One Click, One Rogue Agent

One Click, One Rogue Agent: Agent Forger, the EY Help Desk Breach & How to Work Black Hat/DEF CON
Shawn Valle and Garrett Gross return on Cybersecurity Growth to discuss three topics: Agent Forger, where a crafted phishing link to a ChatGPT URL could silently deploy an attacker-controlled AI agent that inherits a user’s enterprise integrations (email, calendar, cloud storage) and enables data exfiltration and persistence, prompting leaders to inventory AI agents and their authorized access; an Ernst & Young breach tied to Shiny Hunters, where a help desk/ITSM platform exposed sensitive…