BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: OffGuard: Breaking the Most Popular AI Gateway from 
 Auth\n   Bypass to Cloud Compromise\n   Tags: DEF CON Official Talk | Demo
  💻 | Exploit 🪲\n   When: Saturday\, Aug 8\, 17:00 - 17:59 PDT\n   Wh
 ere: LVCCW Level 1 Hall 3 903 (Main Track 5) and DCTV-5 - [1]Map\n\n   Des
 cription:\n\n   LiteLLM is the most popular open-source AI gateway\, deplo
 yed across a\n   third of cloud environments. Organizations route all thei
 r LLM traffic\n   through it\, trusting it with API keys for every provide
 r\, every prompt\n   and response\, and connections to external tools via 
 MCP. We broke\n   every layer of its security model.\n\n   We present thre
 e independent attack vectors\, an authentication bypass\n   in the MCP lay
 er\, a root-level RCE through sandbox escape\, and an SSRF\n   path to clo
 ud credentials\, that chain from zero credentials to full\n   cloud infras
 tructure compromise. We validated every attack at internet\n   scale acros
 s thousands of real-world instances and found that nearly 1\n   in 10 acce
 pted default credentials or required no authentication at\n   all.\n\n   B
 eyond the individual findings\, we examine the broader security\n   patter
 ns emerging across AI infrastructure and what they mean for\n   organizati
 ons adopting AI gateways as core infrastructure.\n\n   SpeakerBio:  Yaara 
 Shriki\, Wiz (Google)\n\n   Yaara Shriki is a Threat Researcher at Wiz\, s
 pecializing in emerging\n   threats in cloud environments and attack surfa
 ce analysis. She\n   explores novel ways to integrate ML and NLP into secu
 rity research and\n   investigates new attack vectors in cloud and AI infr
 astructure. Yaara\n   is currently pursuing an MSc in Computer Science at 
 Tel Aviv\n   University.\n\n   '\n\n   1. #LVCCW_Level1_Hall3\n\n\n
DTEND:20260809T005900Z
DTSTART:20260809Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 903 (Main Track 5) and DCTV-5
SUMMARY:OffGuard: Breaking the Most Popular AI Gateway from Auth Bypass to 
 Cloud Compromise
END:VEVENT
END:VCALENDAR