29/03/2025LLM to RCE using "broken pickles"In February 2025, researchers from Reverse Engineering Labs uncovered malicious ML models hosted on Hugging Face. These models exploited ‘broken’...
18/03/2025LLM security is broken, here is the dataIt became apparent to me that there are fundamental security problems with LLMs, which make them very difficult to secure....
03/03/2025What is wrong with Escaping or Input SanitizationThe earliest documented instance of Path Traversal vulnerability is Windows 95 “Dot Dot” bug that goes back to October 1995....
12/12/2024OWASP Mobile Top 10 Secure Coding ChallengesPlease find below a list of secure coding challenges for OWASP Mobile Top 10. The goal in each challenge is...
26/09/2024The Need For Tailored Secure Code Training - Aligning with NIST Cybersecurity and Privacy Learning ProgramThe National Institute of Standards and Technology (NIST) has recently published a Special Publication: 800-50r1, "Building a Cybersecurity and…
21/09/2024How to Get a Free Ticket to Black Hat ConferenceBlack Hat is the top global security conference, held annually in the USA, Canada, Europe, Asia, and the Middle East....
23/08/2024OWASP TOP 10 Secure Coding ChallengesPlease find below the curated list of secure coding challenges covering OWASP Top 10 security classes. The goal in each...
21/08/2024OWASP TOP 10 Secure Coding Challenges in RubyPlease find below a sample list of secure coding challenges for Ruby and their alignment with OWASP Top 10. The...
21/08/2024OWASP TOP 10 Secure Coding Challenges in C#Please find below a sample list of secure coding challenges for C# and their alignment with OWASP Top 10. The...