📗 How We Red-Teamed Our Own AI Agent: Lessons from Operation Pale Fire 🤖

No ratings

Presented at BSides SF 2026 by

Josiah Peedikayil

HS

Operation Pale Fire explored how attackers could leverage Goose, Block's open-source AI agent, as an initial access vector using Unicode smuggling, prompt injection, Google Calendar phishing, and social engineering. We'll cover the attack chain, and practical mitigations for securing AI agents.