NOW AVAILABLE: CONTINUOUS SECURITY TESTING SERVICES Learn More

Attacking AI: Real-World Paths to Compromise

Date:
Tuesday, November 17
Bishop Fox and FS-ISAC sponsored session “Attacking AI: Real-World Paths to Compromise” featuring Derek Rush, Managing Sr Consultant at Bishop Fox.

AI systems aren’t being hacked in traditional ways; they’re being manipulated, steered, and abused through the very interfaces designed to make them useful. In this session, a Bishop Fox cybersecurity expert walks through attack paths observed during hands-on security testing of AI-enabled systems and the models that power them in production. These aren’t speculative scenarios; they reflect how attackers move from input to impact by exploiting how AI systems interpret, connect, and act on data, revealing how small points of influence can translate into outsized risk across financial systems and sensitive data flows.

What you’ll learn:

  • How AI model behavior can be influenced beyond intended controls
  • How attacker access can persist across sessions, context, and system interactions
  • Where boundaries between AI systems and connected data or services break
    down
  • How these weaknesses translate into real business risk and where to prioritize
    controls

In financial services, these failures directly intersect with high-value systems: customer accounts, transaction workflows, and fraud controls. When AI is embedded in these processes, small points of influence can lead to unauthorized actions, data exposure, or breakdowns in controls that institutions rely on to manage risk and trust.

This session breaks down how those paths form and what it takes to prevent them, so you can better understand where your AI deployments are most exposed before attackers do.

Who should attend:

  • CISOs and security leaders responsible for AI risk, governance, and investment
    decisions
  • Risk, fraud, and data security leaders evaluating exposure in AI-driven processes
  • Security and product leaders accountable for deploying AI safely at scale
  • Architects and senior engineers responsible for designing and securing AI-enabled systems

Derek Rush BF Headshot

About the speaker, Derek Rush

Managing Senior Consultant

Derek Rush, a Managing Senior Consultant, brings vast proficiency in application penetration testing and network penetration testing, both static and dynamic, to the table. With a wealth of experience, Derek has successfully performed dynamic testing for a range of high-profile clients in the healthcare, government, and logistics sectors.

His expertise is backed by a list of impressive certifications, including Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Practical Web Application Penetration Testing (PWAPT), eLearnSecurity Web Application Penetration Tester (eWPT), and eLearnSecurity Certified Professional Penetration Tester (eCPPT).

Ready to get started? We can help.

Contact Us