Exploiting the supply chain
summary
AI accelerates classic supply‑chain and social‑engineering attacks: vendor email compromise nets ~$2.7B across ~22,000 incidents; npm/PostHog and SolarWinds show backdoored builds bypassing XDR; deepfakes (Clipchamp, 11Labs, sync.so, Pickle) enable a $25M ARUP fraud; malicious LLMs and toolkits (WormGPT, FraudGPT, Xanthox) auto‑generate phishing, ransomware and C2 code; agent attacks and cross‑prompt injection let agents exfiltrate tickets or emails; Anthropic logs an 80–90% AI‑driven campaign that compresses months of work into hours.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 2:34Supply chains are brittle
- 6:06Disruption attacks and email compromise
- 11:24Supply chain attacks bypassing trust
- 15:25SolarWinds backdoor Trojans
- 19:19AI accelerating attackers
- 23:41Deep fakes and video manipulation
- 30:08AI scams in job applications
- 34:21Malicious LLM apps and jailbreaking
- 41:08AI agents and prompt injection
- 48:12Mitigating AI threats
- 54:28Defenders must stay ahead
- 1:00:51Q&A
related talks
11mHow to Navigate Emerging AI-Driven Security
45mThe Dark Side of AI: The Hidden Supply Chain Risks in Open...
34mThe Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
40mAI As The New Hacker Frontier
55mMore Tales from the Dark Side: How AI is the Bad Guys New Friend
01h 02mInside Today’s AI-Accelerated Software Supply Chain Attacks
37mAI-Powered Slopsquatting: Is Your Software Supply Chain Compromised?
50mInsights into New Supply Chain and Cloud-Identity Attacks