2023 will be known as the year of AI was launched into an unprepared world. AI has changed the security landscape in many areas, from next-gen phishing emails to AI-powered script kiddies. In this presentation, we demo how hackers and red teamers are using AI to their advantage.
1 What is AI
We will explore how AI models are trained, including looking at the most common training set, the ‘Common Crawl Database’ and why generative AI can consume trash, yet still sound convincing in their answers. We will also dive into the different types of AI such as LLMs vs generative AI, predictive AI, and contextual AI.
2 AI in the wrong hands
We show how malicious actors can use AI tools for nefarious activities including abusing AI dependency hallucinations, data poising, and using prompt injection to get to the hidden treasures of an AI model. We also look at the concerns of open-source AI models which can be adapted to give script kiddies super powers. 
3 Using AI safely 
During this section, we will discuss some of the many ways AI can be used to help developers without destroying security
4 Conclusion
AI is neither good nor bad, but it is here to stay. By reviewing how malicious actors use AI, the risks that come with it, and the benefits it brings, this survival guide will help any developer, hacker or defending build for and with AI.