Databricks' CSO - Previously: Citrix's CISO, Semmle's CSO, Google's Head of Product Security, MSFT, entrepreneur. Real Madrid supporter. All opinions my own.

Washington, USA
Joined December 2007
Big news! Super proud to be part of this rocket ship democratizing data+ai
We’re proud to announce our Series I funding round led by @TRowePrice, with new strategic investor @nvidia, and new investors @CapitalOne Ventures and @OTPPinfo! This funding will accelerate our innovations in #generativeAI. Learn more ⬇️ dbricks.co/468Bz99
2
14
2,925
Big news! @databricks agreed to acquire @MosaicML to democratize even further DATA + AI. Build your own models/LLMs on a cost effective and secure way.
Today, we’re excited to share that MosaicML has agreed to join @Databricks!
1
11
4,126
1/3 Lately, I have been talking to so many CISOs and their security teams. There is a clear trend. While Data security is generally well understood, AI security is not. Security teams are catching up on MLops, model training, training datasets, model serving, ...
1
9
2,429
2/3 @databricks has gone through this already and we have a very good understanding of the field. Happy to help! Are you curious about Data + AI security? What about model generation and serving security best practices? What about security use cases for Generation AI and LLMs?
1
3
991
3/3 @databricks is hosting the Data + AI Summit Jun/26-29 and our security team will be there to engage with you. Virtual and on site registration here: databricks.com/dataaisummit/
2
4
1,027
Say no to racism or any other type of discrimination! @vinijr you are an inspiration to many. Baila Vini, baila!
LOS AMO!!! GRACIAS, GRACIAS Y GRACIAS! ✊🏿🙏🏾
1
1
1,522
Fermin J. Serna retweeted
Excited to launch the first two #LLM MOOC courses with @edXOnline. Learn about prompt engineering, vector embeddings, retrieval, chains, and MLOps. Learn how to create your own LLM from scratch on a data lakehouse! databricks.com/blog/enroll-o…
2
39
4
131
13,948
Fermin J. Serna retweeted
Two weeks after we first introduced Dolly, we're back with more: @databricks releases Dolly 2.0, the first open, instruction-following large language model for commercial use bit.ly/3zXOzjC via @VentureBeat @sharongoldman tip @Techmeme
4
26
5,335
Fermin J. Serna retweeted
I can’t tell which I’m more excited about, Dolly 2.0 or the fact that we’re giving away the 15k instruction tuning records, created by thousands of Databricks employees in the last two weeks, we used to train it. Free and licensed for commercial use! 🐑 github.com/databrickslabs/do…
20
56
5
433
108,807
Free Dolly! With a true open data set for others to build on top. Game changer
Free Dolly! Introducing the first *commercially viable*, open source, instruction-following LLM. Dolly 2.0 is available for commercial applications without having to pay for API access or sharing data with 3rd parties. bit.ly/43oXmsy
6
2,042
Great read, congrats @wiz_io team!
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts. How did I do it? Well, it all started with a simple click in @Azure… 👀 This is the story of #BingBang 🧵⬇️
3
12
5,260
Fermin J. Serna retweeted
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts. How did I do it? Well, it all started with a simple click in @Azure… 👀 This is the story of #BingBang 🧵⬇️
253
3,127
567
14,533
3,210,252
There is a very big difference between B2C and B2B in regards to customer reaction and company viability post breach
There is a long history of people not caring about breaches and the stock price recovers (and even outperforms) within X months. Customers just don’t care about security usually. I wonder if things will be different for Lastpass this time…
1
1
3
3,150
This is a great thread. I cannot agree more with the "leave your egos apart, focus on survival not on valuation"
PREDICTION: There's a mass extinction event coming for early & mid-stage companies. Late '23 & '24 will make the '08 financial crisis look quaint for startups. Below I explain when, why & how it will start & offer *detailed advice to founders* on surviving the looming die-off. /1
1
1,938
Fermin J. Serna retweeted
Everything you see any player doing, Pelé did it first. RIP ⚽️🤴🏿
4,020
77,875
3,194
864,033
33,289,623
Fermin J. Serna retweeted
Matt Mochary has been CEO coach to @naval, the founders of OpenAI, Notion, Rippling, Robinhood, Coinbase, Reddit, Plaid, Flexport, Opendoor, partners at Sequoia, YC, Benchmark, and many others. He also open-sourced his entire curriculum, templates and all. Here's a link 👇
490
2,416
139
17,945
Super excited to be here in NYC for the @databricks CDO Forum. Sold out! I can't wait to deliver my talk around "Securing the Data in your Lakehouse" and network with the fantastic audience.
1
4
It has been a pretty amazing week. Nothing big just a small set of tiny nuggets here and there. Thanks to everyone who contributed. Looking fwd to the next couple of weeks and Databrick's security leadership offsite and planning how to conquer the world.
1
10
We are still hiring! IR, detection, Corporate security, Assurance, Security TPMs, Data & Cloud Security, Appsec, ... Ping me for details.
2
Listen to Nico, he is right here. Vuln management should be outcome driven... reduce risk by mitigating discovered vulns within the minimum time possible. Not having accurate data, wastes time in the short term and impacts the long run by diminishing trust in the effort.
This is -big-. Building a healthy vuln management program is about building trust relationship with engineer. Every false positive, every non actionable alert diminish that trust. Which is why accurate dependency alerts are critical! Great work semgrep team!
5