Chris Dale

Co-founder & Chief Hacking Officer @ River Security

SANS Principal Instructor · SEC504

Continuous penetration testing · Attack surface management · Incident response

"Hack for good, not evil or greed. Seek to understand, not just to solve."

Latest posts

2026-09-14 My paper on AI-powered penetration testing, published by SANS and Horizon3 A thought leadership paper I wrote on how autonomous, AI-driven offensive security actually works, now published as a SANS white paper, sponsored by Horizon3.ai.
2026-08-27 Building an organization attackers hate to attack I had an excellent time presenting at SANS Copenhagen on building an organization attackers hate to attack: solid best practices, infrastructure as code, knowing when you're getting hacked, and a sprinkle of cyber deception. Slides inside.
2026-08-26 TV 2 asked me about the "cyberwar" declared on Norway A pro-Russian group declared cyberwar on Norway with DDoS attacks. TV 2 asked me about it. My message: this is provocation, not devastation. Answer it with resilience and viking mentality, not fear.
2026-07-08 Revisiting the Azure Kudu XSS: what Microsoft said Ten years on, the email thread behind the Azure Kudu XSS is more interesting than the bug. A look at the disclosure, why MSRC kept rejecting it, and why they were wrong.
2026-07-07 Coaching Singapore's HTX teams to top-5 finishes at DEF CON 32 What it actually means to coach a CTF team: coordination, challenge triage, and knowing when to sit down and grind the hard ones together.
2026-07-01 I was challenged to hack Norwegian municipalities, and I hit the jackpot Given a challenge to hack Norway's municipalities, I went broad: all 357 at once. The payoff was a third-party AWS-hosted CMS behind 101 webservers, and a lesson about who sets your pentest scope.

all posts →

Talks & media

Sep 2026 talk SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling SANS Amsterdam September 2026
Sep 2026 article AI-Powered Penetration Testing: How Autonomous Offensive Security Works SANS / Horizon3.ai
Aug 2026 article Erklærer cyberkrig mot Norge: – Er dette det beste dere klarer? TV 2
Aug 2026 talk Building an organization attackers hate to attack [slides] SANS Copenhagen

all talks →

Videos

all videos →