Michael Bargury

Security research, hacking, AppSec, primarily focused on AI agents.

less than 1 minute read

Assorted links for OWASP Global AppSec DC 2023:

  1. OWASP No-Code / Low-Code Top 10
  2. powerpwn

Other talks (slides and source code)

  1. All You Need is Guest @ BlackHat USA 2023
  2. Sure, Let Business Users Build Their Own. What Could Go Wrong? @ BlackHAt USA 2023
  3. Low Code High Risk: Enterprise Domination via Low Code Abuse @ DEFCON30
  4. No-Code Malware: Windows 11 At Your Service @ DEFCON30

Updated:

You May Also Enjoy

AIjacking Goes Beyond Prompt Injection

3 minute read

Naming is powerful. An excellent name does more than frame the problem, it hints at ownership, solutions, and urgency to address it. In a very real sense, t...

Safe Web Browsing for Copilots

1 minute read

Allowing a copilot to search the web at will is extremely dangerous. Here are two somewhat-understood vulnerabilities and how to mitigate them. Note: this is...