Introduzione - Training

learn.microsoft.com/it-it/training/modules/create-security-baselines/1-introduction

Esercizio - Creare query di base sui log di Monitoraggio di Azure per estrarre informazioni dai dati dei log - Training

learn.microsoft.com/it-it/training/modules/analyze-infrastructure-with-azure-monitor-logs/4-exercise-create-log-queries

GraphRAG: New tool for complex data discovery now on GitHub

www.microsoft.com/en-us/research/blog/graphrag-new-tool-for-complex-data-discovery-now-on-github/

The architecture of SAST tools: An explainer for developers

github.blog/2024-02-12-the-architecture-of-sast-tools-an-explainer-for-developers/

CodeQL Wall of Fame

securitylab.github.com/codeql-wall-of-fame/

Building an Observable arXiv RAG Chatbot with LangChain, Chainlit, and Literal AI

towardsdatascience.com/building-an-observable-arxiv-rag-chatbot-with-langchain-chainlit-and-literal-ai-9c345fcd1cd8

How AI enhances static application security testing (SAST)

github.blog/2024-05-09-how-ai-enhances-static-application-security-testing-sast/

Via libera del Cdm ai decreti legislativi sulla cyber - Formiche.net

formiche.net/2024/06/nis-2-cer-cdm-cybersicurezza/?lctg=7kkxrnv4

Text to Diagram | Easily Create Technical Diagrams

text2diagram.com/

ISC2 Cybersecurity (CC) Exam Notes - Mike Chapel's LinkedIn Course : r/cissp

www.reddit.com/r/cissp/comments/11adad7/isc2_cybersecurity_cc_exam_notes_mike_chapels/

Security Certification Roadmap - Paul Jerimy Media

pauljerimy.com/security-certification-roadmap/

Python Projects with Source Code | Aman Kharwal

thecleverprogrammer.com/2021/01/14/python-projects-with-source-code/

SonarSource static code analysissince 2008

rules.sonarsource.com/

SEI Digital Library

insights.sei.cmu.edu/library/

Carnegie Mellon University, Software Engineering Institute

insights.sei.cmu.edu/search/

Esplora tutti i corsi, i percorsi di apprendimento e i moduli - Training

learn.microsoft.com/it-it/training/browse/

API Security Explained — From Attack To Defense (Pt2. Put Hands To Work)

mhaghaee.medium.com/api-security-explained-from-attack-to-defense-pt2-put-hands-to-work-418e10e0e2b9

API Security Explained — From Attack To Defense (Pt1. Introduction)

mhaghaee.medium.com/api-security-explained-from-attack-to-defense-pt1-introduction-196b8cb89df1

Simplify analyzing AWS WAF rules with GenAI using Amazon Bedrock

community.aws/content/2giWF2k378IZYzU1jf42GTtFySw/simplify-analyzing-aws-waf-rules-with-genai-using-amazon-bedrock

Artificial Intelligence – Q&As

ec.europa.eu/commission/presscorner/detail/en/QANDA_21_1683

AI Act

digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai

The AI Attack Surface Map v1.0

danielmiessler.com/p/the-ai-attack-surface-map-v1-0

Building an AI AppSec Team

srajangupta.substack.com/p/building-an-ai-appsec-team

tldrsec/prompt-injection-defenses: Every practical and proposed defense against prompt injection.

github.com/tldrsec/prompt-injection-defenses

È ora di mandare in pensione il termine “utente” - MIT Technology Review Italia

www.technologyreview.it/e-ora-di-mandare-in-pensione-il-termine-utente/

I LLM possono fare cose sbalorditive. Ma nessuno sa esattamente perché - MIT Technology Review Italia

www.technologyreview.it/i-llm-possono-fare-cose-sbalorditive-ma-nessuno-sa-esattamente-perche/

Causa principale

struct.github.io/ai-2021-retrospective.html

Causa principale

struct.github.io/auto_agents_1_day.html

Natural Language Processing (NLP) - A Complete Guide

www.deeplearning.ai/resources/natural-language-processing/

Nudging: ovvero, perché le piattaforme incentivano buone pratiche tra gli utenti e cosa ne guadagnano

www.insidemarketing.it/glossario/definizione/nudging/

Advanced Chunking Strategies - Mervin Praison

mer.vin/2024/03/chunking-strategy/

Semantic Chunking | 🦜️🔗 Langchain

python.langchain.com/docs/modules/data_connection/document_transformers/semantic-chunker

Dense X Retrieval: What Retrieval Granularity Should We Use?

arxiv.org/abs/2312.06648

SSTI (Server Side Template Injection) | HackTricks | HackTricks

book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection

.txt Engineering

blog.dottxt.co/index.html

Outlines

outlines-dev.github.io/outlines/

Nuclei + Interactsh Integration for Automating OOB Testing

blog.projectdiscovery.io/nuclei-interactsh-integration/

Provvedimento dell

www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9991064

LLM Agents can Autonomously Hack Websites

medium.com/@danieldkang/llm-agents-can-autonomously-hack-websites-ab33fadb3062

Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning

arxiv.org/abs/2308.04964

OAuth 2.0 Redirect URI Validation Falls Short, Literally

dl.acm.org/doi/fullHtml/10.1145/3627106.3627140

Data Breach - Violazioni di dati personali

www.garanteprivacy.it/data-breach

GPT in 60 Lines of NumPy | Jay Mody

jaykmody.com/blog/gpt-from-scratch/

(37) Ollama Function Calling Advanced: Make your Application Future Proof! - YouTube

www.youtube.com/watch?v=eHfMCtlsb1o

(37) I Made AI to Auto Categorise 10000 Comments in Google Sheets with 0$ - YouTube

www.youtube.com/watch?v=wXiTuNnh2h4

(37) Mistral Function Calling: Integrate Your Application to AI - YouTube

www.youtube.com/watch?v=2fMh7o_QYzo

CrewAI vs AutoGen for Code Execution AI Agents

e2b.dev/blog/crewai-vs-autogen-for-code-execution-ai-agents

CSWP 29, The NIST Cybersecurity Framework (CSF) 2.0 | CSRC

csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-csf-20/final

Youtube Whisper - a Hugging Face Space by kazuk

huggingface.co/spaces/kazuk/youtube-whisper-09

www.reddit.com/r/netsec/comments/1azq7um/vnc_through_ssh_tunnel/?utm_source=danielmiessler.com&utm_medium=newsletter&utm_campaign=ul-no-421-framing-is-everything&rdt=55184