The Impact of Prompt Injection and HackAPrompt_AI in the Age of Security
The Security Table19 Joulu 2023

The Impact of Prompt Injection and HackAPrompt_AI in the Age of Security

Sander Schulhoff of Learn Prompting joins us at The Security Table to discuss prompt injection and AI security. Prompt injection is a technique that manipulates AI models such as ChatGPT to produce undesired or harmful outputs, such as instructions for building a bomb or rewarding refunds on false claims. Sander provides a helpful introduction to this concept and a basic overview of how AIs are structured and trained. Sander's perspective from AI research and practice balances our security qu...

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(111)

The End of Bug Bounty As We Know It

The End of Bug Bounty As We Know It

We dig into Linus Torvalds' claim that AI is now a legitimate tool for the Linux kernel, and what it means for bug bounty platforms drowning in submissions, with Bug Crowd reporting a fourfold spike i...

5 Elo 42min

Make No Mistakes: Inside the First "Agentic Ransomware"

Make No Mistakes: Inside the First "Agentic Ransomware"

We dig into Sysdig's Jade Puffer report, the so-called first agentic ransomware, and argue about whether the evidence actually proves an LLM was driving the attack or if it's just a well-trained scrip...

22 Heinä 43min

Is Spec-Driven Development Already Dead

Is Spec-Driven Development Already Dead

In this episode, we take on spec-driven development, the resurgent idea that writing a detailed spec and letting AI implement it will finally give us the precision engineering promised us since the 19...

15 Heinä 41min

Don't Bury the Model T: Why STRIDE Still Drives in an AI World

Don't Bury the Model T: Why STRIDE Still Drives in an AI World

In this episode, we dig into two things the security community loves to argue about: npm finally doing the right thing and whether STRIDE has any business being called dead. The npm v12 changes gate d...

1 Heinä 59min

Mostly Dead or Mostly Back: The Zombie Resurrection of DAST in an AI World

Mostly Dead or Mostly Back: The Zombie Resurrection of DAST in an AI World

In this episode, we dig into whether DAST is dead, mostly dead, or quietly making a comeback dressed in an AI trench coat. The conversation traces the origins of dynamic application security testing f...

24 Kesä 42min

Realists At The Table: How To See Through The Hype

Realists At The Table: How To See Through The Hype

In this episode, we dig into how the cybersecurity personality has shifted from the ego-driven, hoodie-up archetype to the paycheck-chasing newcomer. The conversation covers hype cycles from mainframe...

17 Kesä 37min

The Agentic Access Problem: When AI Becomes Its Own Administrator

The Agentic Access Problem: When AI Becomes Its Own Administrator

In this episode, we explore what happens when AI agents meet the security principle of least privilege. As agents gain the ability to request permissions, make decisions, and interact with systems on ...

3 Kesä 40min

The Tool Creep Problem: When More Security Means Less Security

The Tool Creep Problem: When More Security Means Less Security

In this episode, we break down why security budgets keep growing while organizations keep falling further behind. We explore how tool creep has quietly shifted from a nuisance into an active attack su...

8 Touko 42min