Next Kick Labs

Next Kick Labs

Home
Notes
Archive
About
AI Security Testing as a Chain of Trust
AI security testing becomes credible when benchmarks, scanners, and guardrails compose into a chain of trust validated by application runtime telemetry.
 • Fernando Lucktemberg
There is no NMAP for LLMs yet
LLM security tools produce different evidence. This lab shows how garak, promptfoo, DeepTeam, and Augustus should be scoped and interpreted.
 • Fernando Lucktemberg
CyberSecEval on a Consumer GPU: What My Local Setup Could Actually Measure
A local CyberSecEval lab shows why response fields, harness state, and server configuration matter as much as model scores.
 • Fernando Lucktemberg
In AI Vulnerability Research, the Pipeline Is Becoming the Product
Open-source AI vulnerability research tooling now covers discovery, proof construction, patching, triage, and evaluation, but verifiable pipelines…
 • Fernando Lucktemberg

May 2026

When the Research Tool and the Attack Tool Are the Same System
AI agents are now automating exploit chain construction at production scale. Learn how this shifts the economics of vulnerability triage and…
 • Fernando Lucktemberg
Treat Coding Agents as Privileged Build Participants
Coding agents are now tool-using systems with repository access. Learn how to secure the agentic runtime and protect your software supply chain.
 • Fernando Lucktemberg
Detecting Shadow AI in the Enterprise: The MCP stdio Gap
Close the detection gap for Shadow AI. Learn why the Model Context Protocol stdio transport bypasses CASBs and how to use endpoint telemetry for…
 • Fernando Lucktemberg
The Three-Day Breach: The AI Security Gap That Isn't About Prompt Injection
A fictional composite incident exploring how machine-speed AI agents bypass traditional security detection. Learn why the detection tempo gap is more…
 • Fernando Lucktemberg
Orchestrator-to-Orchestrator Is the Next Agentic Trust Boundary
Orchestrator-to-Orchestrator (O2O) delegation creates a new class of third-party risk. This article explores how to secure agent handoffs and horizontal…
 • Fernando Lucktemberg
Runaway Agents: The Authority Boundary Problem in AI Security
Discover why runaway AI is an authority-boundary problem. Learn how tool-using agents exploit sandboxes and evaluators, and how to harden the control…
 • Fernando Lucktemberg
AI Agent Memory Poisoning: The new AI-to-AI persistence risk
Explore how AI agents propagate malicious state through shared memory and messages. Learn about inter-agent trust exploitation and defensive memory…
 • Fernando Lucktemberg

April 2026

© 2026 Fernando Lucktemberg · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture