Yossi Cohen

Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation | Amazon Web...

You’re building a data agent that lets business users ask questions about lakehouse data in natural language. You’ve already built governance policies that control who can access which datasets. The...

Progress on provable inference for large language models

Sharing progress on a powerful type of cryptographic proof known as a zkSNARK, which is uniquely fit for provable inference.

How Google is Making Private AI Practical with Homomorphic Encryption

Post-quantum identity expands beyond cryptography | Biometric Update

Daon introduces a new identity architecture as vendors and governments prepare for quantum computing's impact on digital credentials and biometrics.

Enforce resource configuration to control access to new features with AWS | Amazon Web Services

Establishing and maintaining an effective security and governance posture has never been more important for enterprises. This post explains how you, as a security administrator, can use Amazon Web...

Temporary elevated access management with IAM Identity Center | Amazon Web Services

AWS recommends using automation where possible to keep people away from systems—yet not every action can be automated in practice, and some operations might require access by human users. Depending...

Google Open Sources Magika: AI-Powered File Identification Tool

Google open sources Magika, an AI-powered tool that boosts file type identification accuracy by 30%, helping defenders more easily identify malicious

Stolen iOS users face scans used to break into bank accounts

Deepfake-enabled attacks against Android and iPhone users are netting criminals serious cash

Access AWS using a Google Cloud Platform native workload identity | Amazon Web Services

Organizations undergoing cloud migrations and business transformations often find themselves managing IT operations in hybrid or multicloud environments. This can make it more complex to safeguard...

Four use cases for GuardDuty Malware Protection On-demand malware scan | Amazon Web Services

Amazon GuardDuty is a threat detection service that continuously monitors your Amazon Web Services (AWS) accounts and workloads for malicious activity and delivers detailed security findings for...

How to implement client certificate revocation list checks at scale with API Gateway | Amazon Web...

October 25, 2024: This post has been updated to include a reference to a sample implementation published on the AWS Samples GitHub repository. As you design your Amazon API Gateway applications to...

Mutual authentication for Application Load Balancer reliably verifies certificate-based client...

Today, we are announcing support for mutually authenticating clients that present X509 certificates to Application Load Balancer. With this new feature, you can now offload client authentication to...

Next steps in preparing for post-quantum cryptography

How system owners can begin planning for the migration to post-quantum cryptography (PQC).

Meet hackers’ favourite new tool: WormGPT

WormGPT is being described as similar to ChatGPT, but with no ethical boundaries or limitations, and Australian businesses are in the firing line.

Researcher Claims to Crack RSA-2048 With Quantum Computer

A scientist claims to have developed an inexpensive system for using quantum computing to crack RSA, which is the world's most commonly used public key algorithm. If true, this would be a breakthro...

Amazon GuardDuty Now Supports Amazon EKS Runtime Monitoring | Amazon Web Services

Since Amazon GuardDuty launched in 2017, GuardDuty has been capable of analyzing tens of billions of events per minute across multiple AWS data sources, such as AWS CloudTrail event logs, Amazon...