Joohoi & STÖK
This fast-paced talk focuses on practical exploitation and real-world attack chains in AI-powered web apps. You will learn how attackers build rapport with LLMs, manipulate behavior, and bypass restrictions.
We will demonstrate how seemingly benign vulnerabilities can be chained together to steal and exfiltrate sensitive data through indirect prompt injections, malicious rendering techniques, and abusive tool calls.
Finally, we will break down the reality of AI risk and show exactly how to build the guardrails you need to stop these attacks.
joohoi
joohoi is a seasoned hacker with over two decades of experience bridging the gap between software development and information security. He is highly regarded for his significant contributions to the open-source community, most notably for his work on essential industry tools like ffuf, acme-dns, and certbot. By day, he leads the charge in securing hundreds of global applications as the Head of Security Testing at Visma.
STÖK
STÖK operates at the crossroads of cybersecurity & creativity. With Swedish roots, STÖK has carved out a distinctive niche as a creative, hacker, keynote speaker and cybersecurity professional. His curiosity and dedication to sharing what he learned shines through his robust online community. His creative presentation style and hacker insights have graced the main stages of globally recognized cybersecurity events such as Black Hat USA, DEF CON, Securityfest, SEC-T, Disobey, and EKO PARTY, further establishing his influence in the community.
Diving into cybersecurity in the early ’90s, STÖK has pioneered a holistic approach, harmonizing defensive strategies with an aggressive hacker’s mindset. However, his expertise extends beyond the digital frontier, incorporating a keen understanding of human psychology, marketing, fashion, and effective communication, reflecting his multifaceted interests and talents.
STÖK embodies a lifestyle where technology meets creativity, adopting a positive, forward-thinking stance on security and life. His ethos, captured in the empowering slogans “HACKERS GONNA HACK. CREATORS GONNA CREATE. GOOD VIBES ONLY,” strikes a chord with his audience, injecting a vibrant, optimistic outlook into the complex cybersecurity landscape.