BSidesSF 2026 - How We Red-Teamed Our Own AI Agent: Lessons from... (Josiah Peedikayil, HS)

This talk covers Operation Pale Fire, where Josiah Peedikayil examines how attackers can exploit Block's open-source AI agent, Goose, through methods such as Unicode smuggling, prompt injection, Google Calendar phishing, and social engineering. The session delves into the attack chain and offers practical mitigations for securing AI agents, providing valuable insights into the evolving landscape of AI security threats.