I don’t think it’d be related to this if the defcon presentation was in 2025, but your description reminds me of this HN post about getting Claude to leak memories: https://news.ycombinator.com/item?id=48916975