Tag

#mitre-atlas

6 posts0 followers

Explore Hashnode

Alternatives

JebitokSep 8 · 26 min read

LLM Pentesting (TryHackMe)

Link to the challenge on TryHackMe: LLM Pentesting Introduction You are on day three of an authorised penetration test for Hartwell, a B2B SaaS company whose employee portal includes an internal AI as

sharonjebitok.com

Vũ Nhật LâmAug 6 · 20 min read

Agent Data Injection: Fooling AI Agents With the Data They Already Trust

Risk Summary You ask a web agent to summarize the reviews on a product page. A fake review planted by an attacker makes it click "Buy Now" instead, and an order goes through. No malware, no phishing,

blog.fiscybersec.com

Vũ Nhật LâmJun 23 · 12 min read

Gemini's Secret Affair: Notification-Based Prompt Injection and the Fake Context Alignment Technique

A single WhatsApp message from an unknown number is enough to turn the Gemini voice assistant into an attacker's tool — opening the smart windows in a victim's home, live-streaming their video over Zo

blog.fiscybersec.com

JebitokMay 9 · 13 min read

RAG Security Fundamentals (TryHackMe)

Introduction Retrieval-Augmented Generation (RAG) allows language models to use external documents when answering questions. Instead of relying solely on training data, a RAG system retrieves relevant

sharonjebitok.com

JebitokMay 8 · 10 min read

Securing AI Systems (TryHackMe)

Introduction TryTrainMe's engineering team has built TryAssist, an AI-powered code review assistant that analyses pull requests, queries internal documentation, and connects to the CI/CD pipeline. Bef

sharonjebitok.com

Tatiane Pimenta LealMar 1 · 5 min read

MITRE ATLAS and OWASP | API Security in the Age of LLM

Artificial Intelligence, or AI, is an inevitable topic nowadays, not only for its formidable growth in speed, features, capabilities, and general use, but also for its flaws and ethical concerns. In t

tatianepimentaleal.hashnode.dev

Search Hashnode

Explore Hashnode

LLM Pentesting (TryHackMe)

Agent Data Injection: Fooling AI Agents With the Data They Already Trust

Gemini's Secret Affair: Notification-Based Prompt Injection and the Fake Context Alignment Technique

RAG Security Fundamentals (TryHackMe)

Securing AI Systems (TryHackMe)

MITRE ATLAS and OWASP | API Security in the Age of LLM

Trending tags this week