diff --git a/lab-environment/attacker/Dockerfile b/lab-environment/attacker/Dockerfile
index 33d2bc2..95b1cdd 100644
--- a/lab-environment/attacker/Dockerfile
+++ b/lab-environment/attacker/Dockerfile
@@ -1,7 +1,7 @@
 # Attacker simulation host - pre-baked tooling (no runtime apt/pip installs)
 # Base pinned by digest (kali publishes only rolling tags; digest pinning
 # keeps the build reproducible - re-pin deliberately on image refresh).
-FROM kalilinux/kali-rolling@sha256:49d174981a2a211e76acdde22a2e4978ea19bc0433487292cd9ad865da24ee42
+FROM kalilinux/kali-rolling@sha256:d1d7e581ed60b0bbf9cb8a4bc853526355978f3b943d3a1d7dc7ce209e4231b6
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \