RSSAmplifier

Blog

Luca Vaudano's Blog

Hi! I'm Luca Vaudano and this is my blog. I’ll be sharing my takes on topics including, but not limited to, Cybersecurity, Machine Learning, AI/ML Security, ...

lucavauda.bearblog.devRSS feed ↗10 posts

Latest posts

Inference Enginering - Prefill vs decode

Questo è il mio primo blogpost in italiano. Questo è il primo appunto del learning path Inference engineering di Deep-ML. L'obiettivo è spiegare la differenza tra il prefill e il decode e perché vengono rispettivamente considerati compute-bandwith-bound e memory-bound. 1. Le due fasi dell'inferenza Nel contesto dell'inferenza di un LLM, prefill e decode sono i due step che ne caratterizzano il…

gpu-sentinel: reproducing a GPU-cloud container escape with no GPU

The other day a question stuck in my head: what does security actually look like in the context of GPUs? My workflow for questions like this has changed. A few years ago I'd have spent an evening watching a YouTube video and reading blog posts; today I can ask a language model and get a genuinely good answer back. So I asked. And the answer really struck, in one sentence: the overwhelming majority…

10-day approach for Detection Engineering

The detection engineering field feels like it could be my next professional challenge. My reading and exercises about threat hunting, combined with my work in ML, have been really interesting, but I wanted to experiment some more. So I decided to gather as much information as possible about detection engineering. But what is it? GitHub is usually a friend, I discovered a really great resource .…

No Logs, No Problem: Generating Threat Intel with Active Deception

I’m continuing my series reviewing the book Cyber Threat Hunting by Nadhem AlFardan, published by Manning. So far, I’ve written four posts covering Chapter 3 , Chapter 4 , Chapter 6 and Chapter 8 . Chapter 9 in my opinion wasn’t worth an article, I couldn’t add more to what the author explained in that chapter. This one will be the last chapter review for this book. It was really fun and hope to…

Cyber Analyst Interview Questions

This blog post is about an interesting YouTube video I watched recently. The core idea of the video was to ask the same interview questions to three different cybersecurity analysts . I've noted down those questions, and I'm going to try answering them myself. I thought it would be a cool challenge to try answering those questions myself. I'll share my initial answer in italics (to humble myself a…

K-means: We Gotta Stay 'Vicini Vicini' (Very Close!)

If you are Italian, you might be chuckling at the title. If you are not, I’m sorry but you have to know the Gabibbo. Me 🤝 Pop culture reference. I’m continuing my series reviewing the book Cyber Threat Hunting by Nadhem AlFardan, published by Manning. So far, I’ve written three posts covering Chapter 3 , Chapter 4 , and Chapter 6 . Although Chapter 7 was equally fascinating, I decided not to…

Statistical Constructs or: How I Learned to Use the Standard Deviation

I’m continuing the series of reviewing the book Cyber Threat Hunting , by Nadhem AlFardan, published by Manning. I already made two blog posts about Chapter 3 and Chapter 4 . This can be read standalone, but reading the other two for context could be useful. Bonus points if you recognize the title inspiration. 😃 You will find the specific files for the chapter in question at this link (my GitHub…

Monitoring LLMs Bad Behavior

Recently, Anthropic released a blog post called Detecting and Countering Malicious Uses of Claude: March 2025 , in which researchers discuss how some actors might use their Claude model in order to do harm. Multiple examples are presented, I will focus on two of them in particular: Social media bot spam; Script kiddie developing malware. The first case study is detailed here . First up: social…

Threat Intel 4 Threat Hunt

I’m continuing the series of reviewing the book Cyber Threat Hunting , by Nadhem AlFardan, published by Manning. If you haven’t read the one before, I strongly suggest you reading the previous post , as they are strongly correlated. You will fine the specific files for the chapter in question at this link (my GitHub repo). This is Chapter 4 called Threat Intelligence for Threat Hunting . Threat…

My First Threat Hunting Expedition

One of the things I like doing is reading technical books about various topics. Reading technical books can be challenging because they are not always easy to understand. And what's more, a good technical book should always have exercises. Here’s my plan: I want to read and do the work of Cyber Threat Hunting , by Nadhem AlFardan, published by Manning. Doing the work is essential for learning. I…