mik0w

How you can lose your GH Access Token or OpenAI API key through misconfigured MLOps application

I am not developing any open-source apps worth sharing currently, but I do work on some cybersecurity projects that may be interesting for both hackers and AI engineers:

- Payloads for Attacking Large Language Models - https://github.com/mik0w/pallms - a list of payloads for fuzzing your LLM apps for common vulnerabilities that occur there. Pull requests welcome!

- OWASP Top10 for Machine Learning - https://github.com/OWASP/www-project-machine-learning-securi... - OWASP Top10 for LLMs got viral. Hopefully OWASP Top10 for ML is going there as well! I contribute to that project with a few ML security enthusiasts

- The Real Threats of AI newsletter - https://hackstery.com/newsletter/ - probably the only newsletter cataloging the news from AI Security and LLM security world.

Feel invited to follow any of those :)

I am, my gf is a doctor and I am an engineer, but tbh... what is the question about? Are you in relationship with a person or with their job?

This post will explore why both YOLO security (YOLOsec) and FOMO security (FOMOsec) are pernicious disservices to infosec defense and how you can spot them so that you may yeet them from your organization’s security strategy.