Attacking AI systems

Name: Attacking AI systems
Start: 2025-04-18
End: 2025-04-18
Location: Seattle, WA, USA

Date: April 18, 2025

Event: Seattle Bsides

Location: Seattle, WA, USA

Event page: https://www.bsidesseattle.com/2025-schedule.html

A presentation slide showing AI system vulnerabilities and attack vectors

At Seattle Bsides 2025, I demonstrated novel vulnerabilities introduced by generative AI models. I explored the history of prompt injection, explained it in detail. Last, I ran a live demo with an AI-integrated logstics system that I created, where the audience helped me craft various prompt injection attempts. During this demo, we were able to successfully get to an OS command injection vulnerability in the AI plugin through prompt injection.