Can Hackers Hijack Your Chatbot? How RAG Systems and Other API Endpoints Can Create Data Portals for Cyber Intruders with Keith Hoodlet of Trail of Bits

Your AI Injection

Player FM - Internet Radio Done Right

Ditambah two tahun yang lalu

Kandungan disediakan oleh Deep. Semua kandungan podcast termasuk episod, grafik dan perihalan podcast dimuat naik dan disediakan terus oleh Deep atau rakan kongsi platform podcast mereka. Jika anda percaya seseorang menggunakan karya berhak cipta anda tanpa kebenaran anda, anda boleh mengikuti proses yang digariskan di sini https://ms.player.fm/legal.

Species Unite

1
Andrew Stein: Living with Lions 46:39

10 days ago46:39

Main Kemudian

Senarai

Suka

Disukai

46:39

“If we march into that village and we start trying to persecute people for using poison, something that's very illegal, nobody's going to talk to us. We're not going to find out where the poison came from. We're not going to be able to shut anything down. We should take the approach that people are using poison because they're desperate, because they see no other alternative.” – Andrew Stein Andrew Stein is a wildlife ecologist who spent the past 25 years studying human carnivore conflict from African wild dogs and lions in Kenya and Botswana to leopards and hyenas in Namibia. His work has long focused on finding ways for people and predators to coexist. He is the founder of CLAWS , an organization based in Botswana that's working at the intersection of cutting-edge wildlife research and community driven conservation. Since its start in 2014 and official launch as an NGO in 2020, CLAWS has been pioneering science-based, tech-forward strategies to reduce conflict between people and carnivores. By collaborating closely with local communities, especially traditional cattle herders, CLAWS supports both species conservation and rural livelihoods—making coexistence not just possible, but sustainable.…

about a year ago 59:12

MP3•Laman utama episod

Can a misconfigured prompt spark a massive data breach?

On this episode of Your AI Injection, host Deep Dhillon and Keith Hoodlet, Director of AI/ML and Application Security from Trail of Bits reveal the critical vulnerabilities hiding in your AI chat systems. Keith explains how RAG systems and other API endpoints, if not rigorously secured, can create unintended data portals, allowing hackers to extract everything from HR records to confidential strategic documents. The two navigate the complexities of prompt injection vulnerabilities, dynamic adversarial testing, and the balancing act between rapid innovation and robust security. As they discuss the human and technical factors that contribute to these risks, Deep and Keith challenge the industry to view security not as an afterthought, but as an integral feature of every AI-driven product. Tune in for a deep dive into safeguarding your digital future!

Learn more about Keith here: https://www.linkedin.com/in/securingdev/
and Trail of Bits here: https://www.trailofbits.com/

Check out some of our related podcast episodes:

70 episod

#Tech #Deep #Artificial Intelligence #Machine Learning #Practical Ai #Ai In Practice #Health Ai #Science #News #Tech News

Can Hackers Hijack Your Chatbot? How RAG Systems and Other API Endpoints Can Create Data Portals for Cyber Intruders with Keith Hoodlet of Trail of Bits

Your AI Injection

published about a year ago

Kongsi

MP3•Laman utama episod

Can a misconfigured prompt spark a massive data breach?

Learn more about Keith here: https://www.linkedin.com/in/securingdev/
and Trail of Bits here: https://www.trailofbits.com/

Check out some of our related podcast episodes:

70 episod

#Tech #Deep #Artificial Intelligence #Machine Learning #Practical Ai #Ai In Practice #Health Ai #Science #News #Tech News

Semua episod

Your AI Injection

1
Is This the End of Traditional Coding? How AI Orchestration Might Render Developers Obsolete with Laly Bar-Ilan of Bit 50:01

9 days ago50:01

50:01

Is traditional coding already a thing of the past? In this episode of Your AI Injection, host Deep Dhillon sits down with Laly Bar-Ilan, Chief Scientist at Bit, to explore a near-future where software developers evolve from code writers into code orchestrators. Laly discusses how Bit's composable software development and AI-powered componentization are set to overhaul the industry, even possibly eliminating the need for writing code altogether. The discussion leads into how a graph of reusable components could tame sprawling, out-of-control code bases, the ethical nuances of automated development, and what it really means to “orchestrate” code. Tune in now to uncover whether tomorrow’s developers will simply curate AI outputs, or continue the tradition of writing lines of code themselves. Check out more about Laly here: https://www.linkedin.com/in/laly-bar-ilan/ and Bit here: https://www.linkedin.com/company/bit-dev/ Check out some more of our AI & software development podcasts here: Your Code Base Is Already Gen AI—Now What? with Matt Van Itallie of Sema Why Generative AI Could Make Programming Languages Obsolete with Austin Vance of Focused Software, Development, & Emerging Innovation Podcasts…

Your AI Injection

1
3 Million Gallons Vanished? The AI Smart City Revolution That's Making Water Waste Visible with Ashwin Chandran of McCord Development 52:58

4 weeks ago52:58

52:58

What happens when AI tracks every resource in your city? Unlike most cities, which are burdened with aging infrastructure, McCord Development had the rare opportunity to build a city from the ground up. But what does it really mean to create a smart city ? In this episode of Your AI Injection , Deep Dhillon speaks with Ashwin Chandran about the AI sensors used to track water consumption, optimize energy distribution, and rethink urban planning like parking lots. The two dive into the challenges of integrating AI into city infrastructure, the unexpected ways data is shaping development, and whether AI-managed cities could be the future of urban life. Check out more about Ashwin here: https://www.linkedin.com/in/ashwinchandran/ and McCord Development here: https://www.linkedin.com/company/mccord-development-inc/ Check out some of our related content here: AI and the Ethics of Influence: Exploring Synthetic Respondents & Decision-Making with Avi Yashchin of Subconscious AI AI's Role in Energy Regulation and Compliance with Yuval Lubowich Can AI Save Pollinators from Extinction? It Begins in Your Backyard with Chris Cosma…

Your AI Injection

1
The Death of the Assembly Line? Why AI-Driven Factories Are Changing Everything with Chris Pickett of MASS Group 52:32

7 weeks ago52:32

52:32

Is AI putting an end to traditional factory jobs? In this episode of Your AI Injection , host Deep Dhillon sits down with Chris Pickett, CEO of MASS Group, to explore how AI-driven manufacturing is rewriting the rules of industrial production. With automation already transforming warehouses, Chris explains how AI-powered execution systems can optimize workflows, improve quality control, and even detect defects in semiconductor chips before they become expensive mistakes. But what could this mean for the future of factory workers? Will AI simply replace routine, repeatable tasks, or is a fully autonomous factory in our future? Tune in to uncover the economic realities of AI-powered manufacturing and whether human oversight is here to stay. Learn more about Chris here: https://www.linkedin.com/in/chris-pickett/ and MASS Group here: https://www.linkedin.com/company/massgroupinc/ Check out some of our related podcast episodes: AI-Driven Manufacturing: Predictive Maintenance and Defect Detection with Ryan Thompson Recycling Space Debris: The Next Frontier in Manufacturing with Gary Calnan and Walter Schroeder of CisLunar Industries Structuring Enterprise & Process Automation Data Using AI with Slater Victoroff…

Your AI Injection

1
Can Hackers Hijack Your Chatbot? How RAG Systems and Other API Endpoints Can Create Data Portals for Cyber Intruders with Keith Hoodlet of Trail of Bits 59:12

9 weeks ago59:12

59:12

Can a misconfigured prompt spark a massive data breach? On this episode of Your AI Injection , host Deep Dhillon and Keith Hoodlet, Director of AI/ML and Application Security from Trail of Bits reveal the critical vulnerabilities hiding in your AI chat systems. Keith explains how RAG systems and other API endpoints, if not rigorously secured, can create unintended data portals, allowing hackers to extract everything from HR records to confidential strategic documents. The two navigate the complexities of prompt injection vulnerabilities, dynamic adversarial testing, and the balancing act between rapid innovation and robust security. As they discuss the human and technical factors that contribute to these risks, Deep and Keith challenge the industry to view security not as an afterthought, but as an integral feature of every AI-driven product. Tune in for a deep dive into safeguarding your digital future! Learn more about Keith here: https://www.linkedin.com/in/securingdev/ and Trail of Bits here: https://www.trailofbits.com/ Check out some of our related podcast episodes: Your Code Base Is Already Gen AI—Now What? with Matt Van Itallie of Sema Why Generative AI Could Make Programming Languages Obsolete with Austin Vance of Focused Exploring Artificial General Intelligence: Intent, Intellect, and Innovation with Lucas Hendrich of the Forte Group…

Your AI Injection

1
Will AI Take Over Student Advising? The Impact of Bots on College Success with Andrew Magliozzi of Mainstay 1:01:05

11 weeks ago1:01:05

1:01:05

Will AI-powered chatbots soon become students' most trusted advisors? In this episode of Your AI Injection , host Deep Dhillon chats with Andrew Magliozzi, CEO of Mainstay, about AI-driven student support. Andrew shares how AI-powered coaches can proactively nudge students to stay on track with everything from filing financial aid forms to meeting academic deadlines. But what happens when students need deeper conversations about their future? The two explore how innovations like AI-driven text messages helped boost one school’s graduation rates by ~11% and why students often trust bots with personal questions they might never ask an advisor. They also dive into the delicate balance between automation and human intervention, the ethical concerns of AI in education, and what the future of advising—and education as a whole—might look like. Learn more about Andrew here: https://www.linkedin.com/in/andrewmagliozzi/ and Mainstay here: https://www.linkedin.com/company/heymainstay/ Check out some more of our related podcast episodes: The Potential of AI in Revolutionizing Personalized Tutoring with Brent Beck The Power of AI in Project-Based Learning with Bob Lenz AI for Corporate Curriculum Development and Democratizing Education with Anna Talerico…

Your AI Injection

1
Your Code Base Is Already Gen AI—Now What? with Matt Van Itallie of Sema 54:25

13 weeks ago54:25

54:25

Are human developers becoming obsolete in the age of generative AI? In this episode of Your AI Injection , Deep Dhillon chats with Matt Van Itallie, founder and CEO of Sema, to uncover how generative AI is reshaping the software industry. Matt explains how Sema’s tools, like their GenAI Code Monitor, are helping organizations responsibly integrate AI-generated code while safeguarding with human oversight. Together, they tackle some high-value questions: Are developers shifting from creators to curators in the coding process? How do tools like GenAI Code Monitor identify risks like security vulnerabilities & intellectual property (IP) concerns? And what does the rise of AI coding assistants mean for transparency, collaboration, and innovation? Tune in to explore how to lead the charge in redefining modern software development. Learn more about Matt here: https://www.linkedin.com/in/mvi/ and Sema here: https://www.linkedin.com/company/semasoftware/ Check out some more of our related podcast episodes: Why Generative AI Could Make Programming Languages Obsolete with Austin Vance of Focused | Your AI Injection Exploring Artificial General Intelligence: Intent, Intellect, and Innovation with Lucas Hendrich of the Forte Group | Your AI Injection Speak Directly to Your Data, No Coding Required with Sarah Nagy…

Your AI Injection

1
Artificial Intelligence Trends Shaping 2025 and Beyond 19:26

17 weeks ago19:26

19:26

What will AI bring us in 2025 and beyond? In this special compilation episode, we explore whether AI will be an ally or adversary in the coming years. See what our experts have to say about their vision for AI over the next 5 to 10 years—how it can solve critical challenges, enhance human potential, and reshape industries, while also grappling with its risks and limitations. Featured Guests: Brent Beck – CTO of Littera Education Adam Binnie – Chief Innovation Officer at Visier Sarah Nagy – CEO of Seek.ai Avi Yashchin – Founder & CEO of Subconscious.ai Paul Lewis – CTO of Pythian Gary Calnan – Co-founder of CisLunar Industries Austin Vance – CEO of Focused Artem Semjanow – CEO & Co-founder of Neatsy Oded Cohen – VP of Engineering at Viz.ai Dr. Chris Cosma – Ecologist and Pollination Biologist at the Conservation Biology Institute Check out some more of our related podcast episodes: Expert Tips for AI Implementation and Data Strategy with Paul Lewis Speak Directly to Your Data, No Coding Required with Sarah Nagy Transforming Workforce Management with AI and People Analytics with Adam Binnie…

Your AI Injection

1
Why Generative AI Could Make Programming Languages Obsolete with Austin Vance of Focused 51:58

18 weeks ago51:58

51:58

Is coding still worth learning? In this episode of Your AI Injection , Deep Dhillon sits down with Austin Vance, CEO of Focused Labs, to explore the radical future of software development. Austin explains why AI might soon bypass programming languages like Python, generating bytecode or AI-native logic directly. The two discuss how developers today are pairing with AI copilots to navigate legacy systems, optimize frameworks, and build faster -- but what happens when AI handles everything except the requirements? Will human developers move from writing code to directing machines? Tune in to find out if programming languages are on the brink of obsolescence. Learn more about Austin here: https://www.linkedin.com/in/austinbv/ and Focused here: https://www.linkedin.com/company/build-with-focused/ Check out some more of our related podcast episodes: Expert Tips for AI Implementation and Data Strategy with Paul Lewis Speak Directly to Your Data, No Coding Required with Sarah Nagy Transforming Workforce Management with AI and People Analytics with Adam Binnie…

Your AI Injection

1
Recycling Space Debris: The Next Frontier in Manufacturing with Gary Calnan and Walter Schroeder of CisLunar Industries 44:19

19 weeks ago44:19

44:19

Is space debris the biggest untapped resource of the 21st century? In this episode of Your AI Injection , host Deep Dhillon explores the groundbreaking, futuristic possibilities of space-based manufacturing with Gary Calnan and Walter Schroeder, co-founders of Cislunar Industries. Cislunar is pioneering the recycling of orbital debris into valuable materials, creating the foundation for an industrial economy in space. Discover how they’re pioneering the recycling of space debris into valuable materials, creating everything from fuel rods to construction supplies for the Moon. Learn how their efforts could redefine space exploration and sustainability as we know it. Learn more about Gary here: https://www.linkedin.com/in/garycalnan/ and Walter here: https://www.linkedin.com/in/janwalterschroeder/ and CisLunar Industries here: https://www.linkedin.com/company/cislunarindustries/ Check out some of our related content here: AI and the Ethics of Influence: Exploring Synthetic Respondents & Decision-Making with Avi Yashchin of Subconscious AI AI's Role in Energy Regulation and Compliance with Yuval Lubowich Exploring Artificial General Intelligence: Intent, Intellect, and Innovation with Lucas Hendrich of the Forte Group | Your AI Injection…

Your AI Injection

1
Exploring Artificial General Intelligence: Intent, Intellect, and Innovation with Lucas Hendrich of the Forte Group 45:36

22 weeks ago45:36

45:36

What separates true intelligence from mere mimicry? In this episode of Your AI Injection , host Deep Dhillon chats with Lucas Hendrich, CTO of the Forte Group, into the fascinating future of Artificial General Intelligence. Together, the two explore the critical role of 'intent' in the quest for true machine intelligence. Lucas shares his insights on what it would take for AI to move beyond predictive algorithms toward authentic, independent thought, drawing on his early experiences working with AI visionary Ray Kurzweil. The two also discuss the practical challenges of implementing AI in business, the evolution of data architecture, and the ethical and operational guardrails needed as we inch closer to a new era in machine intelligence. Learn more about Lucas here: https://www.linkedin.com/in/lucashendrich/ and the Forte Group here: https://www.linkedin.com/company/fortegroup/ Check out some of our related content: Expert Tips for AI Implementation and Data Strategy with Paul Lewis AI Copyright Regulation: Navigating Legal Challenges and Ethical Dilemmas Embracing AI in Business: Navigating Misconceptions and Implementation Hurdles with Elise Oras…

Your AI Injection

1
AI and the Ethics of Influence: Exploring Synthetic Respondents & Decision-Making with Avi Yashchin of Subconscious AI 46:33

25 weeks ago46:33

46:33

Could AI be the ultimate tool for mass manipulation? In this episode, host Deep Dhillon sits down with Avi Yashchin, founder and CEO of Subconscious.ai. Avi, a former product manager at IBM Watson Research, shares insights into how AI is reshaping our understanding of human decision-making. They dive into the fascinating world of synthetic respondents—AI models that simulate human feedback with remarkable accuracy. Avi explains how Subconscious.ai aims to democratize causal thinking, allowing anyone to understand why humans make choices. Deep and Avi explore whether technologists have a responsibility to police their AI tools and discuss unintended consequences when innovation outpaces ethical considerations. Will synthetic respondents empower us to make better decisions, or could they open the door to unprecedented manipulation? Learn more about Avi here: https://www.linkedin.com/in/aviyashchin/ and about Subconscious.ai here: https://www.linkedin.com/company/subconscious-ai/ Check out some of our related content: Can AI Save Pollinators from Extinction? It Begins in Your Backyard with Chris Cosma Does AI Know Better Than Doctors? Our New Healthcare Reality with Oded Cohen AI-Driven Innovations in Occupational Therapy with Karen Jacobs and Alyson Stover…

Your AI Injection

1
Speak Directly to Your Data, No Coding Required with Sarah Nagy 44:57

26 weeks ago44:57

44:57

What if anyone in your company, regardless of technical prowess, could simply talk to their data? In this episode, host Deep Dhillon is joined by Sarah Nagy, CEO of Seek.ai, to explore the revolutionary shift in how businesses interact with their most valuable resource—data. Nagy discusses how AI, powered by natural language processing, is transforming data access by allowing non-technical users to ask complex questions and get instant, insightful answers. As businesses race to embrace this technology, the conversation raises critical questions about the future of AI and its role in shaping decision-making across industries. Learn more about Sarah here: https://www.linkedin.com/in/sarah-nagy/ and Seek AI here: https://www.linkedin.com/company/seekai/ Check out some of our related podcast episodes: Expert Tips for AI Implementation and Data Strategy with Paul Lewis Transforming Workforce Management with AI and People Analytics with Adam Binnie Embracing AI in Business: Navigating Misconceptions and Implementation Hurdles with Elise Oras…

Your AI Injection

1
Can AI Save Pollinators from Extinction? It Begins in Your Backyard with Chris Cosma 55:24

28 weeks ago55:24

55:24

The pollinator crisis is more than an environmental issue—it’s a global emergency. In this episode host Deep Dhillon sits down with Dr. Chris Cosma, a renowned ecologist and pollination biologist at the Conservation Biology Institute. The two discuss the vital role pollinators play in food production and ecosystem health, and why their decline could spell disaster for humanity before we know it. With insights on how AI is revolutionizing conservation and how taking action to plant native species can help reverse the trend, this episode is a call to action for anyone who cares about the future of our planet. Will humanity take action in time to save the species we depend on for our survival? Learn more about Chris: https://www.linkedin.com/in/ctcosma/ and the Conservation Biology Institute: https://www.linkedin.com/company/conservation-biology/ Check out some more of our podcast episodes: AI's Role in Energy Regulation and Compliance with Yuval Lubowich Unlocking Human Potential Using AI Memory Extension with Suman Kanuganti Building Ethical AI with Dr. Brian Green…

Your AI Injection

1
Does AI Know Better Than Doctors? Our New Healthcare Reality with Oded Cohen 45:44

30 weeks ago45:44

45:44

Can AI outshine doctors in detecting life-threatening conditions? In this episode, host Deep Dhillon chats with Oded Cohen, VP of Engineering at Viz.ai. The two discuss how AI is revolutionizing healthcare, from speeding up stroke diagnosis to identifying overlooked brain hemorrhages. Oded explains the balance between AI and human expertise, touching on how hospitals are integrating AI into their workflows without replacing doctors. They also tackle the ethical and regulatory challenges, exploring whether AI will soon dominate medical decisions or simply serve as an indispensable tool for doctors. Are we heading toward a future where AI not only supports, but challenges, traditional medical judgment? Learn more about Oded: https://www.linkedin.com/in/oded-cohen-78678a17/ And viz.ai: https://www.linkedin.com/company/viz-ai/ Check out some of our related podcast episodes: Unlocking At-Home Orthopedic Care through AI Imagery Analysis with Artem Semjanow Assistive Technologies and AI: Improving Hearing Aids Using Artificial Intelligence Unlocking Human Potential Using AI Memory Extension with Suman Kanuganti…

Your AI Injection

1
Expert Tips for AI Implementation and Data Strategy with Paul Lewis 51:50

35 weeks ago51:50

51:50

In this episode of "Your AI Injection," host Deep Dhillon chats with Paul Lewis, CTO of Pythian, to explore the frontier of AI innovation and the practical challenges that enterprises face when implementing AI at scale. The two discuss the evolving needs of businesses as they transition from basic data management to advanced AI applications, and Paul talks about how Pythian helps organizations refine their AI ideas, prioritize projects with the highest ROI, and navigate the complexities of integrating AI with existing systems. The discussion also covers the importance of grounding AI initiatives in solid data foundations, the strategic benefits of utilizing embedded AI features in commercial software, and the critical steps to ensuring that AI projects are innovative, sustainable, and scalable. Learn more about Paul here: https://www.linkedin.com/in/paullewiscto/ and Pythian here: https://www.linkedin.com/company/pythian/ Learn more about implementing AI in your business: 5 Compelling Reasons to Outsource Your AI Innovate or Die: Utilizing Generative AI to Survive and Thrive in the Modern Business World Embracing AI in Business: Navigating Misconceptions and Implementation Hurdles with Elise Oras…

Selamat datang ke Player FM

Player FM mengimbas laman-laman web bagi podcast berkualiti tinggi untuk anda nikmati sekarang. Ia merupakan aplikasi podcast terbaik dan berfungsi untuk Android, iPhone, dan web. Daftar untuk melaraskan langganan merentasi peranti.

Dengarkan lebih 500+ topik

Sama dengan Your AI Injection

TurboTax Deluxe 2024 Tax Software, Federal & State Tax Return [PC/MAC Download]

Amazon Basics Multipurpose Copy Printer Paper, 8.5 x 11 inches, 20 lb, 1 Ream, 500 Sheets, 92 Bright, White

Transformers: The Movie (Original Soundtrack) - Limited 180-Gram 'Unicron' Marbled Colored Vinyl

Podcast Berbaloi untuk Didengar

Your AI Injection « » Can Hackers Hijack Your Chatbot? How RAG Systems and Other API Endpoints Can Create Data Portals for Cyber Intruders with Keith Hoodlet of Trail of Bits

Can Hackers Hijack Your Chatbot? How RAG Systems and Other API Endpoints Can Create Data Portals for Cyber Intruders with Keith Hoodlet of Trail of Bits

Podcast Berbaloi untuk Didengar

Selamat datang ke Player FM

Ring Battery Doorbell, Head-to-Toe Video, Live View with Two-Way Talk, and Motion Detection & Alerts (2024 release), Venetian Bronze

Amazon Basics Dog and Puppy Pee Pads with Leak-Proof Quick-Dry Design for Potty Training, Standard Absorbency, Regular Size, 22 x 22 Inches, Pack of 100, Blue & White

$25 PlayStation Store Gift Card [Digital Code]

Tubi: Watch Free Movies & TV Shows

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Sama dengan Your AI Injection

Panduan Rujukan Pantas

Your AI Injection « »
Can Hackers Hijack Your Chatbot? How RAG Systems and Other API Endpoints Can Create Data Portals for Cyber Intruders with Keith Hoodlet of Trail of Bits