Swar Shah
Swar Shah is a Security Consultant and Penetration Tester with over five years of specialized experience in offensive security operations. Swar holds OSCP, OSWA and CRTP certifications and has developed expertise across multiple domains including web application security, mobile platforms (Android/iOS), cloud infrastructure (AWS/Azure/GCP), Active Directory environments, and emerging technologies such as AI/LLM systems.
Proficient in custom exploit development and multiple programming languages including Python, C, Java, JavaScript, and SQL, Swar specializes in vulnerability assessments, source code reviews, and red team operations. His work spans SAST/DAST methodologies, API security testing (REST/SOAP/GraphQL), and reverse engineering of thick client applications.
With deep knowledge of industry frameworks including OWASP Top 10, MITRE ATT&CK, NIST, and ISO 27001 standards, Swar has proven experience in bug bounty triage and communicating complex security findings to both C-level executives and technical development teams. In his free time, Swar enjoys participating in CTF competitions, contributing to open-source security tools, and researching novel exploitation techniques.
Session
While everyone is discussing jailbreaks and quick injection, most people are ignoring a very serious issue. Long before they respond to their first query, large language models are degraded during training, fine-tuning, and dataset preparation. And after the damage has been done, it is almost impossible to identify. I'll demonstrate how the LLM supply chain is being targeted by attackers in this session. We're talking about poisoned datasets that bypass validation checks, backdoored models that appear entirely normal until activated, and hacked training pipelines that inject vulnerabilities at scale. These attacks are not hypothetical they are already occurring, and the majority of enterprises are unaware of their vulnerability.
I'll go into real world attack scenarios including split view data poisoning (where your model learns different things than you believe it does), front running attacks that corrupt datasets before they're published, and RAG poisoning tactics that affect retrieval systems. You'll witness firsthand explanations of how these assaults operate and why conventional security measures fail to detect them.
It's not all gloom and doom, though. Additionally, I'll discuss doable tactics for safeguarding your AI development lifecycle, such as evaluating model behaviour, screening datasets, and putting in place appropriate supply chain controls. Whether you're creating models internally or using third-party solutions, you must understand where the vulnerabilities are and how to guard against them.