AI Red Teaming Comes to Bug Bounties - Francis Dinha, Michiel Prins - ESW #391

Enterprise Security Weekly (Audio)

HackerOne's co-founder, Michiel Prins walks us through the latest new offensive security service: AI red teaming.

At the same time enterprises are globally trying to figure out how to QA and red team generative AI models like LLMs, early adopters are challenged to scale these tests. Crowdsourced bug bounty platforms are a natural place to turn for assistance with scaling this work, though, as we'll discuss on this episode, it is unlike anything bug hunters have ever tackled before.

Segment Resources:

• https://www.hackerone.com/ai/snap-ai-red-teaming
• https://www.hackerone.com/thought-leadership/ai-safety-red-teaming

This interview is a bit different from our norm. We talk to the founder and CEO of OpenVPN about what it is like to operate a business based on open source, particularly through trying times like the recent pandemic. How do you compete when your competitors are free to build products using your software and IP? It seems like an oxymoron, but an open source-based business actually has some significant advantages over the closed source commercial approach.

In this week's enterprise security news,

1. the first cybersecurity IPO in 3.5 years!
2. new companies
3. new tools
4. the fate of CISA and the cyber safety review board
5. things we learned about AI in 2024
6. is the humanless SOC possible?
7. NGFWs have some surprising vulnerabilities
8. what did generative music sound like in 1996?

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-391