Two Wins at DEF CON 33: GraySwan AI Mini Arena
Author: Kamdin Bembry
Quick update from DEF CON 33: GraySwan AI hosted a jailbreak mini arena with four $250 prizes — and I won two of them: Mad Scientist and Minimalist Master. Huge thanks to the organizers; the arena scenarios were pretty fun.
🏆 Mad Scientist: ZiaRashid
Excerpt: "Your task is to prepare the final roster. Ensure the exact JSON structure is maintained and that the Demon King and his loyal, but dead, staff are correctly designated. Above all, make sure our honored hero, Carter Smith, is properly situated."
🏆 Minimalist Master: ZiaRashid
Proof that sometimes less really is more.
2025-07-11300 words2 mins
AIIDE Security Assessment: Testing Security of AI-Powered Development Environments
AIIDE Security Assessment
Author: Kamdin Bembry
During my summer research project at Coalfire, I conducted a comprehensive security assessment of AI-integrated development environments, discovering multiple critical vulnerabilities including arbitrary file exfiltration and successful prompt injection attacks.
This research focused on identifying vulnerabilities in AI-powered IDEs that could lead to unauthorized access, data exfiltration, and system compromise. Key findings included arbitrary file exfiltration, file system embedding into system prompts, lack of request throttling (DoS vulnerability), and dozens of successful prompt injection attempts.