In 21st installment of Better AI Meetup we will discuss the practical risks posed by ever-present AI agents in cyberspace. How to detect malicious AI agents or attempts at identity fraud fuelled by AI? The researchers from ESET AI Security Labs and biometric specialist Innovatrics will give you real-life examples of the current cyber-threat landscape.

Filip Mazán from ESET will talk about how AI-assisted development, automated vulnerability research, and autonomous agents are changing the attack surface, while separating demonstrated threats from headline hype. Through incident examples and ESET’s analysis of malicious agent skills and software packages, he will explore how prompt injection, excessive permissions, and compromised dependencies can turn useful automation into a security liability. He will then discuss defensive approaches across the AI stack, including inspecting agent behavior, protecting sensitive data in AI conversations, and improving visibility into organizational AI use.

Filip Štiglic from Innovatrics will then talk about injection attack detection. Remote identity verification lets people open accounts and access services without appearing in person. By replacing live camera input with a deepfake or a genuine recording, attackers may impersonate someone else to open fraudulent accounts or gain unauthorized access. Drawing on Innovatrics’ approach, Filip will show how physical capture signals, unpredictable challenges chosen by the server, and server-side validation support the assurance of genuine identity. The approach always assumes that the client device may be compromised. The talk will also examine independent certification and continuous adversarial testing as attacks evolve.

_Supported by

_Speakers

filip-mazan

Filip Mazán

Director of AI Security Labs at ESET

Filip Mazán is Director of AI Security Labs at ESET , where he leads research and engineering teams applying artificial intelligence to cybersecurity, with a focus on automated threat detection, threat hunting, and LLM-powered security workflows. Since joining ESET in 2013 as a malware analyst, he has worked across malware research, software engineering, and AI, helping bring deep learning, generative AI, and agentic systems into real-world security operations. He has contributed to the analysis and disruption of major botnets including Dorkbot and Gamarue and has presented his work at international cybersecurity events such as RSA Conference and ESET World.

Talk: AI Agents and the Expanding Attack Surface

As AI moves beyond generating text to writing software and acting on our behalf, it introduces security risks that extend well beyond the model itself. This talk examines how AI-assisted development, automated vulnerability research, and autonomous agents are changing the attack surface, while separating demonstrated threats from headline hype. Through incident examples and ESET’s analysis of malicious agent skills and software packages, we explore how prompt injection, excessive permissions, and compromised dependencies can turn useful automation into a security liability. We then discuss defensive approaches across the AI stack, including inspecting agent behavior, protecting sensitive data in AI conversations, and improving visibility into organizational AI use.

filip-stiglic

Filip Štiglic

Enterprise Architect in Platform Engineering at Innovatrics

Filip Štiglic leads the Injection Attack Prevention team at Innovatrics, focusing on the security of remote identity verification. His responsibilities include security improvements and securing CEN/TS 18099 Level 3 (High) certification for the company’s injection attack detection components. Earlier roles at Innovatrics as an enterprise architect and innovations team lead involved security architecture and contactless fingerprint technology. His broader experience spans cloud architecture, security, and building highly available, scalable systems. Alongside this work, he helped establish and promote AI use within Innovatrics and continues to explore new tools and share practical knowledge.

Talk: Injection Attack Detection – Protecting Online Identity from fraud

Remote identity verification lets people open accounts and access services without appearing in person. By replacing live camera input with a deepfake or a genuine recording, attackers may impersonate someone else to open fraudulent accounts or gain unauthorized access. These attacks can be automated at scale. A genuine recording contains no synthetic artefacts for deepfake detection to find.
Injection attack detection (IAD) protects the capture process by providing assurance that submitted images were captured by the specific device’s physical camera at the claimed capture time. This talk explains how IAD complements deepfake detection and presentation attack detection (PAD), which detects attacks presented in front of the camera. Drawing on Innovatrics’ approach, it shows how physical capture signals, unpredictable challenges chosen by the server, and server-side validation support that assurance. The approach assumes that the client device may be compromised.
The talk also examines independent certification and continuous adversarial testing as attacks evolve. Attendees will leave with practical questions for evaluating defenses: where trust decisions are made, what independent testing covers, and how often defenses are retested.

_Agenda

Language: English

5:00 pm
_Introduction
5:05 pm
_Filip Mazán, Director of AI Security Labs at ESET
5:30 pm
_Filip Štiglic, Enterprise Architect in Platform Engineering at Innovatrics
5:55 pm
_Q&A
6:30 pm
_Networking

_Sign up

Past Meetups