One day you will make it and become a mentor yourself :)

One day man…one day 🤝

a) how to master the fundamentals on those types attacks? I recently signed up for pwn.college. Any other resource you recommend? b) in reality those targets have a massive code base/surface. How do scope things down to what can lead to a high impact vuln?

Thanks a lot !!

How one learns to engineer and build solutions like ds4?

Love you guys ! 🙏

I hope you've found this thread helpful. Follow me here @securing_bits or on Linkedin linkedin.com/in/vasilikos-pa… for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at securingbits.com/newsletter. Like/Repost the quote below if you can:

Learn more about indirect prompt injections from the paper 'Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection' Link: arxiv.org/pdf/2302.12173

Building your next LLM integration? Beware of Indirect Prompt Injection vulnerability. Previous models like GPT4 and Bing have been affected. #llm #applicationsecurity #chatgpt

I hope you've found this thread helpful. Follow me here @securing_bits or on Linkedin linkedin.com/in/vasilikos-pa… for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at securingbits.com/newsletter. Like/Repost the quote below if you can:

HTTP Response Headers: Usage 🛠 and Security Abuse ☠. Those complement the HTTP Request Headers we saw last week :) #websecurity #bugbounty #bugbountytips

I hope you've found this thread helpful. Follow me here @securing_bits or on Linkedin linkedin.com/in/vasilikos-pa… for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at securingbits.com/newsletter. Like/Repost the quote below if you can:

HTTP Request Headers: Usage🛠️ and Security Abuse💀 #websecurity #bugbounty #bugbountytips

I haven’t checked their methodology either, just trusting the reputation of the conference which involves peer review already .

I hope you've found this thread helpful. Follow me here @securing_bits or on Linkedin linkedin.com/in/vasilikos-pa… for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at securingbits.com/newsletter. Like/Repost the quote below if you can:

Guard your LLM against prompt injection with these powerful tools: - github.com/protectai/llm-gua… - github.com/protectai/rebuff - github.com/NVIDIA/NeMo-Guard… - github.com/amoffat/HeimdaLLM - github.com/guardrails-ai/gua… - github.com/whylabs/langkit #AI #MachineLearning #LLM #Security 🛡️🔒

I hope you've found this thread helpful. Follow me here @securing_bits or on Linkedin linkedin.com/in/vasilikos-pa… for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at securingbits.com/newsletter. Like/Repost the quote below if you can:

If you missed Part 1 👇 xitter.cf/securing_bits/status/1…

What could go wrong during the ML model development lifecycle (Part 2) ? Example threat model based on the talk "Kubernetes MLSec: Securing AI in Space" by @d1gital_f and James Callaghan of @controlplaneio at @CloudNativeFdn. #ai #machinelearning #security

I hope you've found this thread helpful. Follow me here @securing_bits or on Linkedin linkedin.com/in/vasilikos-pa… for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at securingbits.com/newsletter. Like/Repost the quote below if you can: