#secureai — Public Fediverse posts

🚀 Connect4Cyber 2026 – Info & Brokerage Day

• aktuelle #EU-Fördermöglichkeiten kennenzulernen.
• länderübergreifende Konsortien aufzubauen.
• sich zu Themen wie #SecureAI, #Kryptographie und Software-/Hardware-Security auszutauschen.

Datum: 23. April 2026
Ort: World Trade Center, Stockholm

Die Teilnahme ist kostenlos – die Plätze sind begrenzt. Jetzt registrieren bis zum 13. April!
👉 https://ncc-se.msb.se/en/events/connect4cyber--info-and-brokerage-day-23-april-2026/

Building a sovereign-ready AI stack that uses public APIs wisely while maintaining a private, compliant intelligence engine. Strategy over subscription. #SecureAI #IntelligentSystems https://ironwoodlogic.com/articles/beyond-the-seat-tax-building-a-sovereign-ready-ai-stack-that-still-uses-public-apis-when-it-should/

High-growth doesn't have to mean high-touch. Learn how a professional services firm reduced founder involvement by 65% while scaling operations. #SecureAI #CloudArchitecture https://ironwoodlogic.com/case-studies/case-study-eliminating-founder-dependency-in-a-high-growth-professional-services-firm/

70% of SMBs are actively modernizing. Digital transformation is no longer optional""�it's strategic necessity. The question isn't if, but how. #SMBTech #CloudArchitecture #SecureAI #WorkflowAutomation https://ironwoodlogic.com/articles/the-smb-guide-to-digital-transformation-why-70-of-small-businesses-are-making-the-leap/

You can move in the right order and still carry structural debt. The danger comes when that debt is ignored while acceleration continues. #SecureAI #WorkflowAutomation #SMBTech #CloudArchitecture https://ironwoodlogic.com/articles/why-digital-transformation-fails-at-the-moment-it-feels-obvious/

Check out ˗ˏˋ ⭒ https://lnkd.in/gE2wUqgc ⭒ ˎˊ˗ to see my intro whilst you listen.

I'm thus re-naming this work as "CVE Keeper - Security at x+1; rethinking vulnerability management beyond CVSS & scanners". I must also thank @andrewpollock for reviewing several of my verbose drafts. 🫡

So, Security at x+1; rethinking vulnerability management beyond CVSS & scanners -

Most vulnerability tooling today is optimized for disclosure and alert volume, not for making correct decisions on real systems. CVEs arrive faster than teams can evaluate them, scores are generic, context arrives late, and we still struggle to answer the only question that matters: does this actually put my system at risk right now?

Over the last few years working close to CVE lifecycle automation, I’ve been designing an open architecture that treats vulnerability management as a continuous, system-specific reasoning problem rather than a static scoring task. The goal is to assess impact on the same day for 0-days using minimal upstream data, refine accuracy over time as context improves, reason across dependencies and compound vulnerabilities, and couple automation with explicit human verification instead of replacing it.

This work explores:

⤇ 1• Same-day triage of newly disclosed and 0-day vulnerabilities
⤇ 2• Dependency-aware and compound vulnerability impact assessment
⤇ 3• Correlating classical CVSS with AI-specific threat vectors
⤇ 4• Reducing operational noise, unnecessary reboots, and security burnout
⤇ 5• Making high-quality vulnerability intelligence accessible beyond enterprise teams

The core belief is simple: most security failures come from misjudged impact, not missed vulnerabilities. Accuracy, context, and accountability matter more than volume.

I’m sharing this to invite feedback from folks working in CVE, OSV, vulnerability disclosure, AI security, infra, and systems research. Disagreement and critique are welcome. This problem affects everyone, and I don’t think incremental tooling alone will solve it.

P.S.

• Super appreciate everyone that's spent time reviewing my drafts and reading all my essays lol. I owe you 🫶🏻
• ... and GoogleLM. These slides would have taken me forever to make otherwise.

Take my CVE-data User Survey to allow me to tailor your needs into my design - lnkd.in/gcyvnZeE
See more at - lnkd.in/gGWQfBW5
lnkd.in/gE2wUqgc

#VulnerabilityManagement #Risk #ThreatModeling #CVE #CyberSecurity #Infosec #VulnerabilityManagement #ThreatIntelligence #ApplicationSecurity #SecurityOperations #ZeroDay #RiskManagement #DevSecOps #CVE #CVEAnalysis #VulnerabilityDisclosure #SecurityData #CVSS #VulnerabilityAssessment #PatchManagement #AI #AIML #AISecurity #MachineLearning #AIThreats #AIinSecurity #SecureAI #OSS #Rust #ZeroTrust #Security

https://www.linkedin.com/feed/update/urn:li:activity:7409399623087370240

Check out ˗ˏˋ ⭒ https://lnkd.in/gE2wUqgc ⭒ ˎˊ˗ to see my intro whilst you listen.

I'm thus re-naming this work as "CVE Keeper - Security at x+1; rethinking vulnerability management beyond CVSS & scanners". I must also thank @andrewpollock for reviewing several of my verbose drafts. 🫡

So, Security at x+1; rethinking vulnerability management beyond CVSS & scanners -

Most vulnerability tooling today is optimized for disclosure and alert volume, not for making correct decisions on real systems. CVEs arrive faster than teams can evaluate them, scores are generic, context arrives late, and we still struggle to answer the only question that matters: does this actually put my system at risk right now?

Over the last few years working close to CVE lifecycle automation, I’ve been designing an open architecture that treats vulnerability management as a continuous, system-specific reasoning problem rather than a static scoring task. The goal is to assess impact on the same day for 0-days using minimal upstream data, refine accuracy over time as context improves, reason across dependencies and compound vulnerabilities, and couple automation with explicit human verification instead of replacing it.

This work explores:

⤇ 1• Same-day triage of newly disclosed and 0-day vulnerabilities
⤇ 2• Dependency-aware and compound vulnerability impact assessment
⤇ 3• Correlating classical CVSS with AI-specific threat vectors
⤇ 4• Reducing operational noise, unnecessary reboots, and security burnout
⤇ 5• Making high-quality vulnerability intelligence accessible beyond enterprise teams

The core belief is simple: most security failures come from misjudged impact, not missed vulnerabilities. Accuracy, context, and accountability matter more than volume.

I’m sharing this to invite feedback from folks working in CVE, OSV, vulnerability disclosure, AI security, infra, and systems research. Disagreement and critique are welcome. This problem affects everyone, and I don’t think incremental tooling alone will solve it.

P.S.

• Super appreciate everyone that's spent time reviewing my drafts and reading all my essays lol. I owe you 🫶🏻
• ... and GoogleLM. These slides would have taken me forever to make otherwise.

Take my CVE-data User Survey to allow me to tailor your needs into my design - lnkd.in/gcyvnZeE
See more at - lnkd.in/gGWQfBW5
lnkd.in/gE2wUqgc

#VulnerabilityManagement #Risk #ThreatModeling #CVE #CyberSecurity #Infosec #VulnerabilityManagement #ThreatIntelligence #ApplicationSecurity #SecurityOperations #ZeroDay #RiskManagement #DevSecOps #CVE #CVEAnalysis #VulnerabilityDisclosure #SecurityData #CVSS #VulnerabilityAssessment #PatchManagement #AI #AIML #AISecurity #MachineLearning #AIThreats #AIinSecurity #SecureAI #OSS #Rust #ZeroTrust #Security

https://www.linkedin.com/feed/update/urn:li:activity:7409399623087370240

Check out ˗ˏˋ ⭒ https://lnkd.in/gE2wUqgc ⭒ ˎˊ˗ to see my intro whilst you listen.

I'm thus re-naming this work as "CVE Keeper - Security at x+1; rethinking vulnerability management beyond CVSS & scanners". I must also thank @andrewpollock for reviewing several of my verbose drafts. 🫡

So, Security at x+1; rethinking vulnerability management beyond CVSS & scanners -

Most vulnerability tooling today is optimized for disclosure and alert volume, not for making correct decisions on real systems. CVEs arrive faster than teams can evaluate them, scores are generic, context arrives late, and we still struggle to answer the only question that matters: does this actually put my system at risk right now?

Over the last few years working close to CVE lifecycle automation, I’ve been designing an open architecture that treats vulnerability management as a continuous, system-specific reasoning problem rather than a static scoring task. The goal is to assess impact on the same day for 0-days using minimal upstream data, refine accuracy over time as context improves, reason across dependencies and compound vulnerabilities, and couple automation with explicit human verification instead of replacing it.

This work explores:

⤇ 1• Same-day triage of newly disclosed and 0-day vulnerabilities
⤇ 2• Dependency-aware and compound vulnerability impact assessment
⤇ 3• Correlating classical CVSS with AI-specific threat vectors
⤇ 4• Reducing operational noise, unnecessary reboots, and security burnout
⤇ 5• Making high-quality vulnerability intelligence accessible beyond enterprise teams

The core belief is simple: most security failures come from misjudged impact, not missed vulnerabilities. Accuracy, context, and accountability matter more than volume.

I’m sharing this to invite feedback from folks working in CVE, OSV, vulnerability disclosure, AI security, infra, and systems research. Disagreement and critique are welcome. This problem affects everyone, and I don’t think incremental tooling alone will solve it.

P.S.

• Super appreciate everyone that's spent time reviewing my drafts and reading all my essays lol. I owe you 🫶🏻
• ... and GoogleLM. These slides would have taken me forever to make otherwise.

Take my CVE-data User Survey to allow me to tailor your needs into my design - lnkd.in/gcyvnZeE
See more at - lnkd.in/gGWQfBW5
lnkd.in/gE2wUqgc

#VulnerabilityManagement #Risk #ThreatModeling #CVE #CyberSecurity #Infosec #VulnerabilityManagement #ThreatIntelligence #ApplicationSecurity #SecurityOperations #ZeroDay #RiskManagement #DevSecOps #CVE #CVEAnalysis #VulnerabilityDisclosure #SecurityData #CVSS #VulnerabilityAssessment #PatchManagement #AI #AIML #AISecurity #MachineLearning #AIThreats #AIinSecurity #SecureAI #OSS #Rust #ZeroTrust #Security

https://www.linkedin.com/feed/update/urn:li:activity:7409399623087370240

Check out ˗ˏˋ ⭒ https://lnkd.in/gE2wUqgc ⭒ ˎˊ˗ to see my intro whilst you listen.

I'm thus re-naming this work as "CVE Keeper - Security at x+1; rethinking vulnerability management beyond CVSS & scanners". I must also thank @andrewpollock for reviewing several of my verbose drafts. 🫡

So, Security at x+1; rethinking vulnerability management beyond CVSS & scanners -

Most vulnerability tooling today is optimized for disclosure and alert volume, not for making correct decisions on real systems. CVEs arrive faster than teams can evaluate them, scores are generic, context arrives late, and we still struggle to answer the only question that matters: does this actually put my system at risk right now?

Over the last few years working close to CVE lifecycle automation, I’ve been designing an open architecture that treats vulnerability management as a continuous, system-specific reasoning problem rather than a static scoring task. The goal is to assess impact on the same day for 0-days using minimal upstream data, refine accuracy over time as context improves, reason across dependencies and compound vulnerabilities, and couple automation with explicit human verification instead of replacing it.

This work explores:

⤇ 1• Same-day triage of newly disclosed and 0-day vulnerabilities
⤇ 2• Dependency-aware and compound vulnerability impact assessment
⤇ 3• Correlating classical CVSS with AI-specific threat vectors
⤇ 4• Reducing operational noise, unnecessary reboots, and security burnout
⤇ 5• Making high-quality vulnerability intelligence accessible beyond enterprise teams

The core belief is simple: most security failures come from misjudged impact, not missed vulnerabilities. Accuracy, context, and accountability matter more than volume.

I’m sharing this to invite feedback from folks working in CVE, OSV, vulnerability disclosure, AI security, infra, and systems research. Disagreement and critique are welcome. This problem affects everyone, and I don’t think incremental tooling alone will solve it.

P.S.

• Super appreciate everyone that's spent time reviewing my drafts and reading all my essays lol. I owe you 🫶🏻
• ... and GoogleLM. These slides would have taken me forever to make otherwise.

Take my CVE-data User Survey to allow me to tailor your needs into my design - lnkd.in/gcyvnZeE
See more at - lnkd.in/gGWQfBW5
lnkd.in/gE2wUqgc

#VulnerabilityManagement #Risk #ThreatModeling #CVE #CyberSecurity #Infosec #VulnerabilityManagement #ThreatIntelligence #ApplicationSecurity #SecurityOperations #ZeroDay #RiskManagement #DevSecOps #CVE #CVEAnalysis #VulnerabilityDisclosure #SecurityData #CVSS #VulnerabilityAssessment #PatchManagement #AI #AIML #AISecurity #MachineLearning #AIThreats #AIinSecurity #SecureAI #OSS #Rust #ZeroTrust #Security

https://www.linkedin.com/feed/update/urn:li:activity:7409399623087370240

via #Microsoft : Accelerating AI adoption for the US government

https://ift.tt/D4LyZEu
#AIAdoption #USGovernment #Microsoft #GSA #CloudServices #Productivity #Innovation #SecureAI #FederalAgencies #Automation #Microsoft365 #Azure #CostSavings #DigitalTransformation #PublicSer…

via #Microsoft : Accelerating AI adoption for the US government

https://ift.tt/D4LyZEu
#AIAdoption #USGovernment #Microsoft #GSA #CloudServices #Productivity #Innovation #SecureAI #FederalAgencies #Automation #Microsoft365 #Azure #CostSavings #DigitalTransformation #PublicSer…

via #Microsoft : Accelerating AI adoption for the US government

https://ift.tt/D4LyZEu
#AIAdoption #USGovernment #Microsoft #GSA #CloudServices #Productivity #Innovation #SecureAI #FederalAgencies #Automation #Microsoft365 #Azure #CostSavings #DigitalTransformation #PublicSer…

via #Microsoft : Accelerating AI adoption for the US government

https://ift.tt/D4LyZEu
#AIAdoption #USGovernment #Microsoft #GSA #CloudServices #Productivity #Innovation #SecureAI #FederalAgencies #Automation #Microsoft365 #Azure #CostSavings #DigitalTransformation #PublicSer…

via #Microsoft : Accelerating AI adoption for the US government

https://ift.tt/D4LyZEu
#AIAdoption #USGovernment #Microsoft #GSA #CloudServices #Productivity #Innovation #SecureAI #FederalAgencies #Automation #Microsoft365 #Azure #CostSavings #DigitalTransformation #PublicSer…

🎙️ When AI writes code, builds models, and simulates threats… who checks the checker?

In this last On Location Conversation from #RSAC2025, Alex Kreilein and John Sapp Jr. join Sean Martin, CISSP to explore what trust actually means in the age of AI-generated security tooling — and how modern #AppSec teams must rethink validation, #resiliency, and #risk.

This episode cuts deep into:

Why “trust the output” is not enough in AI-driven workflows
How #AI security debt is becoming the new tech debt
Why we need #zerotrust thinking applied to models and agents
The real shift: from patching CVEs to building resilient architecture
The role of traceability, governance, and context-driven decision-making

If you’re serious about secure AI, application security, and shifting AppSec left (the right way), this conversation will challenge what you think you know — and help reframe what secure development actually looks like.

🎥 Watch the full video:
👉 https://youtu.be/kJdQz9LmT6s

🎧 Listen to the audio podcast:
👉 https://eventcoveragepodcast.com/episodes/why-we-cant-completely-trust-the-intern-even-if-its-ai-an-rsac-conference-2025-conversation-with-alex-kreilein-and-john-sapp-jr-on-location-coverage-with-sean-martin-and-marco-ciappelli

✨ Thank you to our Full Coverage Sponsors:
ThreatLocker 👉 https://itspm.ag/threatlocker-r974
Akamai Technologies 👉 https://itspm.ag/akamailbwc
BLACKCLOAK 👉 https://itspm.ag/itspbcweb
SandboxAQ 👉 https://itspm.ag/sandboxaq-j2en
Archer Integrated Risk Management 👉 https://itspm.ag/rsaarchweb
ISACA 👉 https://itspm.ag/isaca-96808
Object First 👉 https://itspm.ag/object-first-2gjl
Edera 👉 https://itspm.ag/edera-434868

🎙️ Explore more RSAC 2025 coverage:
👉 https://www.itspmagazine.com/rsa-conference-usa-2025-rsac-san-francisco-usa-cybersecurity-event-infosec-conference-coverage

🎧 Catch all of our event conversations:
👉 https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

🎤 Want to tell your Brand Story Briefing as part of our coverage?
👉 https://itspm.ag/evtcovbrf

📆 Want Sean Martin, CISSP and Marco Ciappelli to cover your event or moderate your panel?
👉 https://www.itspmagazine.com/contact-us

#RSAC2025 #cybersecurity #AppSec #AIsecurity #zerotrust #infosec #securityleadership #riskmanagement #technology #eventcoverage #secureAI #shiftleft #CISO

Join Javan Rasokat and Rico Komenda at OWASP Global AppSec EU 2025 in Barcelona for a powerful joint session on AI security!

🛠️Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
📅 Thursday, May 29, 2025
⏰ 2:15 PM – 3:00 PM CEST

🔗 Register: https://owasp.glueup.com/event/123983/register/

#OWASP #AppSecEU2025 #AIsecurity #LLMSecurity #Cybersecurity #RedTeam #BlueTeam #SecureAI #Barcelona

Join Javan Rasokat and Rico Komenda at OWASP Global AppSec EU 2025 in Barcelona for a powerful joint session on AI security!

🛠️Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
📅 Thursday, May 29, 2025
⏰ 2:15 PM – 3:00 PM CEST

🔗 Register: https://owasp.glueup.com/event/123983/register/

#OWASP #AppSecEU2025 #AIsecurity #LLMSecurity #Cybersecurity #RedTeam #BlueTeam #SecureAI #Barcelona

Join Javan Rasokat and Rico Komenda at OWASP Global AppSec EU 2025 in Barcelona for a powerful joint session on AI security!

🛠️Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
📅 Thursday, May 29, 2025
⏰ 2:15 PM – 3:00 PM CEST

🔗 Register: https://owasp.glueup.com/event/123983/register/

#OWASP #AppSecEU2025 #AIsecurity #LLMSecurity #Cybersecurity #RedTeam #BlueTeam #SecureAI #Barcelona

Join Javan Rasokat and Rico Komenda at OWASP Global AppSec EU 2025 in Barcelona for a powerful joint session on AI security!

🛠️Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
📅 Thursday, May 29, 2025
⏰ 2:15 PM – 3:00 PM CEST

🔗 Register: https://owasp.glueup.com/event/123983/register/

#OWASP #AppSecEU2025 #AIsecurity #LLMSecurity #Cybersecurity #RedTeam #BlueTeam #SecureAI #Barcelona

Join Javan Rasokat and Rico Komenda at OWASP Global AppSec EU 2025 in Barcelona for a powerful joint session on AI security!

🛠️Builders and Breakers: A Collaborative Look at Securing LLM-Integrated Apps
📅 Thursday, May 29, 2025
⏰ 2:15 PM – 3:00 PM CEST

🔗 Register: https://owasp.glueup.com/event/123983/register/

#OWASP #AppSecEU2025 #AIsecurity #LLMSecurity #Cybersecurity #RedTeam #BlueTeam #SecureAI #Barcelona

🤖 AI is revolutionising everything it seems - but are you ready for the risks it brings? 🤖

I’ve been working with AI tools like Copilot and ChatGPT, as well as building an innovative risk management platform which boasts a responsible and proportionate use of AI to enhance human endeavour, rather than seeking to mimic or replace it.

AI is transforming how we work, but it also exposes us to new risks. In my latest article, I outline the YDC approach to managing AI cybersecurity risks - from validation processes to risk assessments, and share my thoughts on how we can strike the balance between leveraging AI's potential and safeguarding our systems.

Interested? Check it out here - https://paulreynolds.uk/cybersecurity-ai-risks/

YDC keep pushing the boundaries of innovation, embracing AI, while keeping security on point.

#Cybersecurity #AI #ArtificialIntelligence #AICybersecurityRisks #DataProtection #Innovation #TechLeadership #RiskManagement
#FutureOfWork #DigitalSecurity #SecureAI

Coalition for Secure AI (CoSAI): An open ecosystem uniting AI and security experts from leading organizations. CoSAI fosters collaboration on AI security research, shares best practices, and develops open-source solutions for secure AI deployment.

#AI #Cybersecurity #AIResearch #SecureAI #TechCollaboration #OpenSource #CoSAI #DigitalSecurity

https://www.coalitionforsecureai.org/

Major tech firms launch coalition for AI security standards

https://stackdiary.com/major-tech-firms-launch-coalition-for-ai-security-standards/

#AI #Security #Tech #Innovation #Collaboration #Trust #Standards #OpenSource #Development #Integration #RiskMitigation #Cybersecurity #CoSAI #Technology #Guidelines #Frameworks #AITrust #AIIntegrity #BigTech #SecureAI #Partnership #Ecosystem #Expertise #Safety #AICommunity #BestPractices #AIStandards #AIResearch #AIInitiative #TechAlliance #AISecurity

Major tech firms launch coalition for AI security standards

https://stackdiary.com/major-tech-firms-launch-coalition-for-ai-security-standards/

#AI #Security #Tech #Innovation #Collaboration #Trust #Standards #OpenSource #Development #Integration #RiskMitigation #Cybersecurity #CoSAI #Technology #Guidelines #Frameworks #AITrust #AIIntegrity #BigTech #SecureAI #Partnership #Ecosystem #Expertise #Safety #AICommunity #BestPractices #AIStandards #AIResearch #AIInitiative #TechAlliance #AISecurity

Major tech firms launch coalition for AI security standards

https://stackdiary.com/major-tech-firms-launch-coalition-for-ai-security-standards/

#AI #Security #Tech #Innovation #Collaboration #Trust #Standards #OpenSource #Development #Integration #RiskMitigation #Cybersecurity #CoSAI #Technology #Guidelines #Frameworks #AITrust #AIIntegrity #BigTech #SecureAI #Partnership #Ecosystem #Expertise #Safety #AICommunity #BestPractices #AIStandards #AIResearch #AIInitiative #TechAlliance #AISecurity

Major tech firms launch coalition for AI security standards

https://stackdiary.com/major-tech-firms-launch-coalition-for-ai-security-standards/

#AI #Security #Tech #Innovation #Collaboration #Trust #Standards #OpenSource #Development #Integration #RiskMitigation #Cybersecurity #CoSAI #Technology #Guidelines #Frameworks #AITrust #AIIntegrity #BigTech #SecureAI #Partnership #Ecosystem #Expertise #Safety #AICommunity #BestPractices #AIStandards #AIResearch #AIInitiative #TechAlliance #AISecurity

Major tech firms launch coalition for AI security standards

https://stackdiary.com/major-tech-firms-launch-coalition-for-ai-security-standards/

#AI #Security #Tech #Innovation #Collaboration #Trust #Standards #OpenSource #Development #Integration #RiskMitigation #Cybersecurity #CoSAI #Technology #Guidelines #Frameworks #AITrust #AIIntegrity #BigTech #SecureAI #Partnership #Ecosystem #Expertise #Safety #AICommunity #BestPractices #AIStandards #AIResearch #AIInitiative #TechAlliance #AISecurity

❓ Did you know that with open-access LLMs, entities in sectors like health 🏥 and banking 🏦 can use AI securely without risking data privacy? Participants are learning how to leverage models like Falcon and Mistral 7B locally for safe applications! #SecureAI

𝐀𝐧𝐧𝐨𝐮𝐧𝐜𝐢𝐧𝐠 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭’𝐬 𝐨𝐩𝐞𝐧 𝐚𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐭𝐨 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦 𝐠𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐯𝐞 𝐀𝐈 𝐒𝐲𝐬𝐭𝐞𝐦𝐬

𝐏𝐲𝐑𝐈𝐓 automates AI Red Teaming tasks to allow operators to focus on more complicated and time-consuming tasks and can also identify security harms such as misuse (e.g., malware generation, jailbreaking), and privacy harms (e.g., identity theft).​

Find out more:

https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/

GitHub repo: https://github.com/Azure/PyRIT

How to Guide: https://github.com/Azure/PyRIT/blob/main/doc/how_to_guide.ipynb

#redteam #airedteam #redteaming #PyRIT #ml #ai #framewrok #python #cyber #llm #ai #aisecurity #microsoft #microsoftsecurity #opensource #MicrosoftAIRedTeam #GenAI #jailbreaking #promtp #promptinjection #malware #privacy #responsibleai #cybersecurity #aisecurity #secureai #machinelearning #generativeai

𝐀𝐧𝐧𝐨𝐮𝐧𝐜𝐢𝐧𝐠 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭’𝐬 𝐨𝐩𝐞𝐧 𝐚𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐭𝐨 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦 𝐠𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐯𝐞 𝐀𝐈 𝐒𝐲𝐬𝐭𝐞𝐦𝐬

𝐏𝐲𝐑𝐈𝐓 automates AI Red Teaming tasks to allow operators to focus on more complicated and time-consuming tasks and can also identify security harms such as misuse (e.g., malware generation, jailbreaking), and privacy harms (e.g., identity theft).​

Find out more:

https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/

GitHub repo: https://github.com/Azure/PyRIT

How to Guide: https://github.com/Azure/PyRIT/blob/main/doc/how_to_guide.ipynb

#redteam #airedteam #redteaming #PyRIT #ml #ai #framewrok #python #cyber #llm #ai #aisecurity #microsoft #microsoftsecurity #opensource #MicrosoftAIRedTeam #GenAI #jailbreaking #promtp #promptinjection #malware #privacy #responsibleai #cybersecurity #aisecurity #secureai #machinelearning #generativeai

𝐀𝐧𝐧𝐨𝐮𝐧𝐜𝐢𝐧𝐠 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭’𝐬 𝐨𝐩𝐞𝐧 𝐚𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐭𝐨 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦 𝐠𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐯𝐞 𝐀𝐈 𝐒𝐲𝐬𝐭𝐞𝐦𝐬

𝐏𝐲𝐑𝐈𝐓 automates AI Red Teaming tasks to allow operators to focus on more complicated and time-consuming tasks and can also identify security harms such as misuse (e.g., malware generation, jailbreaking), and privacy harms (e.g., identity theft).​

Find out more:

https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/

GitHub repo: https://github.com/Azure/PyRIT

How to Guide: https://github.com/Azure/PyRIT/blob/main/doc/how_to_guide.ipynb

#redteam #airedteam #redteaming #PyRIT #ml #ai #framewrok #python #cyber #llm #ai #aisecurity #microsoft #microsoftsecurity #opensource #MicrosoftAIRedTeam #GenAI #jailbreaking #promtp #promptinjection #malware #privacy #responsibleai #cybersecurity #aisecurity #secureai #machinelearning #generativeai

𝐀𝐧𝐧𝐨𝐮𝐧𝐜𝐢𝐧𝐠 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭’𝐬 𝐨𝐩𝐞𝐧 𝐚𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐭𝐨 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦 𝐠𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐯𝐞 𝐀𝐈 𝐒𝐲𝐬𝐭𝐞𝐦𝐬

𝐏𝐲𝐑𝐈𝐓 automates AI Red Teaming tasks to allow operators to focus on more complicated and time-consuming tasks and can also identify security harms such as misuse (e.g., malware generation, jailbreaking), and privacy harms (e.g., identity theft).​

Find out more:

https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/

GitHub repo: https://github.com/Azure/PyRIT

How to Guide: https://github.com/Azure/PyRIT/blob/main/doc/how_to_guide.ipynb

#redteam #airedteam #redteaming #PyRIT #ml #ai #framewrok #python #cyber #llm #ai #aisecurity #microsoft #microsoftsecurity #opensource #MicrosoftAIRedTeam #GenAI #jailbreaking #promtp #promptinjection #malware #privacy #responsibleai #cybersecurity #aisecurity #secureai #machinelearning #generativeai

𝐀𝐧𝐧𝐨𝐮𝐧𝐜𝐢𝐧𝐠 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭’𝐬 𝐨𝐩𝐞𝐧 𝐚𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 𝐟𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 𝐭𝐨 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦 𝐠𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐯𝐞 𝐀𝐈 𝐒𝐲𝐬𝐭𝐞𝐦𝐬

𝐏𝐲𝐑𝐈𝐓 automates AI Red Teaming tasks to allow operators to focus on more complicated and time-consuming tasks and can also identify security harms such as misuse (e.g., malware generation, jailbreaking), and privacy harms (e.g., identity theft).​

Find out more:

https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/

GitHub repo: https://github.com/Azure/PyRIT

How to Guide: https://github.com/Azure/PyRIT/blob/main/doc/how_to_guide.ipynb

#redteam #airedteam #redteaming #PyRIT #ml #ai #framewrok #python #cyber #llm #ai #aisecurity #microsoft #microsoftsecurity #opensource #MicrosoftAIRedTeam #GenAI #jailbreaking #promtp #promptinjection #malware #privacy #responsibleai #cybersecurity #aisecurity #secureai #machinelearning #generativeai

New from me today: Industry orgs and vendors including @openssf and @jfrog call for #MLSecOps to #secureAI. https://www.techtarget.com/searchitoperations/news/366552019/Meet-MLSecOps-industry-calls-for-new-measures-to-secure-AI

https://www-ccinfo-nl.translate.goog/nieuwsbrief-archief/nieuwsbrief-berichten/1388427_nieuwsbrief-269-cybercrimeinfo-ccinfo-nl?_x_tr_sl=nl&_x_tr_tl=en&_x_tr_hl=nl&_x_tr_pto=wapp

Download newsletter: https://www.ccinfo.nl/_downloads/3e4017b1a99d1339427af8a2324264db (nr.269)

#Cybersecurity #Cybercrimeinfo #Dataleaks #SecureAI #DigitalCrime #darkweb #Cyberattacks

https://www-ccinfo-nl.translate.goog/nieuwsbrief-archief/nieuwsbrief-berichten/1388427_nieuwsbrief-269-cybercrimeinfo-ccinfo-nl?_x_tr_sl=nl&_x_tr_tl=en&_x_tr_hl=nl&_x_tr_pto=wapp

Download newsletter: https://www.ccinfo.nl/_downloads/3e4017b1a99d1339427af8a2324264db (nr.269)

#Cybersecurity #Cybercrimeinfo #Dataleaks #SecureAI #DigitalCrime #darkweb #Cyberattacks

https://www-ccinfo-nl.translate.goog/nieuwsbrief-archief/nieuwsbrief-berichten/1388427_nieuwsbrief-269-cybercrimeinfo-ccinfo-nl?_x_tr_sl=nl&_x_tr_tl=en&_x_tr_hl=nl&_x_tr_pto=wapp

Download newsletter: https://www.ccinfo.nl/_downloads/3e4017b1a99d1339427af8a2324264db (nr.269)

#Cybersecurity #Cybercrimeinfo #Dataleaks #SecureAI #DigitalCrime #darkweb #Cyberattacks