0b001 — Hi, I'm
GianlucaCaruso
I try to take cybersecurity out of the slides and into real things: code, pipelines, processes and all the places where "we'll fix it later" becomes a problem.
0b010
What I do
What I do
I work with code and with cybersecurity. But if that's not your world, no worries: here's the plain-language version, starting from real problems.See my CV
I work in cybersecurity with a hands-on approach: security applied to code, infrastructure, DevSecOps automation and real processes, even when doing it right is the hard part.Read the blog
Posts, experiments and things learned by getting them wrong first.
0b011
Recent notes
Read the blog
LLM guardrails: defending AI apps without fooling yourself
Whitelists, semantic filters and LLM-as-a-judge each solve a different problem. None of them alone is enough.
Blind command injection: automating the exploit with Nuclei
No direct feedback from the server doesn't mean no feedback at all. A timing attack turns silence into a side channel.