Leon Johnson’s Post

#AI Exploits is a collection of exploits and scanning templates for responsibly disclosed #vulnerabilities affecting machine learning #tools. Each tool has subfolders that contain metasploit modules, nuclei, or #CSRF templates. https://lnkd.in/e-piJ-kR

"Hey AI, find all PRs that may introduce security issues" - Addepar Security Engineering releases RedFlag 🚩 under MIT License, a tool that helps make pentesting more targeted using AI! Check it out at https://lnkd.in/eawSt4Ed #SecurityEngineering #AI #RedFlag #CICD #PenTesting #SSDLC #SecureCode

AI isn't going anywhere, which means the need to secure AI APIs will only become more prevalent. Here's a look at recent AI-related API exploits and what can be done to arm these integration points.

Fair to say, when we do talk about AI, we need to talk about software supply chain risk of any AI system itself. https://lnkd.in/gPAgUVtt

💥 Today we released an updated AI Vulnerability Rating Taxonomy for LLM's 💥 Since 2016, Bugcrowd has led the way towards open, transparent and community-driven vulnerability ratings, and, today's update is a continued evolution of the VRT to match the current threat landscape our customers see daily. https://lnkd.in/er-2_Dvc

CIO Influence Protect AI Open Sources Three Tools to Help Organizations Secure AI/ML Environments from Threats #AIMLEnvironments #Artificialintelligence #machinelearning #ProtectAI #securitythreats https://lnkd.in/dg8Jghei

A nice OWASP checklist for the ones part of AI journey

CIO Influence Protect AI Open Sources Three Tools to Help Organizations Secure AI/ML Environments from Threats #AIMLEnvironments #Artificialintelligence #machinelearning #ProtectAI #securitythreats https://lnkd.in/dg8Jghei

Eight Vulnerabilities Disclosed in the AI Development Supply Chain: Details of eight vulnerabilities found in the open source supply chain used to develop in-house AI and ML models have been disclosed. All have CVE numbers, one has critical severity, and seven have high severity. The post Eight Vulnerabilities Disclosed in the AI Development Supply Chain appeared first on SecurityWeek.