Head of Offensive Security & Fraud Hunting at Apura
Alcyon Junior
Alcyon Junior is the Head of Offensive Security & Fraud Hunting at Apura, a speaker, writer, EXIN-accredited instructor, SecurityCast (securitycast.com.br) podcaster, and professor. He holds three degrees in Information Technology with a focus on computer networks, is a Cisco-certified specialist in Computer Networks, and has an MBA in IT Governance. Alcyon earned a Master’s degree in Knowledge Management and Information Technology with a focus on Cybersecurity from the Catholic University of Brasília, and he is currently pursuing a PhD in Electrical Engineering with an emphasis on Information Security and Communications at the University of Brasília (UnB). His international certifications include CompTIA Security+, Ethical Hacking Foundation (EHF), ISO/IEC 27002 (ISFS), ITIL® Foundation, Cisco Networking Academy (CNAP), McAfee Vulnerability Manager (MVM), and Server Professional (LPIC-1)
EMAIL:
alcyjones@gmail.comResumen de la Charla
Autonomous, LLM-powered vulnerability scanners now crawl the web at scale — and every one of them shares the same structural weakness: it reads the content you control. This talk flips the engagement. Instead of just blocking the bot, your site detects that an AI agent is scanning it, fingerprints the model behind it, and fires back a hidden, tailored prompt injection that derails, poisons, or neutralizes the attacking agent — with no traditional exploit involved. We build on recent academic work on prompt-injection “hack back,” push it into the reconnaissance-and-scanning threat model with live demos, walk through an escalating cat-and-mouse between attacker and defender, and take an honest look at where active defense crosses the legal line. Red teamers and blue teamers alike will leave with something they can responsibly test the same week.
CHARLA
Bait the Bot: Hacking Back Autonomous AI Vulnerability Scanners