Securing Bits

I explain application security using comic art.

[Securing Bits @securing_bits]

In February, I discovered a critical authentication bypass in the Google Cloud API Gateway and reported it to @GoogleVRP. 🧵[1/10]

References:
Write-Up: https://t.co/E9nletAuEb
CVE: https://t.co/Gj0fw4ztWd
GitHub Advisory: https://t.co/Tr4dn615Wt

#bugbounty #googlecloud

[Securing Bits @securing_bits]

@0day_ninja @chompie1337 One day you will make it and become a mentor yourself :)

[Securing Bits @securing_bits]

@0day_ninja @chompie1337 One day man…one day 🤝

[Securing Bits @securing_bits]

@antirez @fchollet Thanks a lot !!

[Securing Bits @securing_bits]

@ctbbpodcast Love you guys ! 🙏

[Securing Bits @securing_bits]

I hope you've found this thread helpful.

Follow me here @securing_bits or on Linkedin https://t.co/SyC2mq9zrV for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at https://t.co/TaVmXgK4iL.

Like/Repost the quote below if you can:

[Securing Bits @securing_bits]

Building your next LLM integration?

Beware of Indirect Prompt Injection vulnerability. Previous models like GPT4 and Bing have been affected.

#llm #applicationsecurity #chatgpt

[Securing Bits @securing_bits]

Building your next LLM integration?

Beware of Indirect Prompt Injection vulnerability. Previous models like GPT4 and Bing have been affected.

#llm #applicationsecurity #chatgpt

[Securing Bits @securing_bits]

Learn more about indirect prompt injections from the paper 'Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection'

Link: https://t.co/RRRZWx94ZU

[Securing Bits @securing_bits]

I hope you've found this thread helpful.

Follow me here @securing_bits or on Linkedin https://t.co/SyC2mq9zrV for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at https://t.co/TaVmXgK4iL.

Like/Repost the quote below if you can:

[Securing Bits @securing_bits]

HTTP Response Headers: Usage 🛠 and Security Abuse ☠.

Those complement the HTTP Request Headers we saw last week :)

#websecurity #bugbounty #bugbountytips

[Securing Bits @securing_bits]

HTTP Response Headers: Usage 🛠 and Security Abuse ☠.

Those complement the HTTP Request Headers we saw last week :)

#websecurity #bugbounty #bugbountytips

[Securing Bits @securing_bits]

I hope you've found this thread helpful.

Follow me here @securing_bits or on Linkedin https://t.co/SyC2mq9zrV for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at https://t.co/TaVmXgK4iL.

Like/Repost the quote below if you can:

[Securing Bits @securing_bits]

HTTP Request Headers: Usage🛠️ and Security Abuse💀

#websecurity #bugbounty #bugbountytips

[Securing Bits @securing_bits]

HTTP Request Headers: Usage🛠️ and Security Abuse💀

#websecurity #bugbounty #bugbountytips

[Securing Bits @securing_bits]

@sephr @ABouhoula @AmitZac1 I haven’t checked their methodology either, just trusting the reputation of the conference which involves peer review already .

[Securing Bits @securing_bits]

Recent research conducted by ETH reveals that 65.4% of the most visited websites in the EU offer a cookie rejection option, yet they could still potentially gather user data even after users explicitly reject their cookies. 🕵️‍♂️

Is privacy compliance so difficult?

#privacy #gdpr

[Securing Bits @securing_bits]

I hope you've found this thread helpful.

Follow me here @securing_bits or on Linkedin https://t.co/SyC2mq9zrV for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at https://t.co/TaVmXgK4iL.

Like/Repost the quote below if you can:

[Securing Bits @securing_bits]

Guard your LLM against prompt injection with these powerful tools:

- https://t.co/w4XxrLxz5b
- https://t.co/LaPxKE2xix
- https://t.co/wWyPOOf1hp
- https://t.co/y3yF0hWP1M
- https://t.co/oS1Ur6hkWQ
- https://t.co/l9l5puZ5br

#AI #MachineLearning #LLM #Security 🛡️🔒

[Securing Bits @securing_bits]

Guard your LLM against prompt injection with these powerful tools:

- https://t.co/w4XxrLxz5b
- https://t.co/LaPxKE2xix
- https://t.co/wWyPOOf1hp
- https://t.co/y3yF0hWP1M
- https://t.co/oS1Ur6hkWQ
- https://t.co/l9l5puZ5br

#AI #MachineLearning #LLM #Security 🛡️🔒

[Securing Bits @securing_bits]

I hope you've found this thread helpful.

Follow me here @securing_bits or on Linkedin https://t.co/SyC2mq9zrV for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at https://t.co/TaVmXgK4iL.

Like/Repost the quote below if you can:

[Securing Bits @securing_bits]

What could go wrong during the ML model development lifecycle (Part 2) ?

Example threat model based on the talk "Kubernetes MLSec: Securing AI in Space" by @d1gital_f and James Callaghan of @controlplaneio
at @CloudNativeFdn.

#ai #machinelearning #security

[Securing Bits @securing_bits]

What could go wrong during the ML model development lifecycle (Part 2) ?

Example threat model based on the talk "Kubernetes MLSec: Securing AI in Space" by @d1gital_f and James Callaghan of @controlplaneio
at @CloudNativeFdn.

#ai #machinelearning #security

[Securing Bits @securing_bits]

If you missed Part 1 👇
https://t.co/I9hicZsbbF

[Securing Bits @securing_bits]

What could go wrong during the ML model development lifecycle?

Example threat model based on the talk "Kubernetes MLSec: Securing AI in Space" by @d1gital_f and James Callaghan of @controlplaneio at
@CloudNativeFdn.

Talk: https://t.co/V25GB17nnb

#ai #machinelearning #security

[Securing Bits @securing_bits]

I hope you've found this thread helpful.

Follow me here @securing_bits or on Linkedin https://t.co/SyC2mq9zrV for more, and if you enjoy my content make sure to subscribe to my weekly free newsletter at https://t.co/TaVmXgK4iL.

Like/Repost the quote below if you can:

[Securing Bits @securing_bits]

Authentication (AuthN) architecture patterns for microservices👇

#microservices #applicationsecurity #systemdesign

[Securing Bits @securing_bits]

Authentication (AuthN) architecture patterns for microservices👇

#microservices #applicationsecurity #systemdesign