8en N@$$!

🎓 Faculty, ECE @TelAvivUni |
🎩 @BlackHatEvents Review Board |
Cybersecurity | LLM & AI AppSec

[8en N@$$! @ben_nassi]

🚀 Registration is now OPEN for the Real World AI Security Conference 2026 (June 23-25)! 🚀

Join us at @Stanford for a unique event bringing together leading researchers and industry practitioners to explore the most pressing challenges in AI security—from cutting-edge attacks to real-world defenses.

🎤 Keynote Speakers:
Matthew Knight (former CISO of OpenAI)
@NicolasPapernot (@Uoft)
@wunderwuzzi23 (https://t.co/G3sMz5UQVl)
Alina Oprea (Northeastern University)

🧠 Invited Talks Include:
• Edoardo Debenedetti (@aisequrity & @ETH ) - Evaluating and Defending Against Prompt Injection Attacks
• Jerry Wei (@AnthropicAI ) - Deployable Defenses for Safeguarding Language Models from Jailbreaks
• Neha Sharma & Nicolas Lidzborski (@Google Workspace) - Fortifying the AI-Integrated Workspace: A Multi-Layered, Adaptive Architecture Against Indirect Prompt Injection
• John Sotiropoulos (@owasp ) - The OWASP Top 10 for Agentic AI: Real-World Failure Modes and Enforceable Defenses
• Milad Nasr (@AnthropicAI ) - The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against LLM Jailbreaks and Prompt Injections
• Kaiyuan Zhang (Purdue University) - BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents
• Neil Perry (@Princeton) - Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing
• Andy Zhang (Berkeley & @Stanford) - Building and Benchmarking Cybersecurity Agents
• Yisroel Mirsky (@bengurionu ) - GAVEL: Rule-Based Security over LLM Activations
• Giles Edkins & Joe Needham (MATS Research) - LLMs Often Know When They’re Being Evaluated
• Illia Polosukhin (https://t.co/cn4svllq8B) - Building Secure Personal Agents
• Kristopher R. (Hood College) - Trojans in Artificial Intelligence: Lessons Learned
• @ben_nassi , PhD (@TelAvivUni ) - The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism

We will soon publish the remaining talks and the final agenda.
Don’t miss the opportunity to engage with the people shaping the future of AI s urity.

🔗 Register for the conference:
https://t.co/fsZHUcCaNk
Please share with your network...

#RW_AISec #AISecurity #CyberSecurity #infosec #AI #SecurityResearch #LLMSecurity #AgenticAI #PromptInjection #Conference

[8en N@$$! @ben_nassi]

@TalBeerySec @sapirxfed @fwdcloudsec @WEareTROOPERS :-)

[8en N@$$! @ben_nassi]

@TalBeerySec עד היום לא הבנתי מה היתרון בזיגבי עבור אמצעים שמחוברים לחשמל 24/7 בבית בגודל סביר

יתר על כן, מרבית האמצעים הללו נועדו להתחבר לאינטרנט כדי לאפשר הפעלה מרחוק (לדוגמא דוד שמש), אז למה ללכת על זיגבי לכתחילה?

[8en N@$$! @ben_nassi]

@CoopSport מתברר שאפילו אנג׳לוטי לא מסוגל לקחת החלטה מקצועית ישרה

[Ramin Nasibov @RaminNasibov]

are you this old?

[Tal Be'ery @TalBeerySec]

אני יודע שזה לא פייר שגם מלחמה וגם אי אפשר לשלוח תמונות חד פעמיות ב וואטסאפ, אבל לא יכולתי להתאפק 🤷
https://t.co/I34i46TPWz

[8en N@$$! @ben_nassi]

@TalBeerySec כל הכבוד!

[8en N@$$! @ben_nassi]

🚨 Registration is now open! 🚨
We are excited to announce that registration is officially open for the Real World AI Security Conference 2026.

📅 June 23–25, 2026
📍 Arrillaga Alumni Center, Stanford University
If you work on AI security, adversarial ML, LLM safety, AI system attacks, or defenses, this event is designed for you.

👉 Register here (we have a limitation on the number of attendees):
https://t.co/fsZHUcCaNk

We look forward to bringing together the community to explore the latest advances in AI security in the real world.

#AISecurity #CyberSecurity #MachineLearningSecurity #LLMSecurity #AdversarialML #AIResearch #AIConference #SecurityResearch #RealWorldAISecurity

[דובר צה״ל אפי דפרין - Effie Defrin @IDFSpokesperson]

לא נשכח את השבעה באוקטובר, ונמשיך לרדוף אחרי אויבי ישראל - מאדריכלי המתקפה, ועד המחבלים שלקחו חלק בטבח.

[8en N@$$! @ben_nassi]

This happens today!

[Black Hat @BlackHatEvents]

Black Hat Webcast 🚨 The Promptware Kill Chain: From Prompt Injection to Multi‑Step LLM Malware 🗓 Feb 26, 2026 • 2–3 PM ET. Join Ben Nassi as he breaks down how prompt‑injection attacks have evolved into a powerful five‑stage LLM malware kill chain. Don’t miss this fast, insights‑packed session today. Register 👉 https://t.co/h6KiNYSApd

[Black Hat @BlackHatEvents]

Black Hat Webcast 🚨 The Promptware Kill Chain: From Prompt Injection to Multi‑Step LLM Malware 🗓 Feb 26, 2026 • 2–3 PM ET. Join Ben Nassi as he breaks down how prompt‑injection attacks have evolved into a powerful five‑stage LLM malware kill chain. Don’t miss this fast, insights‑packed session today. Register 👉 https://t.co/h6KiNYSApd

[8en N@$$! @ben_nassi]

On 𝗧𝗵𝘂𝗿𝘀𝗱𝗮𝘆, 𝗙𝗲𝗯𝗿𝘂𝗮𝗿𝘆 𝟮𝟲𝘁𝗵, 𝗮𝘁 𝟭𝟰:𝟬𝟬 𝗘𝗮𝘀𝘁𝗲𝗿𝗻 𝗧𝗶𝗺𝗲, I will present a @BlackHatEvents 𝘄𝗲𝗯𝗶𝗻𝗮𝗿 titled “𝗧𝗵𝗲 𝗣𝗿𝗼𝗺𝗽𝘁𝘄𝗮𝗿𝗲 𝗞𝗶𝗹𝗹 𝗖𝗵𝗮𝗶𝗻: From Prompt Injection to Multi-Step LLM Malware.” The talk is based on joint work with Oleg Brodt, Elad Feldman, and Bruce Schneier.

Registration link: https://t.co/AKlkaz4kgU

#blackhat #infosec #webinar #prompt_injection #promptware

[8en N@$$! @ben_nassi]

On 𝗧𝗵𝘂𝗿𝘀𝗱𝗮𝘆, 𝗙𝗲𝗯𝗿𝘂𝗮𝗿𝘆 𝟮𝟲𝘁𝗵, 𝗮𝘁 𝟭𝟰:𝟬𝟬 𝗘𝗮𝘀𝘁𝗲𝗿𝗻 𝗧𝗶𝗺𝗲, I will present a 𝘄𝗲𝗯𝗶𝗻𝗮𝗿 titled “𝗧𝗵𝗲 𝗣𝗿𝗼𝗺𝗽𝘁𝘄𝗮𝗿𝗲 𝗞𝗶𝗹𝗹 𝗖𝗵𝗮𝗶𝗻: From Prompt Injection to Multi-Step LLM Malware.” The talk is based on joint work with Oleg Brodt, Elad Feldman, and Bruce Schneier.

Registration link:
https://t.co/AKlkaz4kgU

𝗔𝗯𝘀𝘁𝗿𝗮𝗰𝘁:
The Promptware Kill Chain: From Prompt Injection to Multi-Step LLM Malware, explores the evolution of prompt injection attacks into a sophisticated seven-stage kill chain: initial access, privilege escalation, reconnaissance, persistence, command & control, lateral movement, and actions on objectives. It introduces the concept of Promptware and provides an in-depth analysis of each stage, highlighting advancements in the field over the last three years.

#blackhat #infosec #webinar #prompt_injection #promptware

[8en N@$$! @ben_nassi]

While not the first demonstration, this is one of a few known incidents that targeted a system's long-term memory for 𝗽𝗲𝗿𝘀𝗶𝘀𝘁𝗲𝗻𝗰𝗲 using prompt injection, turning systems into trojans to affect recommendations.

https://t.co/6FCXxa94r5

#promptware #trojans #persistence #infsec #LLM #persistence

[8en N@$$! @ben_nassi]

@wunderwuzzi23 Well deserved, Johann!

[Schneier Blog @schneierblog]

The Promptware Kill Chain https://t.co/WgS0xw2lSD

[vx-underground @vxunderground]

Academics nerds published a research paper a few days about LLM malware and their argument for a new classification of malware dubbed "Promptware".

X fucks up links a lot, they don't display properly, so the link to their academic paper will be in the post subsequent to this one.

As is tradition, their academic paper is just a bunch of goobers being all philosophical about shit and including a bunch of fancy pictures and graphs.

I unironically sat here and read most of this paper.

Is there argument valid?

Yes, but some of the examples provided are theoretical and have not existed in-the-wild (yet?). They do however provide real-life examples of LLM payloads which have been successful. I personally have not seen these techniques described, but they provided citations and they are indeed real.

I do malware stuff everyday (collecting, reverse engineering, development) and I have not seen any of the papers they reference. This paper has demonstrated, unironically, there is a gap right now between LLM research and malware research. In essence, we are at the point now where LLM research is now bleeding into malware research and malware nerds may have to pay more attention.

I am now a believer. LLM malware is indeed real and will become a thing. I give these academic nerds two (2) cat pictures for this interesting paper. This is the first academic paper I've read in awhile that I actually think isn't complete dog shit.

My main criticism however is they kind of butcher some malware terminology. For example, they incorrectly refer to some of this LLM malware stuff as Polymorphic, but this is not polymorphic ... unless we get really, really, really flexible with definition of polymorphic malware and we make it more akin to high-level class inheritance polymorphism. It doesn't really matter that much though because I understand what they're trying to convey.

[Lawfare @lawfare]

Attacks on LLM-based systems have evolved into a distinct class of malware execution mechanisms. Bruce Schneier, @BrodtOleg, Elad Feldman, and @ben_nassi propose a “promptware kill chain” to provide policymakers with a framework to address the escalating AI threat landscape.

[8en N@$$! @ben_nassi]

@vxunderground https://t.co/kvLcEHT8KT

[8en N@$$! @ben_nassi]

@Lyutoon_ Thanks!

[8en N@$$! @ben_nassi]

🚀 𝗧𝗵𝗲 𝗥𝗲𝗮𝗹 𝗪𝗼𝗿𝗹𝗱 𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝟮𝟬𝟮𝟲 🚀

We are excited to announce the first 3 day 𝗥𝗲𝗮𝗹 𝗪𝗼𝗿𝗹𝗱 𝗔𝗜 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲, taking place on 𝗝𝘂𝗻𝗲 𝟮𝟯–𝟮𝟱, 𝟮𝟬𝟮𝟲, at 𝗦𝘁𝗮𝗻𝗳𝗼𝗿𝗱 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆. The conference is intended to brief the most impactful AI security work presented over the past year at 𝗹𝗲𝗮𝗱𝗶𝗻𝗴 𝗶𝗻𝗱𝘂𝘀𝘁𝗿𝘆 𝗰𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲𝘀 (Black Hat, DEF CON, RSAC, CCC) and 𝘁𝗼𝗽 𝗮𝗰𝗮𝗱𝗲𝗺𝗶𝗰 𝘃𝗲𝗻𝘂𝗲𝘀 (CCS, IEEE S&P, USENIX Security, NDSS).

𝗧𝗵𝗶𝘀 𝗶𝘀 𝗮 𝗻𝗼𝗻-𝗽𝗿𝗼𝗳𝗶𝘁, 𝗰𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝘆-𝗱𝗿𝗶𝘃𝗲𝗻 𝗰𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲 focused exclusively on technical AI security talks with real-world impact on deployed AI systems.
The goal is to curate a concise agenda that distills the most important advances in AI security from the past year, while bringing together 𝗶𝗻𝗱𝘂𝘀𝘁𝗿𝘆 𝗽𝗿𝗮𝗰𝘁𝗶𝘁𝗶𝗼𝗻𝗲𝗿𝘀 𝗮𝗻𝗱 𝗮𝗰𝗮𝗱𝗲𝗺𝗶𝗰 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵𝗲𝗿𝘀 to establish new connections, collaborations, and future research directions.

We will share additional details soon.
Here is the link to the website of the conference: https://t.co/fsZHUcCaNk

#security #ai #llm #ai_security #cybersecurity #infosec