CSIT Village·19 min
Loke Yan Hao
Loke Yan Hao examines we share our findings from using AI tools for web penetration testing on bug bounty programmes.
65 talks tagged with this topic.
Loading filters…
1–24 of 58 talks / 65 · loading…
CSIT Village·19 min
Loke Yan Hao
Loke Yan Hao examines we share our findings from using AI tools for web penetration testing on bug bounty programmes.
CSIT Village·27 min
Liu Wen Kai · Martin Koh
Liu Wen Kai and Martin Koh examines during this session, we will share an automated end-to-end AI workflow to perform digital analysis on Windows images with capabilities of fully on-premise investigation.
Main Stage·45 min
Bruce Schneier
Bruce Schneier examines how artificial intelligence systems hack human institutions, tax codes, financial markets, and legal frameworks.
Blacks in Cybersecurity Village·33 min
Levone Campbell
Explores the dual role of artificial intelligence in scaling hyper-targeted phishing campaigns while powering real-time behavioral defenses.
Blacks in Cybersecurity Village·41 min
Tia Pope
Explores how AI-designed proteins and biological vulnerabilities mirror cybersecurity attack vectors, highlighting the emerging field of cyberbiosecurity.
Cloud Village·25 min
Shani Peled
Exploiting AWS SageMaker to gain persistence and exfiltrate data from ML platforms.
Community Stage·34 min
Andra Lezza · Jeremiah Edwards
Presents threat modeling and defensive guardrails for autonomous multi-agent AI workflows, covering persistent memory, tool execution, and prompt injection.
Creator Stage·52 min
Dane Sherrets · Shlomie Liberow
Deep dives into adversarial prompt injection, context poisoning, and RAG manipulation flaws to help researchers find and demonstrate high-impact AI vulnerabilities.
Creator Stage·22 min
D. Jurado · J. Nogue
Chronicles the deployment of XBOW, an autonomous AI offensive agent that discovered over 200 open-source vulnerabilities and submitted 1,000 bug bounty reports.
Creator Stage·26 min
Andrea Downing
Introduces the Patient AI Rights framework and a community-driven red teaming methodology to stress test clinical AI models and chatbots for bias and failure modes.
Crypto and Privacy Village·48 min
Patrick Walsh
Demonstrates model inversion and embedding inversion attacks against LLMs and RAG systems, showing how sensitive personal data can be extracted from vector databases.
CyberRisk TV·20 min
Brian Mendenhall
Brian Mendenhall examines SentinelOne and AWS Collaborate to Power the Future of AI Security.
Main Stage·38 min
Yoav Magid
Analyzes the architecture of Apple Intelligence and Private Cloud Compute, identifying privacy risks and data leakage vectors across on-device and cloud models.
Main Stage·46 min
Ben Nassi · Or Yair · Stav Cohen
Demonstrates an indirect prompt injection attack where a Google Calendar invite autonomously triggers Gemini AI agents to exfiltrate private user emails and files.
Main Stage·19 min
C Parzian
C Parzian analyzes weaponized machine learning file formats, demonstrating arbitrary code execution vectors in widely deployed AI frameworks.
Main Stage·19 min
Tobias Diehl
Demonstrates how adversaries exploit data voids in LLM training corpora and search indexes to manipulate Microsoft Copilot answers and inject untrusted content.
Main Stage·35 min
Ji'an Zhou · Lishuo Song
Discloses multiple memory corruption and deserialization vulnerabilities in PyTorch's TorchScript JIT engine that allow arbitrary remote code execution via malicious AI models.
Main Stage·42 min
DARPA AIxCC Finalists
Finalists from DARPA's AI Cyber Challenge present autonomous cyber reasoning systems designed to find, patch, and remediate critical software vulnerabilities.
Sessions·15 min
Russell Okoth
Russell Okoth examines the realities of AI security, separating hype from actual risk while presenting practical governance strategies for adopting organizations.
Creator Stage·26 min
Patrick Walsh · Bob Wall
Explains embedding inversion attacks against generative AI vector databases and introduces open-source vector encryption for private search.
Creator Stage·41 min
Matt Domko
Details architectural and data pipeline practices used at Rabbit to secure customer identities, anonymize voice data, and control RAG model access.
Creator Stage·40 min
Chloé Messdaghi · Kasimir Schulz
Explores the ethical challenges of AI vulnerability disclosure, covering data bias exploitation and responsible reporting standards.
Creator Stage·30 min
Suha Hussain
Demonstrates incubated ML exploits using LangSec principles to inject backdoors into machine learning pipelines via model serialization bugs.
Main Stage·21 min
Perri Adams
DARPA Program Manager Perri Adams and industry leaders announce the AI Cyber Challenge (AIxCC) to automate software vulnerability discovery and remediation.