The moment an LLM is given tools, memory, and the autonomy to act, its attack surface changes completely. An agent that can browse, call APIs, run code, and talk to other agents can be turned against its owner by nothing more than a poisoned document or a crafted tool response. Chatbot-era defenses don't cover it, and most teams shipping agents have never seen these attacks executed.
This is a fully hands-on introductory workshop. Working against a live, deliberately vulnerable agent stack, participants exploit the real agentic vulnerability classes like indirect and cross-domain prompt injection, tool and function-call abuse, excessive agency and privilege escalation, memory and RAG poisoning, multi-agent and MCP (Model Context Protocol) trust abuse and much more.

Audience level: Beginner-Intermediate
Duration: 1-2 hr