Data Splicing Attacks - Breaking Enterprise DLP from the Inside Out

Learn about a critical data exfiltration technique that can bypass all major Data Loss Prevention (DLP) vendors in this 44-minute conference talk from BSidesSF 2025. Discover how security researchers Vivek Ramachandran and Audrey Adeline uncovered data splicing attacks that exploit fundamental architectural flaws in both endpoint and proxy-based DLP solutions. Examine the technical details behind these bypass methods through live demonstrations that show how enterprise security controls can be circumvented from within an organization. Explore the release of Angry Magpie, a new open-source toolkit specifically designed for red teams to replicate and test these data splicing attacks in their own environments. Gain insights into the vulnerabilities present in enterprise DLP systems and understand the implications for organizational data security posture.