Monday
Where
Ground Truth
BSides Las Vegas
Duration
8 hr 46 min
Collects several Ground Truth talks on AI-driven scams, vulnerability prioritization, prompt security and agent hacking.
Summary
This recording of the Ground Truth track's Monday block strings together several separate talks rather than one presentation. It opens with voice phishing: a large survey experiment compares AI voice models with human scam callers. The findings suggest that message content matters more than how human a voice sounds, and that some automated calls already look profitable, though they cost more per minute than email.
The middle sessions cover trust-based scams, where a system uses AI personas to engage inbound scammers and map conversation stages before a payment request. Another talk examines exploitation timing and the EPSS scoring model, arguing that prioritizing by probability works better than severity scores. A further session presents a BERT-based classifier that separates harmful goals from the framing used to disguise them.
The final talks address a vulnerability pipeline that silently drops findings when joins fail, and a study of AI agents attempting CTF challenges. The first shows how left joins, fallback matching and evidence packets keep unowned assets visible. The second finds that agents often succeed through pattern matching, and that open-weight models trail closed ones by less than expected at far lower cost.
Related talks
Ground Truth·51 min
RAG Against the Machine: Using Retrieval-Augmented Generation & MCP to Fortify Cybersecurity Defense
Brennan Lodge
Shows how retrieval-augmented generation and MCP can feed threat intel and logs into LLMs for SOC triage and compliance mapping.
Ground Truth·35 min
Suha Sabi Hussain
Shows how input-handling bugs in ML model file parsers can be chained into backdoors that carry through into deployed pipelines.
Ground Truth·42 min
Emanuel Valente
Shows how black-box adversarial attacks evade machine-learning models that detect DNS-over-HTTPS tunnels.


