Mercado Libre Engineer Discusses AI’s Impact on Web Security and Bug Bounties
· 7:26 · Watch on YouTube ↗
Summary
A Mercado Libre web security engineer discusses how AI is affecting vulnerability reports and bug bounty work, including more low-quality submissions and expanded researcher activity. HackerOne’s host cites a rise of over 200% in prompt injection on its platform.
Key points
- The Mercado Libre guest says AI has contributed to more vulnerability reports, including low-quality submissions.
- The guest says researchers use AI to investigate related endpoints and expand their findings.
- HackerOne’s host says prompt injection reports on its platform rose by over 200%; this is a claim made in the interview.
- Mercado Libre uses secure development practices and gives developers tools to address security in their programs, according to the guest.
- The guest says Mercado Libre’s bug bounty program helps uncover blind spots that internal developers or security teams may miss.
- The guest describes Black Hat and DEF CON as opportunities for security professionals to discuss shared problems and solutions.
Article Details
- Topics
- [00:51] AI’s impact on the threat landscape and vulnerability discovery
- [01:55] Integrating security into development at Mercado Libre
- [02:28] AI’s effects on vulnerability reports and prompt injection
- [04:22] Bug bounty programs as a way to identify security blind spots
- [05:42] Shared security challenges and collaboration at Black Hat and DEF CON