AWS

LASCON Recap - Infrastructure as Code

Recently, we had the privilege of participating in and sponsoring the Lonestar Application Security Conference (LASCON). Our CEO, Michael McCabe, and Ken Toler delivered a training session and a talk on exploiting Terraform for remote code execution; both received a fantastic turnout. In between operating our booth, we had the opportunity to attend some insightful talks.

During the event, one presentation that stood out was delivered by Bug Bounty and focused on how to manage a bug bounty program. Sean Poris's knowledge and experience running one of the world's largest bounty programs was fascinating and insightful. Another highlight of the event was a panel by our friends at Absolute AppSec with a discussion on the state of application security. Their thought-provoking questions, particularly on AI, made a lasting impression.

LASCON offered a diverse range of talks that were both engaging and informative. While at our booth, we relished the chance to converse with attendees and gain insights into their day-to-day tasks. The networking opportunities, including a lively happy hour and even bull riding, were a great way to connect with fellow participants. Perhaps next year, someone from our team will take a turn on the bull!

We also had valuable interactions with other vendors, learning about the various products available in the market. Our booth's strategic location near the food and adjacent to the lock-picking table provided both delicious distractions and a fun challenge. After visiting the lock-picking table, we found ourselves handcuffed and were only set free after successfully picking the lock. It was a fun and educational experience.

Overall, our experience at LASCON exceeded our expectations. If you haven't attended before, we highly recommend it. For those who have, we look forward to hopefully seeing you again next time. We're also eagerly anticipating the theme for next year, as the Game of Vuln shirts and artwork were truly impressive!

Preventing Overreliance: Proper Ways to Use LLMs

LLMs have a very uncanny ability of being able to solve problems in a wide variety of domains. Unfortunately, they also have a tendency to fail catastrophically. While an LLM may be able to provide accurate responses 90% of the time, due to nondeterministic behavior, one must be prepared for

Ignore Previous Instruction: The Persistent Challenge of Prompt Injection in Language Models

Prompt injections are an interesting class of emergent vulnerability in LLM systems. It arises because LLMs are unable to differentiate between system prompts, which are created by engineers to configure the LLM’s behavior, and user prompts, which are created by the user to query the LLM. Unfortunately, at the

The Security Benefits of Infrastructure as Code

We have developed and delivered new ways to deliver infrastructure quickly and without these misconfigurations. Prevention is the only cure; we’ll talk about how you can implement this today.

Read next