#615: How is AI Changing Cybersecurity?

Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video. AI agents are changing cybersecurity. Sunil Potti joins David Bombal to discuss AI safety, open source AI, and the skills that could shape your career in 2027. How do defenders keep up when attackers use AI? Sunil explains why security systems need continuous testing and self-improvement, and why the data behind an AI agent matters as much as the model deployed in a customer environment. We also discuss his vision for bringing Cisco security and Splunk together, the role of trust as AI becomes more accessible, and why physical AI raises the stakes from stolen data to potential physical harm. Want to get into cybersecurity or AI? Hear Sunil's advice on going deep in a technical specialty or building broad knowledge across disciplines, and why he sees long-term opportunity in AI safety and security. What are you learning for 2027? Share your plans in the comments. // Sunil Potti’s SOCIAL // LinkedIn: / sunilpotti Cisco Blog: https://blogs.cisco.com/author/sunilp... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 - Intro 0:31 - Sunil Potti background 01:50 - Democratization of AI 05:21 - AI robots 07:36 - AI defenders vs AI attackers 09:38 - Worry about AI agents attacking 10:43 - Future of Cisco and Splunk 13:17 - Making Cisco products more simple 14:37 - Getting into cybersecurity in 2027 18:20 - Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #cybersecurity #aisafety #aiagents

Big thanks to Proton VPN for sponsoring this video. To get a 75% discount on Proton VPN this Black Friday month, please use the following link: https://protonvpn.com/davidbombal // Buy Hak5 coolness // Buy Hak5 stuff here: https://davidbombal.wiki/gethak5 Why does the USB Rubber Ducky look like a normal flash drive but behave like a keyboard? Darren Kitchen, founder of ‪@hak5‬, tells David Bombal how a tool for fixing printers became a famous hacking device. ‪@DarrenKitchen‬ shares the story behind the USB Rubber Ducky, from hiding early circuit boards inside actual rubber ducks to building DuckyScript and developing a security tool used for automation, awareness training, and authorized red teaming. We explore why computers accept input from USB keyboards, how keystroke injection works, and why an apparently harmless device can issue commands much faster than a person. Darren also explains Keystroke Reflection, a technique that uses keyboard indicator signals such as Caps Lock, Num Lock, and Scroll Lock to transfer small amounts of data without relying on a normal network connection, when the host and access conditions permit it. In this conversation: • Why the Rubber Ducky originally helped Darren fix printers and network shares • How a USB device can identify itself as a human interface device (HID) • What DuckyScript does and how it evolved • The security implications of high-speed keystroke injection • How Keystroke Reflection works in principle, including air-gapped scenarios • Darren's stories about the Rubber Ducky appearing in television and film Learn more about the USB Rubber Ducky: https://shop.hak5.org/products/usb-ru... Hak5's explanation of Keystroke Reflection: https://shop.hak5.org/blogs/usb-rubbe... What surprised you most: that it started as an IT shortcut, or the keyboard LED technique? Let us know in the comments. This interview discusses security research and authorized testing. Only use security tools on systems you own or are explicitly permitted to assess. // Darren Kitchen SOCIAL // YouTube: / darrenkitchen Website: https://hak5.org/pages/hack-across-am... X: https://x.com/hak5darren // Hak5 WEBSITE // https://davidbombal.wiki/gethak5 // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU// 0:00 - Intro 0:30 - Hak5 Rubber Ducky origins 01:28 - What is a Rubber Ducky? 04:07 - Proton VPN sponsor segment 06:54 - How it works + origin story 12:03 - How the Rubber Ducky was created 13:40 - DuckyScript 17:48 - A powerful tool for automation 19:02 - Keyboard vulnerability // Rubber Ducky payload 23:58 - Rubber Ducky in media // Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #USBRubberDucky #Hak5 #Cybersecurity

Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video. What happens when shooting an enemy in a Doom game deletes a real Kubernetes pod? Splunk built a Doom clone that does exactly that, then tracks the chaos in live dashboards. In this video, Heath shows me Metric Mayhem, a Doom-style game connected to a live e-commerce demo application running on Kubernetes. Enemies represent pods in the application, so playing the game creates real failures for Splunk to monitor. We also look at Trace Invaders, Splunk’s take on Space Invaders, and how Chaos Mesh adds CPU stress, memory stress, and latency to the environment. Heath explains how the team captures game events as logs and turns them into dashboards showing deleted pods, player scores, boss defeats, and finish times. In this video: How game enemies map to Kubernetes pods What happens in the demo when a pod is deleted and replaced How Chaos Mesh introduces stress and latency How Splunk Observability Cloud shows the impact on the application How game logs power Splunk dashboards and leaderboards Why an interactive game makes a monitoring demo easier to understand If you’re learning Kubernetes, chaos engineering, or observability, this is a fun way to see how failures become useful data. Would you try this in your own test lab? Let me know in the comments. // Heath Johnson SOCIAL // LinkedIn: / heathjohnsonvm // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 – Introduction 0:29 – Why Splunk Built a Video Game 01:03 – “DOOM” and Trace Invaders 01:45 – Chaos Engineering with Chaos Mesh 02:26 – Splunk Observability Cloud 03:27 – How the Game Was Created 04:24 – The Splunk Gaming Dashboard 05:18 – How Game Data Gets Into Splunk 05:41 – Gamifying Splunk 06:17 – What Data Can Splunk Ingest? 06:30 – What Does “Being Splunky” Mean? 07:12 – Gaming Chaos Meets Business Value 07:24 – Monitoring Kubernetes Metrics 07:47 – Building Custom Splunk Dashboards Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #SplunkSponsored #Kubernetes #SplunkConf

Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. // Glen Sorensen’s SOCIAL // LinkedIn: / glen-sorensen DeleteMe LinkedIn: / deleteme // Article REFERENCE // https://protonvpn.com/blog/windows-is... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 - Coming Up 0:49 - Why Privacy Matters Even If You Have Nothing to Hide 01:49 - How Much Are We Being Surveilled? 02:52 - How Companies Collect and Sell Your Personal Data 05:43 - Sponsor: Proton Drive 07:32 - Who Is Buying Your Personal Data? 08:34 - How Streaming Services and Smart TVs Track You 10:19 - Why Mobile Apps Are a Privacy Risk 11:41 - How Easy Is It to Find Someone's Personal Information? 13:11 - Doxxing, Scams and the Dangers of Exposed Data 14:32 - How Hackers Use Personal Data to Attack Companies 16:03 - How Is Mass Surveillance Legal? 17:01 - License Plate Readers and Location Tracking 18:13 - Are Smart TVs Spying on You? 19:03 - What Can I Actually Do? 21:55 - Does DeleteMe Really Work? 25:50 - Can You Ever Be Anonymous Online? 28:02 - Which Operating System Is Best for Privacy? 31:31 - How to Audit Your Apps and Permissions 33:36 - The Best Privacy-Focused Web Browsers 34:40 - Outro Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #privacy #vpn #internet

What happens when NVIDIA's AI drives a Mercedes-Benz CLA through Berlin traffic? David Bombal rides along to see how Alpamayo and the Halos safety stack work together. At GTC Berlin, I ride in a Mercedes-Benz CLA running a development version of NVIDIA's Alpamayo driving software. We encounter cyclists, pedestrians, narrow roads, unusual junctions, parked cars and unpredictable drivers while the car handles much of the driving under human supervision. We look at what is actually happening behind the scenes: an end-to-end AI model proposes a driving path, a separate classical safety stack checks the environment and rules, and a trajectory arbiter decides when to allow the plan or fall back. The car uses on-board NVIDIA DRIVE Orin computing, cameras, radar and ultrasonic sensors. We also discuss training with US and European driving data, simulation with NVIDIA Cosmos, the difference between this development vehicle and NVIDIA's downloadable Alpamayo research models, and what it takes to adapt the system to different vehicles and countries. In this video: • A live AI-assisted drive through busy Berlin streets • How Alpamayo and the classical Halos safety stack work together • Why narrow roads, cyclists and German traffic lights are difficult cases • The cameras, radar, ultrasonic sensors and DRIVE Orin hardware • How real-world data and Cosmos simulation help train and test driving models • Which Alpamayo research models you can explore yourself Important: this demonstration is a supervised Level 2 driver-assistance system. The person in the driver's seat remains attentive and responsible; this is not an unsupervised robotaxi. Would you trust AI-assisted driving in a busy city? Which situation would you want it to handle first? NVIDIA Alpamayo: https://www.nvidia.com/en-us/solution... NVIDIA Halos: https://www.nvidia.com/en-us/ai-trust... Alpamayo research downloads: https://developer.nvidia.com/drive/do... Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // TIMESTAMPS // 0:00 - Intro 0:39 - Not a normal Mercedes 01:42 - How the Alpamayo stack works 02:52 - Levels of self-driving cars 04:01 - How the cameras work 05:10 - Difference between Alpamayo and Halos 07:49 - Self-driving cars in the future 08:30 - Alpamayo vs standard LLM 10:00 - Going for a drive // Training the AI model 14:52 - Alpamayo and Halos working together 15:38 - Left side and right side driving 16:21 - Smooth driving behaviour 18:47 - Petrol (Gas) vs electric cars 19:47 - Real-world scenario driving 21:16 - Petrol (Gas) vs electric cars continued 22:56 - Unique traffic laws 25:49 - The future of Aplamayo and Halos 26:49 - Difference to other self-driving cars 28:45 - Aplamayo on Hugging Face 30:35 - Trusting self-driving cars 33:02 - Handling unusual scenarios 34:17 - Adjusting acceleration based on the vehicle 37:05 - Hardware explained 38:43 - Self-driving cars in the future pt.2 39:57 - How the model is trained 41:38 - Conclusion #NVIDIA #AutonomousDriving #Alpamayo

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Your phone can be tricked into connecting to a fake cell tower. These devices are commonly known as Stingrays, cell-site simulators or IMSI catchers. They can be used to identify and locate phones in an area, and some attacks can interfere with the security of your cellular connection. At Black Hat and DEF CON, I spoke to Cooper Quintin, Senior Staff Technologist at the Electronic Frontier Foundation (EFF), about Rayhunter. Rayhunter is an open-source project from the EFF designed to detect suspicious cellular activity using inexpensive mobile hotspot hardware. In this interview, Cooper explains how Stingrays and IMSI catchers work, why your phone can connect to a fake cell tower, what an IMSI is, how cellular downgrade attacks work, what a null cipher is, how Rayhunter detects suspicious activity, and what the EFF has learned from real-world deployments. We also get into mobile forensic extraction, phone searches at the border, biometrics vs PINs and passwords, and the bigger question of how much surveillance power governments and law enforcement should have. Thanks to ThreatLocker for sponsoring my trip to Black Hat and DEF CON and for sponsoring this video. #CyberSecurity #Privacy #Hacking // Cooper Quintin’s SOCIAL // EFF Website: https://www.eff.org/about/staff/coope... LinkedIn: / cooper-quintin-932029125 Website: https://cooperq.com/ // Web Page REFERENCE // https://www.eff.org/deeplinks/2025/03... https://www.eff.org/ https://ssd.eff.org/ // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 - Intro 0:52 - Cooper Quintin introduction 01:18 - Rayhunter tool by EFF 02:45 - Stingrays used by law enforcement 05:05 - How the Rayhunter works 08:44 - Threatlocker sponsor segment 09:59 - Rayhunter results 12:06 - Concerns of Stingrays 14:02 - Why should people care 15:17 - Concerns of mobile forensic extraction tools 17:17 - Password vs biometric 18:04 - Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #cybersecurity #bhusa26 #privacy

Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video. // Kamal Hathi’s’ SOCIAL // LinkedIn: / kamal-hathi // Hanlin Fang’s SOCIAL // LinkedIn: / hanlinfang // Jessica Oppenheimer’s SOCIAL // LinkedIn: / jessbair // Craig Woolley’s SOCIAL // LinkedIn: / craig-woolley-783059111 // Tom Smit’s SOCIAL // LinkedIn: / tsmit50 // Bruce Snell’s SOCIAL // LinkedIn: / brucesnell-security // Heath Johnson’s SOCIAL // LinkedIn: / heathjohnsonvm // Paul Bannister’s SOCIAL // LinkedIn: / paul-bannister // Hao Yang’s SOCIAL // LinkedIn: / hao-yang-bb6ab429 // Robert Castley’s SOCIAL // LinkedIn: / robertcastley // Leila Reyhani’s SOCIAL // LinkedIn: / leila-reyhani // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 - How to stay in control in the world of AI 00:38 - Visualizing data with Splunk 02:24 - Born observable // Observability for AI 04:36 - Cisco Data Fabric 06:43 - Hunt and investigation // Security threats 08:10 - Data foundation 09:08 - The cost of AI and the ROIs 09:41 - Red vs blue team with AI 11:46 - Visualizing AI security 13:00 - Targeted autonomy 14:02 - .conf26 summary 15:26 - Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #splunk #cybersecurity #ai

Want to learn how to reverse engineer malware? Lindsay Kaye joins me to demonstrate malware analysis using Ghidra and x64dbg, two free tools you can use to develop your skills. Lindsay is the author of Dissecting the Dark Web. In this interview, we take apart a data theft tool used by LockBit affiliates and examine BlackMatter ransomware. You’ll see how malware detects a debugger, hides strings, and loads functions at runtime. We also run ransomware in a lab VM to show what happens to the victim’s files. We discuss: • How ransomware gangs steal data before encrypting it • How static and dynamic analysis work together • Finding malware indicators in Sysmon logs • Why ransomware can print physical ransom notes • How reputation and trust work in criminal forums • How to start reverse engineering by compiling your own C programs and examining them in Ghidra If you have some programming knowledge and want to understand how malware works, this is a practical look at the skills involved. // Sponsored SEGMENT // Big thank you to Proton Pass for sponsoring this video. To sign up for Proton Pass, please use the following link https://proton.me/davidbombal to get Proton Pass free. // Link to No Starch Website for Lindsay Kaye’s Book // Order Dissecting the Dark Web on No Starch: https://nostarch.com/dissecting-the-d... Use Coupon Code KAYE25 for 25% off Dissecting the Dark Web at NoStarch.com // Lindsay Kaye’s SOCIALS // Website: https://www.lindsaymkaye.com/ LinkedIn: / lindsaymkaye Human Security Website: https://www.humansecurity.com/people/... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00- Coming Up 0:40 - Intro (Lindsey's Book) 02:49 - Lindsey's Background 03:30 - Proton Ad 05:44 - Interesting Book Topics 07:18 - Demo Starts 10:57 - How To Follow Along With The Book 14:12 - x64 Debuggng 20:21 - Writing Rules With Stealbit 23:27 - Analysing Ransomware 28:10 - Building Your Ransomware 31:05 - Reputations On The Dark Web 32:52 - Analysing Dark Web Malware 37:30 - Running The Ransomware 41:00 – Questions to Lindsay 42:17 – How to Connect with Lindsay 42:39 – Final thoughts Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #defcon #reverseengineering #darkweb

Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off. How private are the apps you use every day? I sit down with Thorin Klosowski from the Electronic Frontier Foundation (EFF) to discuss online privacy, secure messaging, VPNs and the data we share with AI tools. We look at Signal, WhatsApp and Telegram, discuss privacy tradeoffs across Windows, Linux, Android and iPhone, and ask what you should assume about email and cloud storage. Thorin also walks through EFF’s free Surveillance Self-Defense guides to help you create a security plan and decide what to focus on first. If you work in cybersecurity, or you simply want to help your family protect their privacy, this conversation gives you a starting point without assuming everyone needs the same tools. In this interview: Why “I have nothing to hide” misses the point How to think about passwords, two-factor authentication and security planning Why messaging defaults and privacy settings matter What a VPN can and cannot do for your privacy AI features, cloud storage and questions to ask about your data Phone and computer privacy tradeoffs, email and encryption Which privacy setting or app are you going to review first? Let me know in the comments, and subscribe for more cybersecurity and privacy conversations. // Thorin Klosowski’s SOCIALS // Website: https://www.eff.org/about/staff/thori... EFF LinkedIn: https://www.linkedin.com/company/eff?... // Web page REFERENCE // https://ssd.eff.org/ // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 - Coming Up 0:40 – Intro & about the EFF 02:50 – DeleteMe Sponsored Section 05:08 – Surveillance & Self-Defence Tools 08:41 – Tool Guides, AI Privacy & Cloud Storage 13:29 – Messaging Apps to use 16:27 – Operating Systems to use 21:16 – How Secure is Email & Encryption 23:22 – Security Tips for Activists & Protestors 26:53 – Closing & Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #Privacy #CyberSecurity #EFF

Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. // Free AI labs // Prompt Injection Taxonomy: https://arcanum-sec.github.io/arc_pi_... AI Security Resource Hub: https://arcanum-sec.github.io/ai-sec-... // Jason Haddix’s SOCIALS // X: https://x.com/Jhaddix?lang=en Github: https://github.com/Arcanum-Sec Website: https://arcanum-sec.com/ // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] // MENU // 0:00 -Coming Up 0:48 - Jason Haddix at DEF CON 01:36 - Sponsor – Proton Drive 03:31 - AI Chatbot Penetration Testing 04:11 - The Prompt Injection Taxonomy 06:19 - Bypassing AI Guardrails & Classifiers 07:15 - DEF CON AI Hacking CTF 08:31 - Why AI Security Testing Is Different 10:18 - Instagram AI Account Takeover Demo 14:39 - AI Meeting Transcript Prompt Injection Demo 17:28 - How to Start Learning AI Security 18:18 - Final Thoughts Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #ai #aihacking #promptinjection