In this episode, we go through OWASP's recently released list of vulnerability classes for LLMs. The list includes:

Prompt injections
Data leakage
Inadequate sandboxing
Unauthorized code execution
SSRF vulnerabilities
Overreliance on LLM-generated content
Inadequate AI alignment
Insufficient access controls
Improper error handling
Training data poisoning

We note that while some of the items on this list are definitely worth mentioning, others feel a bit more disconnected from the topic of cybersecurity and likely can't be solved through technical means.

Reference: Rich Harang's twitter thread on the subject.

Ver todos los episodios