
Michael Chan
905 posts

Michael Chan
@mchancloud
Father of two boys, guitar and uke player. Identity, GenAI, and security architect. My opinions are my own.


We got ChatGPT to leak sensitive data from your Google Drive data back to OUR servers. And you’ll never even know it happened. All by sharing a single document. A real 0-click data exfil attack. Here’s a detailed breakdown of how we did it 🧵 #DEFCON #BHUSA @mbrg0


a short summary of all new attack vectors, lol techniques and tools we published at bh/dc (400 words) labs.zenity.io/p/summary-zeni…





👉For those who want more on AWS security internals, we finally have a great page describing Forward Access Sessions, the vehicle by which many AWS services does things on behalf of you. docs.aws.amazon.com/IAM/latest/Use… @AWSIdentity



Policy Intelligence update on September 28, 2023 cloud.google.com/policy-intelli… #googlecloud After January 15, 2024, some Policy Intelligence features will only be available for customers with organization-level activations of Security 1/2

Policy Intelligence update on September 28, 2023 cloud.google.com/policy-intelli… #googlecloud After January 15, 2024, some Policy Intelligence features will only be available for customers with organization-level activations of Security 1/2



🔒 What happened? While releasing open-source training datasets, Microsoft's AI research team accidentally left the vault door open 👀 Over 38TB of data (!), including personal backups of employee workstations, private keys, and internal Microsoft Teams messages, were exposed.






