforms to post on. Posts are too short. Critical parts get buried. At least you can edit posts unlike X with its time limits and quote unlike Mastodon. Also for some reason thumbnails are not showing up on Mastodon. LinkedIn mangles URLs. Oh well

Day 1 of my cloud security class starts with what is cloud…something which I tend to think of differently than a lot of other security people who say is just “someone else’s computer.” Day 1 starts here: www.slideshare.net/slideshow/2n...

Finally got around to publishing my cloud security class slides. Used to charge a lot of money for this but focus on pentesting now. Still mostly relevant. Cloud Security Class Slides: 2nd Sight Lab cloud security training slides from 2020 medium.com/cloud-securi...

Coupang data breach traced to ex-employee who retained system access #cybersecurity #hacking #news #infosec #security #technology #privacy

AWS Support Center Console now supports screen sharing for troubleshooting support cases [TR: Hey security teams…be aware and check out how this works.] aws.amazon.com/about-aws/wh...

Do not copy and paste URLs when logging into Azure. This highlights a possible phishing attack on any similar login mechanism. cybersecuritynews.com/consentfix-a...

Autonomous robot trying to navigate tourists in Miami. Right before this video some tourists were jumping in front of it and messing with it, 😆

If you are trying to get started with AI coding check this out, I’m going to be trying out and writing about some new tools in a bit. I’ve been researching how these tools work, security issues, and how to use them most effectively. But at the moment, I’m on vacation! 🌴☀️More soon…

New Prompt Injection Attack via Malicious MCP Servers Let Attackers Drain Resources

Ruby SAML Library Vulnerability Let Attackers Bypass Authentication

Trump plans executive order curbing state AI laws | The Record from Recorded Future News therecord.media/trump-plans-...

Nice list. There are some others I like as well. Testing a few now. Stay tuned. Be aware of how phishing can affect aws login as explained in one of my prior posts.

Upgrade Amazon Q CLI to Kiro CLI ~ When you’ve installed it in a shared folder and just want it to work quickly medium.com/cloud-securi...

Some real world advice for those looking to become a cloud engineer from some who has done it. Sarvar Nadaf is an #AWS Community Builder. From Fresher to Cloud Architect: How to Start Your AWS Cloud Journey dev.to/aws-builders...

🤖 AI Agents in Sandboxes 🤖 Limiting agent blast radius while vibe coding and in applications medium.com/cloud-securi...

As suspected I tried slack and the notifications are completely distracting for my easily side tracked mind. Had to shut it down for a while.

Met some celebrities in Vegas 😆😆

Hank’s First AI Program 🤖 Explaining generative AI through a simple old-school program written by grade-schoolers on a Commodore 64 back in the 80's medium.com/cloud-securi...

Pretty cool how AWS monitors and protects against threats like this. China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) | AWS Security Blog aws.amazon.com/blogs/securi...

AWS WAF has a lot of cool new functionality. Check this out. AWS re:Invent 2025 - A day in the life of an AWS WAF administrator (NET317) youtu.be/E_xm8W_BEFk?...

Read this if you are using the new AWS login flow. Adan is an AWS Community Builder. Phishing for AWS Credentials via the New ‘aws login’ Flow | by Adan medium.com/@adan.alvare...

This is a good presentation for understanding how to use AI agents. I really like the demo by Marc Booker showing how to use again memory. ERIN KRAEMER SENIOR PRINCIPAL TECHNICAL PRODUCT MANAGER, AWS AGENTIC AI AWS re:Invent 2025 Watch on demand reinvent.awsevents.com/on-demand/

On my way home from #aws #reinvent. Somebody is missing me. 🐶 So nice to see all my friends and make new ones! 💕 Super sad was @Werner Vogels’ last keynote. Always a fav. ❤️ 😢 Most excited to continue with Kiro CLI, AI research, Forge. Security research. Stay tuned.

CODE REVIEWS. Still and even more important with AI. And as always ⁦‪@Werner‬⁩ has the most valuable insights.

Werner Vogels’ last keynote 😢

And so it begins.. #aws #reinvent #keynote CEO Matt Garman

Brain dump of everything accomplished with AI, ideas, research, discoveries last 2-3 months. www.linkedin.com/posts/terira...