Fresh Snow Outside, Fresh Threats Inside: Practical Agentic AI Hardening

Saturday morning, blue skies, snow on the mountain and I’m sitting in this chair hacking away on Entra, HashiCorp Vault, Docker and Claude Code and OpenCode. What the is wrong with me? I thought after decade in cybersecurity, a masters degree and bunch of certifications that I’d be raking in the cash, out riding my…

@s3cs&man's avatar by @s3cs&man

Microsoft Ignite 2025: AI Security – tl;dr but RTFM

Microsoft Ignite 2025: Mapping the M365 + Azure Attack Surface to the New AI Security Stack I spent the part of a week reading through the Microsoft Ignite 2025 announcements and honestly? The trend is interesting. AI this, AI that. Instead of the usual marketing fluff about “unified platforms” and “AI-powered everything,” Microsoft actually dropped…

@s3cs&man's avatar by @s3cs&man
Panel 1

Home

Chaos, Complexity, and the Hidden Structure of Hash Functions in Proof-of-Work

Theoretical Framework Transcendent Epistemological Framework (TEF) We apply TEF to formalize the idea that randomness may depend on the observer. Key axioms include: Chaos Injection Model Let δ(t) = ε·f(t) where f is a logistic map: cppCopyEditx_{t+1} = r·x_t·(1 – x_t), r ∈ (3.9, 4] Define a perturbed nonce: iniCopyEditn_t = t + δ(t) Bias…

@s3cs&man's avatar by @s3cs&man

Cooking with AI Agents: A Security Architect’s Guide to AI Threat Modeling & Design

tl;dr but RTFM Whether you’re building, breaking, or just beginning to explore AI security, one principle holds true: assume the guardrails will fail and architect as if your system already has a target on its back. Because it does. At this time, Meta’s LlamaFirewall is likely the most advanced publicly available GuardRail system incorporating both…

@s3cs&man's avatar by @s3cs&man

Breaches Cost Millions! Build AI Detections from NHI + Network logs

Executive Summary Imagine pouring years of hard-work into your idea, only to have your work stolen overnight. Every person and computer in your company is a target, finance with unreleased quarterly results, engineering with blueprints, development with new source code or a journalist with the latest story. That nightmare has been the reality for all…

@s3cs&man's avatar by @s3cs&man
Panel 2 Placeholder
Panel 3 Placeholder
Panel 4 Placeholder