The AI Attack Surface Map v1.0

danielmiessler.com/p/the-ai-attack-surface-map-v1-0

Building an AI AppSec Team

srajangupta.substack.com/p/building-an-ai-appsec-team

tldrsec/prompt-injection-defenses: Every practical and proposed defense against prompt injection.

github.com/tldrsec/prompt-injection-defenses

È ora di mandare in pensione il termine “utente” - MIT Technology Review Italia

www.technologyreview.it/e-ora-di-mandare-in-pensione-il-termine-utente/

I LLM possono fare cose sbalorditive. Ma nessuno sa esattamente perché - MIT Technology Review Italia

www.technologyreview.it/i-llm-possono-fare-cose-sbalorditive-ma-nessuno-sa-esattamente-perche/

Causa principale

struct.github.io/ai-2021-retrospective.html

Causa principale

struct.github.io/auto_agents_1_day.html

Natural Language Processing (NLP) - A Complete Guide

www.deeplearning.ai/resources/natural-language-processing/

Nudging: ovvero, perché le piattaforme incentivano buone pratiche tra gli utenti e cosa ne guadagnano

www.insidemarketing.it/glossario/definizione/nudging/

Advanced Chunking Strategies - Mervin Praison

mer.vin/2024/03/chunking-strategy/

Semantic Chunking | 🦜️🔗 Langchain

python.langchain.com/docs/modules/data_connection/document_transformers/semantic-chunker

Dense X Retrieval: What Retrieval Granularity Should We Use?

arxiv.org/abs/2312.06648

SSTI (Server Side Template Injection) | HackTricks | HackTricks

book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection

.txt Engineering

blog.dottxt.co/index.html

Outlines

outlines-dev.github.io/outlines/

Nuclei + Interactsh Integration for Automating OOB Testing

blog.projectdiscovery.io/nuclei-interactsh-integration/

Provvedimento dell

www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9991064

LLM Agents can Autonomously Hack Websites

medium.com/@danieldkang/llm-agents-can-autonomously-hack-websites-ab33fadb3062

Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning

arxiv.org/abs/2308.04964

OAuth 2.0 Redirect URI Validation Falls Short, Literally

dl.acm.org/doi/fullHtml/10.1145/3627106.3627140

Data Breach - Violazioni di dati personali

www.garanteprivacy.it/data-breach

GPT in 60 Lines of NumPy | Jay Mody

jaykmody.com/blog/gpt-from-scratch/

(37) Ollama Function Calling Advanced: Make your Application Future Proof! - YouTube

www.youtube.com/watch?v=eHfMCtlsb1o

(37) I Made AI to Auto Categorise 10000 Comments in Google Sheets with 0$ - YouTube

www.youtube.com/watch?v=wXiTuNnh2h4

(37) Mistral Function Calling: Integrate Your Application to AI - YouTube

www.youtube.com/watch?v=2fMh7o_QYzo

CrewAI vs AutoGen for Code Execution AI Agents

e2b.dev/blog/crewai-vs-autogen-for-code-execution-ai-agents

CSWP 29, The NIST Cybersecurity Framework (CSF) 2.0 | CSRC

csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-csf-20/final

Youtube Whisper - a Hugging Face Space by kazuk

huggingface.co/spaces/kazuk/youtube-whisper-09

www.reddit.com/r/netsec/comments/1azq7um/vnc_through_ssh_tunnel/?utm_source=danielmiessler.com&utm_medium=newsletter&utm_campaign=ul-no-421-framing-is-everything&rdt=55184

LaCulturaDelDato #102

stefanogatti.substack.com/p/laculturadeldato-102?post_id=141753155&r=1zm85s&utm_source=substack

How to describe your business as an equation

www.lennysnewsletter.com/p/the-math-formula-behind-your-business

Framing is Everything

danielmiessler.com/p/framing-is-everything

(47) CAPTCHA Inutile: Rispondo alle domande #captcha #cybersecurity #appsec - YouTube

www.youtube.com/watch?v=8qWKYjJopvE

LLM Agents can Autonomously Hack Websites

arxiv.org/html/2402.06664v3

Generative AI in EU Law: Liability, Privacy, Intellectual Property, and Cybersecurity

papers.ssrn.com/sol3/papers.cfm?abstract_id=4694565

Google’s AI Security Framework - Google Safety Center

safety.google/cybersecurity-advancements/saif/

Guidelines for secure AI system development

www.ncsc.gov.uk/collection/guidelines-secure-ai-system-development

L'archetipo dell'Eroe e i 12 archetipi di Jung - Psicoadvisor

psicoadvisor.com/larchetipo-delleroe-e-i-12-archetipi-di-jung-21154.html

Guidelines 04/2022 on the calculation of administrative fines under the GDPR | European Data Protection Board

edpb.europa.eu/our-work-tools/documents/public-consultations/2022/guidelines-042022-calculation-administrative_it

A Few Fun Semgrep Experiments

parsiya.net/blog/semgrep-fun/

Testi

uz.sns.it/~fvenez/testi.html