AI-based fuzzing targets open-source LLM vulnerabilities
Google researchers using OSS-Fuzz have identified 26 vulnerabilities, but experts warn that AI fuzzing is not a panacea for AI/ML security.
John P. Mello Jr.
Freelance technology writer. John's work has appeared in the The Boston Globe and Boston Herald, as well as CFO, CIO, CSO, and Inc. magazines. He is a former managing editor of the Boston Business Journal and Boston Phoenix, as well as a staff writer for Government Security News.
Posts from John P. Mello Jr.
AI-based fuzzing targets open-source LLM vulnerabilities
OWASP Top 10 for LLM adds risks: Get on target to secure your AI models
OWASP has updated its Top 10 list with key risk areas, and recently added an AppSec tooling guide for AI. Here's what they cover — and what they don't.
CISA's secure software deployment push: Key takeaways for AppSec teams
To avoid the next CrowdStrike fiasco, CISA and other agencies recommend embracing safe deployment practices earlier in the SDLC. Here's what you need to know.
NIST's NICE: 3 ways to adapt the hiring framework for modern threats
NICE is designed to help leaders build better cybersecurity teams. Here's how to put it to work in the software supply chain security era.
OWASP's Dependency-Track tool update: Key changes — and limitations
Here's what you need to know about the version 4.12.0 update — and about managing risk from your software, whether it's open source or not.
AI and cybersecurity: Modernize your SecOps to tackle today's threats
Here are highlights from Caleb Sima's recent BSides and RVAsec talks — and expert insights on how AI can help deal with today's threats head-on.
The best cybersecurity certifications to level up your skills
With the threat landscape shifting, boosting your market value requires choosing the right certs. Here's what you need to know.
Modernize your chaos engineering with commercial software transparency
By leveraging modern supply chain security, you can develop better chaos engineering with deeper visibility into all software. Here are key considerations.
Go beyond the checkbox: How software bills of materials can manage risk
SBOMs are a good start — but modern software supply chain security tooling is needed to make them effective, experts say.