I Spent a Year Breaking AI Agents. Most Aren't Ready.
Director of Security, AI Research
Expert analysis and practical guidance on application security, AI, cloud architecture, and scaling your online businesses.
The biggest mistake I see new AppSec leads make isn't technical. It's political. They buy a SAST tool, scan everything, generate 40,000 findings, and wonder why engineering treats them like an adversary by week six.
Kenneth Kasuba
Director of Security, AI Research
Last quarter I got handed a 'production-ready' EKS cluster. 400 pods running as root with hostNetwork, one IAM role with s3:* on the whole account. It had been running this way for eleven months. That's not an outlier. It's the median.
Kenneth Kasuba
Director of Security, AI Research
Most security training teaches you to follow patterns. Real hacking demands something else. Hacker intuition is the discipline of building a mental model, spotting the seams where systems disagree, and proving it with quiet, high signal tests.
Kenneth Kasuba
Director of Security, AI Research
Get insider access to AI security research, threat analysis, and architecture insights.
In-depth labs, analysis, and walkthroughs of emerging threats and security best practices.
Innovative ways to operationalize modern research and tribal security knowledge.