Aggregator

1.

绕过IP限制

透过RSAC2023一窥安全运营未来发展方向

GreyNoise is built on a strong foundation of mutual respect from our community. With that in mind we wanted to recognize community members that go above and beyond, so we created the GreyNoise Ambassador Program.

很久不写，随便写写

Eleanor Fairford, Deputy Director of Incident Management at the NCSC, and Mihaela Jembei, Director of Regulatory Cyber at the Information Commissioner’s Office (ICO), reflect on why it’s so concerning when cyber attacks go unreported – and look at some of the misconceptions about how organisations respond to them.

There are many prompt engineering classes and currently pretty much all examples are vulnerable to Prompt Injections. Especially Indirect Prompt Injections are dangerous as we discussed before. Indirect Prompt Injections allow untrusted data to take control of the LLM (large language model) and give an AI a new instructions, mission and objective. Bypassing Input Validation Attack payloads are natural language. This means there are lots of creative ways an adversary can inject malicious data that bypass input filters and web application firewalls.

大语言模型(LLM)红队测试的专业指引...

GPT的出现实在让人大受震撼。

透过Garnter魔力象限一窥SIEM的未来技术发展趋势

See how users search our data with the GreyNoise Query Language (GNQL) and learn tip and tricks to improve your searching skills.

「Prompt也是可编程的 --黑哥尔」既然ChatGPT火了后就诞生了“提示工程师”，所以Prompt本身

按个人理解重新整理一下内容逻辑

本文主要是记录笔者基于近期对云上攻防态势的分析思考和展望云服务安全架构设计框架的未来发展趋势。