2023
Capitella's team began penetration testing LLM applications in 2023 and initially did much of it manually.
“when, uh, we started doing pen testing of LLM applications in, uh, 2023, we were doing a lot of stuff manually”
Topic
Reversec
5 facts from 1 episode, in date order. These are what speakers said on the shows, each linked to the moment it was said. They aren't independently verified.
2025
A Reversec consultant in the US, named as William Taylor, found a customer-support RAG system in which attacker-written emails could be retrieved into other users' contexts.
“One of our consultants in the US. was doing a test a couple of weeks ago.”
Undated
Capitella says his company's generative AI security work pipeline has tripled in size since the previous conversation.
“I think our pipeline is tripled in size, uh, and we've been doing a lot of research.”
Undated
A Reversec colleague wrote a Spikee module using a headless browser, Playwright, to test a chatbot that used web sockets.
“he wrote a Spikee module that's got a play right, so the Spikee module used a headless browser to open the chatbot, send the prompt and read the response.”
Undated
Capitella's team developed an anti-spotlighting attack that tries to break the spotlighting defence by introducing tags so the LLM cannot tell where data begins and ends.
“the anti spot lighting attack, which is another attack that we developed, where you try to break spot lighting by introducing, uh, tags and strange stuff.”
Episodes