Sunil Gentyala

Sunil Gentyala's pen-testing guide for GenAI, LLM, and RAG applications emphasizes that prompt injection can manipulate language to reach protected data or trigger unauthorized actions, requiring test…

Proofpoint's threat research team reported that attackers exploited OAuth client ID spoofing to enumerate Microsoft Entra ID accounts without successful sign-ins, with two campaigns using fabricated a…