diff --git a/lab-environment/attacker/Dockerfile b/lab-environment/attacker/Dockerfile
index 33d2bc2..d4167bb 100644
--- a/lab-environment/attacker/Dockerfile
+++ b/lab-environment/attacker/Dockerfile
@@ -1,7 +1,7 @@
 # Attacker simulation host - pre-baked tooling (no runtime apt/pip installs)
 # Base pinned by digest (kali publishes only rolling tags; digest pinning
 # keeps the build reproducible - re-pin deliberately on image refresh).
-FROM kalilinux/kali-rolling@sha256:49d174981a2a211e76acdde22a2e4978ea19bc0433487292cd9ad865da24ee42
+FROM kalilinux/kali-rolling@sha256:30399bd65187e06525008dd13eecc2b3439d26a82b2c6b0ba32dee72bd843117
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \