GitHub’s Post

If you are thinking about scaling your #sdv operations for 10 years of regulatory compliance or providing a collaborative CI/CD for your supply chain who will soon be working on large, consolidated EE platforms then I strongly recommend attending GitHub Universe. Let’s connect and discuss how #Arm and GitHub can help with these and other challenges facing the scale needed to deliver #sdv.

Have you registered for this week's webinar? We're sharing some great information on what makes O3 powerful. And we're going to show you, not just tell you! Don't miss your chance! https://bit.ly/45Uf4FS #AWPsoftware #infrastructure #awp #soc2 #security #ai #softwarearchitecture

Announcing AttackGen v0.4 🎉 Following a couple of great feature requests from the community, I'm happy to announce the latest release of AttackGen, a powerful tool that generates unique incident response scenarios based on the MITRE ATT&CK framework. This update brings exciting new features that enhance flexibility, provide alternative model options, and cater to diverse range of users. ✨What's New in AttackGen v0.4?✨ 🍃 Mistral API Integration - AttackGen now supports the integration of Mistral AI models, providing an alternative to OpenAI and Azure OpenAI Service models. This integration allows users to explore and compare the performance of different language models, enabling them to find the most suitable solution for their specific use case. 🏡 Local Model Support using Ollama - With the integration of Ollama, AttackGen now supports the use of locally hosted language models. This feature is particularly beneficial for users with strict data privacy requirements or those who prefer to keep their data on-premises. (Please note that this feature is not available for users of the AttackGen version hosted on Streamlit Community Cloud.) ⚙️ Optional LangSmith Integration - The integration with LangSmith is now optional, providing improved flexibility. If no LangChain API key is provided, users will see a message indicating that the run won't be logged by LangSmith, rather than an error being thrown. This change enhances the overall user experience and allows users to continue using AttackGen without the need for LangSmith integration (although I do recommend using it). For more information and to get started, please use the following links: 💻 Streamlit Demo App: https://lnkd.in/eJjTTj2r 🌐 GitHub Repository: https://lnkd.in/ew9yjB6E 🐳 Docker Hub: https://lnkd.in/dEk4eW6i #Cybersecurity #IncidentResponse #MITREATTACK #LLMs #GenerativeAI

Simplifying #AI security just got better! MongoDB teams up with Robust Intelligence for an exciting partnership. Explore the fusion of AI Firewall and Atlas Vector Search. Read here.

Want to learn more about Generative AI and Microsoft Copilot?     Microsoft is launching a Learn Live Series called “Getting Started with Microsoft Copilot for Security.” This weekly online seminar series will run from March 19th through April 9th and will review skill development resources and discuss topics related to AI and Copilot for Security.    Hosts Edward Walton, Andrea Fisher, and Rod Trent will guide you through four topics each with a corresponding Microsoft Learn module designed to help anyone interested in getting users ready for Microsoft Copilot for Security. #GenerativeAI #copilot #security #AIforSecurity https://lnkd.in/gDSwMUtF

🔒 A question that a lot of folks are asking - How Will AI Transform Cloud Security and Development in 2024? 🔒 We spoke to Michael Hanley, CSO & SVP of Engineering at GitHub about the transformative potential of AI for enhancing security measures and optimizing developer productivity in the coming years. 🚀 Increased Productivity: How AI is streamlining code development processes. 🔐 Enhanced Security: Integrating AI tools like static analysis into the development phase to catch vulnerabilities early. 🔧 Reduced Technical Debt: AI's role in tackling longstanding security and quality issues. The year is 2024, and we are still perfecting the basics like system patching and two-factor authentication. But with AI, the concept of "shift left" in security is reaching a whole new level. It's no longer just about catching issues pre-production; it's about integrating security from the very start of code writing. 🛡️ If the role of AI in Cloud Security and Development is of interest to you and this is a great episode with Michael, we have linked the full episode in the comments below. #CISO #CloudSecurity #AIsecurity #DevSecOps

📣 Security PSA for MLOps folks: If you’re running Triton server for ML Inference workloads make sure: 1. You are not exposing load model endpoints to the end user. A malicious user can abuse it to load their own models including models with malicious arbitrary code (under certain configurations). 2. Update Triton to the latest version as it fixes the file overwrite vulnerability. 3. Review the new “Secure Deployment Considerations” document published for Triton best practices. Kudos to huntr community and the Protect AI team for securing the AI supply chain!

Have you worked with Cast AI? It’s a service that monitors your Kubernetes clusters and provides a dashboard tracking cost, security, and efficiency. In this video, we’ll cover: 🌮 Optimizing for efficiency 🌮 Monitoring for cost 🌮 Tracking security and vulnerabilities https://bit.ly/4cukM4n #castAI #AI #kubernetes #terraform

Generative AI is the topic over the last year, discussed in nearly every customer meeting. But how to implement Generative AI solutions in an enterprise environment, ready for scaling, security, cost efficiency, resiliency, IP protection and more? I'm happy to be invited to the Hamburger IT Strategie Tage, moderating a round table together with Lajos L. Christian Haberland Thorsten Pelka about Operational Excellence for Generative AI. #aws #generativeai #operationalexcellence

Learn from one of Redpanda's top AI experts about how Sovereign AI tackles the issues that are preventing enterprises from building their dream apps with #GenAI. We'll walk through how Sovereign AI ships the model to your data (the data will never leave your network), how it ensures the highest level of security, and how it enables the tracking of the data lineage of every #LLM execution to its source. Check out the details of the webinar here 👇