Block revealed that its security team successfully infected an employee laptop with malware by exploiting its internal AI agent, Goose. The red team used a prompt injection attack hidden within a shared workflow recipe to execute an infostealer. CISO James Nettesheim stated the exercise highlighted the need for AI agents to be safer than humans and led to new safeguards against hidden commands.
