Part 1 of a multi-part series on using LLMs securely within your organisation. This post provides a framework to categorize risks based on different use cases and deployment type.
![Edition 21: A framework to securely use LLMs in companies - Part 1: Overview of Risks](https://infosec.pub/pictrs/image/2daa8ca2-2a12-4507-a5cb-d396680acd4b.jpeg?format=webp&thumbnail=256)
The Orca Research Pod discovered Bad.Build, a vulnerability in the Google Cloud Build service that enabled attackers to gain access to and escalate privileges.
![Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack](https://infosec.pub/pictrs/image/bf9e0113-9dfc-480f-b614-b0a3e9376dcc.jpeg?format=webp&thumbnail=256)
We will show in this article how one can surgically modify an open-source model, GPT-J-6B, and upload it to Hugging Face to make it spread misinformation while being undetected by standard benchmarks.
![PoisonGPT: How we hid a lobotomized LLM on Hugging Face to spread fake news](https://infosec.pub/pictrs/image/4b89d04b-1cc9-4d08-8902-c561d7516e38.jpeg?format=webp&thumbnail=256)
ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit ...
![GitHub - invictus-ir/ALFA: ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework](https://infosec.pub/pictrs/image/0560d0f9-8b3b-4fdf-bed2-9418beacb695.png?format=webp&thumbnail=256)
cross-posted from: https://infosec.pub/post/397812
> Automated Audit Log Forensic Analysis (ALFA) for Google Workspace is a tool to acquire all Google Workspace audit logs and perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework. > > By Greg Charitonos and BertJanCyber
We built a passwordless container image registry with a focus on security to sustain the foundation for ongoing product growth & feature additions for our users. Everything you need to know about securing the software supply chain.
![Building Chainguard's container image registry](https://infosec.pub/pictrs/image/15b5602a-9194-4b43-9833-82fb98de91f6.png?format=webp&thumbnail=256)
>We’ve made a few changes to the way we host and distribute our Images over the last year to increase security, give ourselves more control over the distribution, and most importantly to keep our costs under control [...]
The basics of container deployment, container and Kubernetes security.
![Kubernetes Security Basics Series Part I - Deployment and Container Orchestration](https://infosec.pub/pictrs/image/ebd0a118-6582-4912-beb1-d9a2a3146ba2.jpeg?format=webp&thumbnail=256)
>This first post in a 9-part series on Kubernetes Security basics focuses on DevOps culture, container-related threats and how to enable the integration of security into the heart of DevOps.
Are your managed Kubernetes clusters safe from the risks posed by middleware components? Learn how to secure your clusters and mitigate middleware risks.
## Summary ESPv2 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT authentication in specific cases. ## Ba...
![JWT authentication bypass via `X-HTTP-Method-Override` header](https://lemmy.blahaj.zone/pictrs/image/PBrnf3f3R7.png?format=webp&thumbnail=256)
Microsoft says the early June disruptions to its Microsoft’s flagship office suite — including the Outlook email apps — were denial-of-service attacks by a shadowy new hacktivist group.
![Microsoft says early June disruptions to Outlook, cloud platform, were cyberattacks](https://infosec.pub/pictrs/image/42af7dc9-8bc5-4f34-a254-13b3a40cb9a2.webp?format=webp&thumbnail=256)
nice! I didn’t know this plant. I’ll try to find some.
it’s impressive! How does your infrastructure looks like? Is it 100% on prem?
I like basil. At some point I i got tired of killing all the plants and started learning how to properly grow and care greens with basil.
It has plenty of uses and it requires the right amount of care, not too simple not too complex.
I’ve grown it from seeds, cuttings, in pots, outside and in hydroponics.
Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen. - GitHub - ch33r10/EnterprisePurpleTeaming: Purple Team Resources for Enterprise Purple Teaming:...
![GitHub - ch33r10/EnterprisePurpleTeaming: Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.](https://infosec.pub/pictrs/image/728ce903-01ec-4772-b24e-d1fb771afd1a.png?format=webp&thumbnail=256)
I've been experimenting with the feasibility of running Dagger CI/CD pipelines isolated from each other using Firecracker microVMs to provide a strong security model in a multi-tenant scenario. When customer A runs a pipeline, their containers are executed in an isolated environment.
![Exploring Firecracker MicroVMs for Multi-Tenant Dagger CI/CD Pipelines](https://infosec.pub/pictrs/image/422e3c37-1b17-4932-b14f-75264c10fc44.png?format=webp&thumbnail=256)
A look at how the EC2 Instance Metadata Service can be taken advantage of.
![Misconfiguration Spotlight: Securing the EC2 Instance Metadata Service | Datadog Security Labs](https://infosec.pub/pictrs/image/56a82191-1562-4528-a3ca-da2bd36c533f.png?format=webp&thumbnail=256)
Here are some ways that we expect products to surface to help security practitioners solve these problems
![How To Defend Your AI Models](https://infosec.pub/pictrs/image/1c0b49b9-9784-4e13-92f2-7884b976203a.jpeg?format=webp&thumbnail=256)
Not really technical, but gives some pointers to wrap your head around the problem
Also, hackers publish RaidForum user data, Google's $180k Chrome bug bounty, and this week's vulnerabilities
![Toyota admits to yet another cloud leak](https://infosec.pub/pictrs/image/6aef3331-9394-4108-923f-76e50bad147d.jpeg?format=webp&thumbnail=256)
"Toyota said it had no evidence the data had been misused, and that it discovered the misconfigured cloud system while performing a wider investigation of Toyota Connected Corporation's (TC) cloud systems.
TC was also the site of two previous Toyota cloud security failures: one identified in September 2022, and another in mid-May of 2023.
As was the case with the previous two cloud exposures, this latest misconfiguration was only discovered years after the fact. Toyota admitted in this instance that records for around 260,000 domestic Japanese service incidents had been exposed to the web since 2015. The data lately exposed was innocuous if you believe Toyota – just vehicle device IDs and some map data update files were included. "
Maybe it's enough to make a pull request to the original CSS files here? I would guess the Lemmy devs would rather focus more on the backend right now
A comprehensive and up-to-date database to manage and mitigate the risks associated with AI systems.
"database [...] specifically designed for organizations that rely on AI for their operations, providing them with a comprehensive and up-to-date overview of the risks and vulnerabilities associated with publicly available models."
great! Have you consider packing this up as a full theme for Lemmy?
nice instance!
👋 infra sec blue team lead for a large tech company