World Congress 2025 Aug 20, 2025 Session details

Prompt Injection, Poisoning & More: The Dark Side of LLMs

Keno Dreßel

Treat your LLMs like untrusted users instead of reliable microservices. Discover how to protect your AI pipelines from hidden prompt injections, poisoned data, and catastrophic leaks.

Pause
Mute Enter Fullscreen
#1 about 3 min

Demonstrating a vulnerable AI sales agent application

Setting up a basic language model sales agent to observe how system prompts fail against adversarial users.

#2 about 3 min

Differences between direct and indirect prompt injections

How attackers manipulate model outputs using explicit text inputs or hidden instructions within multimedia formats.

#3 about 3 min

Mitigating prompt injections using guardrails and filters

Applying human oversight, capability restrictions, and output filtering mechanisms to control malicious prompt instructions.

#4 about 3 min

Understanding data poisoning and model bias risks

The security threats of relying on compromised training data that can introduce bias or manipulate model logic.

#5 about 4 min

Protecting applications against poisoned training supply chains

Validating external models, screening fine-tuning datasets, and applying continuous updates to limit supply chain vulnerabilities.

#6 about 4 min

The danger of executing malicious AI code outputs

How processing unsanitized model responses directly within backend systems enables exploits like unauthorized database queries.

#7 about 3 min

Treating AI responses as untrusted user data inputs

Protecting core infrastructure by isolating execution environments and enforcing classical application security checks on intelligent agents.

#8 about 3 min

Accidental sensitive information disclosure in public models

Exposing proprietary corporate assets directly to public conversational models risks resurfacing sensitive information in future inferences.

#9 about 2 min

Securing organizational data against artificial intelligence leaks

Obfuscating personally identifiable data and establishing strict data retention policies prior to platform integration prevents unauthorized extraction.

Matching moments

3:00 min

Top security vulnerabilities for AI applications

Deepu Deepu · WWC 2025

2:31 min

Emerging risks and attack vectors in AI systems

Matteo Meucci Matteo Meucci · Europe 2026 Virtual

3:18 min

Core AI security risks and data poisoning

Liran Tal Liran Tal · LIVE

1:20 min

Utilizing industry threat models for AI security

Balázs Kiss · WWC 2023

8:04 min

Understanding AI chatbot vulnerabilities and stateful attacks

Sebastian Messingfeld Sebastian Messingfeld · WWC Europe 2026

2:47 min

Leveraging older LLMs defensively for vulnerability hunting

Adrian Mouat Adrian Mouat · WWC Europe 2026

Upcoming sessions on this topic

Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

Red Teaming Your LLM App -- A Hands-On Threat Model You Can Reuse

Saloni Garg

Senior ML Engineer at Adobe

Saloni Garg
Open session

World Congress 2026 North America

No Single Model to Rule Them All: Building Resilient AI Agents Across Open & Closed LLMs

Emmanuel Acheampong

Senior Manager Developer Relations at Crusoe AI

Emmanuel Acheampong
Open session

World Congress 2026 North America

Developer Liability in the AI Agent Era: Building Responsibly

Alla Barbalat

Freelancer Trade Show Spokesmodel and Tech Event Host

Alla Barbalat
Open session

World Congress 2026 North America

You Can’t Re-Run Sunlight: Designing ML Data Architectures for Physical AI

An Phan

Senior Data Infrastructure Engineer @ Hippo Harvest

An Phan