tag / red-teaming
Cybersecurity writing tagged “Red Teaming.”
6 posts.
Certificates do not tell you whether a system can be manipulated through its own inputs. The threat model, the model supply chain, retrieval, agents, and five incidents that should change your questions.
Read articleI designed a two-day workshop with AI red-teaming as a full module, not a closing talk. We finished three of eight sessions. The classics ate both days.
Read articleSTRIDE was built for deterministic systems. Agentic AI breaks its core assumptions. Here is a five-zone method that actually finds EchoLeak-class attacks.
Read articlePrompts are payloads. Why classical red-teaming misses LLM-native attacks, and how to design adversarial tests that surface jailbreaks and tool misuse.
Read articleIoT devices fail open by default. A pragmatic checklist for hardening firmware, networks, and lifecycle management against the threats most teams overlook.
Read articleFive concrete moves security leaders should make this quarter to keep up with AI adoption, without slowing the teams shipping it.
Read article