SayHelloMrRoboto @HelloMrRoboto

🧠 CORS Misconfig → Credential Theft 1️⃣ Server: Access-Control-Allow-Origin: * + Allow-Credentials: true 2️⃣ Attacker uses fetch(..., {credentials: "include"}) 3️⃣ Browser sends victim’s cookies cross-origin 4️⃣ Sensitive data exfiltrated 🎯 Full session hijack #bugbounty #xss

Landmark Admin and Young Consulting have reported data breaches affecting 2.6 million individuals. Landmark's breach involved a ransomware attack through stolen VPN credentials, compromising 1.6 million people's sensitive personal data. Young… securityweek.com/2-6-million-im…

Webinar: Defend, Detect & Defeat Ransomware - Live Demo of the Halcyon Anti-Ransomware Platform - June 18, 2025 9:00am PT / 12:00pm ET Join live or watch on-demand here: bit.ly/3E95K7j Our experts will guide you through: - Advanced Ransomware #Detection, #Prevention and #Resilience - #Rcovery without reliance on backups or paying a #ransom demand - Case studies demonstrating how Halcyon minimizes operational downtime #infosec #security #cybersecurity #cyberattack #ransomware #webinar

Webinar: Every month get the latest #ransomware news and analysis from the @HalcyonAi RISE Team (Research, Intelligence, Services, Engineering). Join us for the next Threat Insights webinar Jun 10, 2025 10:00 AM PT / 1:00 PM ET (or watch on-demand here): bit.ly/4knbVEQ #cybersecurity #infosec #security #cybersecurity #cyberattack #webinar

Webinar: Defend, Detect, & Defeat - every week we offer a LIVE DEMO of the Halcyon Anti-Ransomware Platform - join us in-person and ask questions or watch one on-demand: bit.ly/3E95K7j We'll show you how @HalcyonAi minimizes downtime and increases operational resilience, offering a robust #defense against #ransomware - join us to learn about: - Real-time ransomware #detection and #prevention - Advanced #recovery without #backups or paying a #ransom - Case studies and use cases #security #webinar #demo #cyberattack #cybersecurity #infosec

Halcyon U.K. Partner Program Expands - Distology Named Key Channel Partner in Region @HalcyonAi has launched the expanded Halcyon Revolution Partner Program in the United Kingdom (U.K.) as a key part of its strategy to accelerate global growth... halcyon.ai/blog/halcyon-u… #cybersecurity #infosec #security #cyberattack #ransomware

💡This is How Hackers Hack You Using Simple Social Engineering

𝟭𝟱 𝗕𝗲𝘀𝘁 𝗙𝗥𝗘𝗘 𝗦𝗤𝗟 𝗖𝗼𝘂𝗿𝘀𝗲𝘀 𝘄𝗶𝘁𝗵 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗢𝗻𝗹𝗶𝗻𝗲 (𝟮𝟬𝟮𝟰) 1. SQL for Data Science imp.i384100.net/oqJLJE 2. Introduction to Structured Query Language (SQL) imp.i384100.net/zNObOW 3. Databases and SQL for Data Science with Python imp.i384100.net/WqEdEZ 4. SQL for Data Analysis (Mode) udacity.com/course/sql-for… 5. Databases: Relational Databases and SQL edx.org/learn/relation… 6. Oracle SQL Basics– Coursera imp.i384100.net/0ZzjzE 7. Introduction to Databases and SQL Querying udemy.com/course/introdu… 8. Advanced SQL kaggle.com/learn/advanced… 9. Oracle SQL - A Complete Introduction udemy.com/course/introdu… 10. SQL Projects - Free Certificate mygreatlearning.com/academy/learn-… 11. RDBMS - No Certificate udacity.com/course/sql-for… 12. SQL - Free Certificate simplilearn.com/free-online-co… 13. MySQL - Free Certificate codecademy.com/learn/learn-sql 14. Querying and managing data khanacademy.org/computing/comp… 15. Implement a Relational Database with SQL openclassrooms.com/en/courses/603… 16. Advanced Databases and SQL Querying udemy.com/course/advance… 17. Microsoft SQL Crash Course for Absolute Beginners udemy.com/course/complet… 18. Oracle SQL - A Complete Introduction udemy.com/course/introdu… 19. Databases and SQL for Data Science with Python imp.i384100.net/WqEdEZ 20. SQL 101: A Beginners Guide to SQL udemy.com/course/sql-101… That's a wrap! If you enjoyed this post: ♀𝗦𝗔𝗩𝗘 it for later 🤩 Follow @manishkumar_dev for more such useful content.

Really good book: • Python + Langchain + Streamlit • Architecture and components of LLMs • Fine-tuning • Multi-modal applications • Conversational and recommendation applications • Agents packt.link/04xiy

Ransomware on the Move: #BlackBasta, #UndergroundTeam, #SpaceBears, #LockBit @HalcyonAi publishes a #RaaS and #extortion guide, Power Rankings: Ransomware Malicious Quartile. Here's #ransomware on the move last week... ransomwareattacks.halcyon.ai/news/ransomwar… #cybersecurity #infosec #security

Traditional education is in trouble. The best education in the world is no longer from academic institutions but from practitioners with decades of experience at a fraction of the cost. If you are a data scientist or software developer, this is the best program for learning how to train, validate, and deploy fine-tuned large language models: maven.com/s/course/6f4a4… The instructor roster looks like an Oscar-winning Hollywood movie. I'm only going to mention four of them, but check the complete list on the website: • Jeremy Howard (@jeremyphoward): Co-Founder Answer AI & Fast AI • Shreya Shankar (@sh_reya): LLMOps and LLM Evaluations researcher • Eugene Yan (@eugeneyan): Senior Applied Scientist @ Amazon • Harrison Chase (@hwchase17): CEO of LangChain Next Monday is the last day to enroll. Classes are live. There will be four workshops: 1. When to fine-tune an LLM 2. Train your first fine-tuned LLM 3. Instrumentation/evaluation to improve models 4. Deploy the model Decentralized education is the future. Traditional dinosaur universities can't compete with this, especially when focusing more on social wars than teaching.

#DataScience #MachineLearning #NeuralNetworks #DeepLearning #AI #DataScientists #Infographic

@svpino The main benefit of understanding algorithms is the skills you learn to solve problems efficiently and effectively.

25 algorithms every programmer should know: Let's start with my top favorite 10. If nothing else, you should read about these algorithms and have a good idea of how they work: 1. Linear search to find an element in a list 2. Binary search to find an element on a sorted list 3. Bubble sort to sort a list 4. Merge sort will also sort lists 5. Quicksort to sort the list and do it fast 6. Dijkstra to find the shortest path in a graph 7. Breadth-first Search (BFS) for trees or graphs 8. Depth-first search (DFS) for trees or graphs 9. Huffman for doing data compression 10. Anything related to dynamic programming Learning about algorithms is like getting tattoos: you never have enough. Here are another 5 algorithms that will help you go beyond the basics: 11. Kruskal for the finding minimum spanning tree 12. Floyd Warshall, shortest paths in a graph 13. Union Find to detect cycles in a graph 14. Bellman-Ford, shortest path in a graph 15. Lee for finding the shortest path in a maze If you are serious about this topic, I recommend learning about algorithms' space and time complexity. People usually refer to this topic as "Big O" notation. You should build a good intuition about the performance of different algorithms and learn how to evaluate them. Machine Learning will rule the next 50 years, so the next 10 algorithms you can't ignore are the following: 16. Linear Regression 17. Logistic Regression 18. Decision Trees 19. Bayes' theorem 20. k-Nearest Neighbors (kNN) 21. Every algorithm related to neural networks 22. K-means 23. Random forest 24. Gradient boosting algorithms 25. Any dimensionality reduction algorithm (PCA, for instance) There are many more mind-blowing algorithms! I haven't found a better way to understand how computers work from a first-principles point of view than reading about different algorithms. Take a look at the attached video.

The most common kill chain used during a ransomware incident typically involves several stages, which may include: 1. **Reconnaissance**: Attackers gather information about the target network, such as identifying vulnerabilities, employee email addresses, or system configurations. 2. **Initial Access**: This involves the actual breach of the network, often through methods like phishing emails, exploiting unpatched software vulnerabilities, or through compromised credentials obtained from previous data breaches. 3. **Lateral Movement**: Once inside the network, attackers move laterally to gain access to additional systems and resources. They may exploit weak access controls or use stolen credentials to move between machines. 4. **Privilege Escalation**: Attackers attempt to gain higher levels of access within the network, often by exploiting vulnerabilities in software or misconfigurations to elevate their privileges. 5. **Data Exfiltration**: In some cases, attackers may exfiltrate sensitive data before deploying ransomware, which can be used as leverage to increase the likelihood of payment. 6. **Deployment of Ransomware**: After establishing a foothold and ensuring they have the necessary access, attackers deploy the ransomware payload across the network, encrypting files and demanding payment for decryption keys. To defend against these stages of the kill chain, you can implement a range of security measures, including: - **User Education**: Train employees to recognize phishing attempts and other social engineering tactics. - **Patch Management**: Keep software and systems up to date with the latest security patches to mitigate known vulnerabilities. - **Access Control**: Implement strong access controls, including the principle of least privilege, to limit the ability of attackers to move laterally within the network. - **Network Segmentation**: Segment your network to limit the spread of ransomware in case of a breach. - **Monitoring and Detection**: Employ robust monitoring and detection tools to identify suspicious activity within the network. - **Backup and Recovery**: Regularly backup critical data and ensure backups are stored securely offline to prevent them from being encrypted by ransomware. - **Incident Response Plan**: Develop and regularly test an incident response plan to ensure a swift and effective response in the event of a ransomware attack. By focusing on these areas, you can significantly reduce the risk of a successful ransomware attack on your network.

Building a model is easy. Keeping the model working is the hard part. Unfortunately, we don't talk enough about what happens after deploying a model. The work doesn't end when you deploy. It begins. Your model must deal with edge cases, feedback loops, and drift. Your model will start degrading. If you don't do something, your model will turn into poison. In this short video, I discuss what we do in production systems.

I took this Deep Learning course. It's from UC Berkeley. Amazing how you can get free education from top universities in the world! The course is great. I love it's organized in small chunks. I watch it all during my morning walks. Here is the link: youtube.com/playlist?list=…

#BlackCat / #ALPHV Claims #Attack on Trans-Northern Pipelines The consequences of failing to defend #Linux systems could prove catastrophic, but we can reduce risk of a major disruption by preparing now... bit.ly/3SXEMV4 #cybersecurity #infosec #security #ransomware

Ransomware Payments Broke $1 Billion Record in 2023 While the huge losses from #ransomware #attacks reported are staggering, it’s the increasing #threat to human life that should be of greatest concern... bit.ly/49nmhPp #cybersecurity #infosec #security

Data Engineering is incredibly underrated, yet people are making fortunes building data pipelines. I can't think of anything more important than data for the next 20 years. Here is a great book: packt.link/SfOW1 These skills will make you irreplaceable.