Dhiraj Sharan

I discuss my thoughts on API Security best practices, authorization mechanisms, pitfalls and breaches in this article https://lnkd.in/gWwB4vwe

17

Data poisoning and backdoor attacks on LLMs used for code completion currently go undetected if malicious payloads are directly integrated into code with minimal transformation / indirection (see code examples): https://lnkd.in/gz_HyWMu

3

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications: A critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the execution of arbitrary code on susceptible instances. The flaw, tracked as CVE-2024-47561, impacts all versions of the software prior to 1.11.4. "Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute https://lnkd.in/g-eVMFCj

2

Sharing this published interview with Pravin Kothari, a very well thought out guide on how organizations should embrace AI, putting guardrails and implementing governance around it. A must read ….

8

JFrog & GitHub - Unveiling the Future Of EveryOps - SSO across both platforms - Bidirectional linking between source code and binaries - Unified view of security across both platforms - You can even ask GitHub Copilot Chat about your JFrog Processes

60

BIG NEWS here at Observo AI.... we are no longer on a wait list for Ricky S. Arora and Gurjeet Arora session at Splunk .conf24! More seats have been made available. We are not sure how many seats were added, so it could fill up fast. Register here: https://lnkd.in/grBmGtBf #LetsGoObservo #splunk #conf24 #AI #Vegas

18

See our GPUaaS software demo

19

With the scope of security logs expanding and the cost of ingest and storage increasing, it’s important to understand logging options that provide granularity and flexibility. https://lnkd.in/gsg23EQR #cribl #siem #euba #cybersecurity

11

1 Comment

Q: What is the Proactive approach for Ransomware ? QA:Alert, Delete and revert to local service cache Solution: Defense in-depth approach… *possible to run with existing anti virus solution* (test first) Prabhath Wickramasinghe (CC)

2

As customers face breaches on a continuous basis they need mechanism that can help them remediate certain actions automatically. Manual interventions can be time consuming and costly. With AI on your side that can auto remediate, imagine the advantage you have against attackers plan to infiltrate your environment ! This by no means is an easy task for any vendor but when you have Continuos and Context based security solution like Stack Identity by your side, we make it possible !

9

Trishaan Kalra from Trellix provides valuable insights on the sophisticated version of Remcos RAT, highlighting its ability to penetrate victim's endpoints while evading detections. He also explains the effectiveness of Trellix Endpoint Security and EDR solutions in detecting this threat. Kudos to Trishaan Kalra. Check out the article below. Ashok Banerjee John Fokker

23

1 Comment

Great list of differences between automated and manual security testing by GSA. Some highlights are: — in the long term, RoI is greater for automated vs Manual. — automated testing becomes cost-effective over time, especially for high-volume and repeatable tests — automated tests have high scalability and can run simultaneously across multiple platforms, environments, or devices. The most significant advantage of manual testing high degree of accuracy and assurance.

17

2 Comments

Blog from Calum on the difference between Triage and Full Disk acquisition both in Cado and more generally:

7

Put some thoughts together on why traditional CA/CLM infrastructures fall short in dynamic, cloud-native environments. Purpose-built solutions like SPIFFE offer dynamic, attested identities, decentralized issuance, and granular policy enforcement, making them essential for modern workload credential management.

20