AppSec Village·30 min
Simcha Kosman
Shows how a ChatGPT code sandbox was chained into a command-and-control channel using spreadsheet parsing abuse, reasoning injection, and covert signaling over a shared package proxy.
aiattackexploiting+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34DEF CON 34/AppSec Village across years
Las Vegas Convention Center · 6–9 August 2026 · 1 talks
AppSec Village talks from DEF CON 34.
1–1 of 1 talk
AppSec Village·30 min
Simcha Kosman
Shows how a ChatGPT code sandbox was chained into a command-and-control channel using spreadsheet parsing abuse, reasoning injection, and covert signaling over a shared package proxy.