Understand attackers,
empower defenders.

Security researcher, author and speaker. Offensive IT security with a focus on Active Directory, public clouds and AI systems. Head of Research and Principal Consultant at Corporate Trust.
Author for the German IT magazine iX, speaker at heise academy and heise conferences.
Articles appear in German, as do most events.

Frank Ully, portrait

Upcoming dates

online
Fortgeschrittene Security in der Microsoft-Cloud und Forensik in Cloudlogs von M365 und Entra ID
Webinar series · heise academy
online
Angriffe auf KI-⁠Systeme – Sprachmodelle, Agenten, MCP-⁠Server und Skills
Webinar series · heise academy · 4 more dates
online
online
Webinar · heise security · heise confer­ences
online
All 88 events, upcoming and past

Recently published

heise online · Interview · archived copy
All 40 articles since 2018

AI attacks

The chronology lists 296 publicly reported hacking incidents since August 2023 in which an AI took over steps of the attack, from writing an exploit or attack tool that was used against real targets to carrying out the entire intrusion on its own. In many of them, the AI’s involvement is known only because the attackers left traces of their AI use behind. Every entry links its sources and states their caveats. View the chronology

  • augmented
  • directed-autonomous
  • fully autonomous

One bar per month, August 2023 to October 2026