DEF CON 34 Notes: 15 Talks on AI Security, Agentic Systems, and Red Teaming
I spent DEF CON 34 bouncing between the talks from the AI Village, Adversary Village, and main tracks. Almost every talk I sat in on had a similar throughline: agents…
Zealot — An Autonomous Cloud Offensive Multi-Agent System
Speaker: Chen Doytshman, security researcher (AI/ML background) · Source: Unit 42 research article 📄 Download this note as Markdown Overview In November 2025, Anthropic disclosed a state-sponsored operation where AI…
X-Ray Your Agents — Pentesting MCPs, Skills, and the Plugin Supply Chain
Speakers: Xia Hua (co-founder/CEO, Traceforce), Abhijeet Kumar (OSCP, UMD CTF captain) · GitHub: mcp-xray 📄 Download this note as Markdown Overview Agents now run with thousands of third-party plugins —…
Vibe Coding Your Way to a Fully Functional Open-Source Intelligence Platform
Source: DEF CON 34 talk page · GitHub: respondent-community 📄 Download this note as Markdown Overview Most vibe-coding demos stop at TODO apps and landing pages. This 150-minute workshop went…
This Wasn’t AI Generated — Principles for Breaking Generative Watermarks
Speakers: Thomas Mason, Tahseen Rabbani · GitHub: WAVES (synthid-regen-kit) 📄 Download this note as Markdown Overview Google's SynthID watermark invisibly tags content generated by its models (Nano Banana, Gemini, etc.)…
Remote Badge Cloning with the Flipper Zero
Speakers: Langston Clement, Dan Goga · Source: DEF CON 34 talk page · GitHub: sh0cksec 📄 Download this note as Markdown Overview Traditional RFID badge cloning methods require you to…
Reconstructing Red Team Engagements — Developing Your Own Red Agent
Source: Adversary Village talk page · GitHub: Red_Agent_Workshop 📄 Download this note as Markdown Overview With recent advances in AI, LLMs are increasingly applied to red team engagements — but…
Pwning Agentic Browsers with PleaseFix — A New Vulnerability Class for 0-Click Takeover
Speaker: Stav Cohen, AI Security Research Lead at Zenity and PhD student at the Technion · Source: DEF CON 34 talk page 📄 Download this note as Markdown Overview Stav…
Overcast — Video OSINT Agent. Point It at 100 Videos, Ask Anything.
Speaker: Kevin "kdrwins" Dela Rosa (previously Snapchat, Amazon; now CTO at Cloudglue) · Source: DEF CON 34 talk page · GitHub: overcast · URL: overcast.video 📄 Download this note as…
Hacking the Human-in-the-Loop
Speakers: Lee McWhorter, Alexander "Zombie" · Source: DEF CON 34 talk page 📄 Download this note as Markdown Overview AI defenses are only as good as the analysts training them.…