DEF CON 34: 10 Vulnerabilities Put Local AI at Risk

DEF CON 34: 10 Vulnerabilities Put Local AI at Risk

Local AI offers organizations greater privacy, cost control, and data ownership, but running models locally does not eliminate security risks.  Research presented in connection with DEF CON 34 identified 10 vulnerabilities in llama[.]cpp, a widely adopted inference engine underlying many local AI applications. Key takeaways Researchers identified 10 vulnerabilities in llama[.]cpp, including use-after-free, integer overflow, and out-of-bounds me…

Agentjacking at DEF CON 34: How Public Sentry DSNs Become an AI Agent Attack Vector

Tenet Security’s DEF CON 34 presentation carried a blunt title: “Your WAF Blocked Us, That Was The Exploit — Remote Agent Takeover via Cloudflare, Sentry and Claude Zero-Day for data exfil.” On Sunday at LVCC Exhibit Hall West 3, CEO Barak Sternberg, CTO Nevo Poran, and researcher Ron Bobrov walked through how a publicly exposed Sentry Data Source Name and a Model Context Protocol integration chain into remote code execution on a developer’s mac…