BSides Munich 2026

Yuen Ying Ng

Yuen Ying Ng (Ruth) is a Hong Kong–based incident responder and independent researcher specializing in campaign detection, digital forensics, security research, vulnerability research, threat hunting, and threat actor analysis.

Previous Speaking Experience:
2026: JSAC2026 - Unmasking Houken: Advanced TTPs and Detection (Lightning Talk) (Ref: https://jsac.jpcert.or.jp/timetable.html)
2025: Threat Analyst Summit 2025 (TAS'25) – Pump-and-Dump” Scheme Targeting the Securities Brokerage Industry (Ref: https://tas.teamt5.org/agenda2025/)
2024: Threat Analyst Summit 2024 (TAS'24) – Ransomware's Uneven Playing Field : Re-Thinking Protection and Detection from Small Enterprises (Ref: https://tas.teamt5.org/agenda2024/)


Session

11-09
12:00
30min
Who Does the AI Actually Cite? Auditing and Poisoning Zero-Click Search.
Yuen Ying Ng

Ask ChatGPT or Google's AI for "the best incident-response firm" and a handful of sources get cited as trusted - everyone else disappears. Who picks them, and can it be gamed? We measured it across four production answer engines, and the results overturn most of what the GEO/SEO industry sells you: there's no single "AI SEO," and the levers everyone tells you to pull barely move the answer.

Then, in a sandbox, we poison that trust surface - the same trick that could smuggle malware or phishing into an answer a user already trusts.

Talks
Westin - Munich