GeminiJack and Agentic Security with Sasi Levi (Ep. 152) скачать в хорошем качестве

GeminiJack and Agentic Security with Sasi Levi (Ep. 152)

Episode 152: Agentic Security with Sasi Levi Episode 152: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Sasi Levi from Noma Security to talk about AI and Agentic Security. We also talk about ForcedLeak, a Google Vertex Bug, and debate if Prompt Injection is a real Vuln. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shoutout to   / realytcracker   for the awesome intro music! ====== Links ====== Follow your hosts Rhynorater, rez0 and gr3pme on X: https://x.com/Rhynorater https://x.com/rez0__ https://x.com/gr3pme ====== Ways to Support CTBBPodcast ====== Hop on the CTBB Discord at https://ctbb.show/discord! We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc. CHeck out our New Christmas Swag at https://ctbb.show/merch! Today's Sponsor: ThreatLocker. Check out ThreatLocker Elevation Control https://ctbb.show/tl-ec And Noma Security! https://noma.security/ Today’s Guest: https://x.com/sasi2103 ====== This Week in Bug Bounty ====== Vercel Platform Protection https://hackerone.com/vercel_platform... Dedicated HackerOne program for Vercel WAF https://x.com/cramforce/status/199807... YesWeHack Open Source Programs https://yeswehack.com/programs?scopeT... Android recon for Bug Bounty hunters https://www.yeswehack.com/learn-bug-b... ====== Resources ====== Sasi's Tweet from 2015 https://x.com/sasi2103/status/6083490... ForcedLeak: AI Agent risks exposed in Salesforce AgentForce https://noma.security/blog/forcedleak... Is Prompt Injection a Vulnerability? https://danielmiessler.com/blog/is-pr... ====== Timestamps ====== (00:00:00) Introduction (00:09:16) Google Vertex AI Bug (00:29:28) Sasi's Background and Bug Bounty Journey (00:38:55) Resources for AI and Agentic Security Methodology (00:50:34) ForcedLeak (01:02:06) Is Prompt Injection a Vuln?