Cybersecurity in WooCommerce & AI: live Woo hacking + red-teaming AI

We’re so back! :)

After a long hiatus, Neuralab brings you a double session on eCommerce security: a live demo of WooCommerce hacking and practical guidance on red-teaming generative AI agents.

Two experts, real demos, and concrete takeaways for developers and store owners.

You’ll learn how the rise of AI agents is reshaping risks in eCommerce, and why red-teaming is essential before rolling out AI-driven systems. You'll also see first-hand in a live demo how WooCommerce stores can be compromised, what attackers look for, and how to defend against them.

+++++++++++++++++++++
Lecture 01 - AI & red-teaming

Static chatbots have evolved into generative AI systems, and today into AI agents with direct access to databases and business logic. Expectations are higher than ever, but so are the risks.
In this lecture, Danijel will explain why red-teaming (“playing for the wrong side”) is a critical step before deploying any external AI solution. He’ll show how poorly implemented agents can lead to empty databases, expensive token bills, or data leaks, and why security testing and transparency with clients are vital. Attendees will learn how to recognize risks, structure red-team exercises, and balance innovation with responsible deployment.

Danijel Blazsetin - Born in Pécs (1997) and trained at the University of Zagreb (Faculty of Humanities), Danijel moved from internal training and SaaS implementation to product development and generative AI. At Infobip he focuses on building secure, scalable generative AI solutions that deliver real business value beyond PoC. He champions a human-centered approach and will cover why red-teaming is essential, common AI agent failure modes (hallucinations, data leaks), and how to avoid expensive operational mistakes like runaway token costs and exposed databases.

+++++++++++++++++++++
Lecture 02 - Hacking WooCommerce live

A realistic walkthrough of a WooCommerce attack - from initial scanning and vulnerability discovery, through exploitation and privilege escalation, to establishing persistent footholds. Matko will finish with practical defensive steps teams can implement immediately: what to watch for in logs and system behaviour, how to isolate affected components quickly, and how to organize remediation and recovery.

Matko Antun Bekavac - started his career in the Croatian Armed Forces focusing on web, databases and cyber protection. Since 2019 he has led a development team at Hero Factory d.o.o., worked with CyberArrange Security Solutions, and is currently building a new cybersecurity project. He also runs the Shopify Hrvatska Facebook group, a local community for eCommerce professionals.

AGENDA:

19:00 - Meet&Greet
19:05 - Talk: AI & red-teaming [Danijel Blazsetin]
19:35 - Q&A session
19:45 - Talk: Hacking WooCommerce live [Matko Antun Bekavac]
20:45 - Q&A session
21:00 - Pizza&Beer