We’re taught to keep a human in the loop when AI makes important decisions but what happens when the human becomes the easiest part of the system to manipulate?
As AI agents gain access to tools, data and real-world actions, attackers don't always need to compromise the agent itself. They can target the person supervising it, exploiting trust, automation bias and deceptive context to influence what the agent is allowed to do.
This talk explores how social engineering can enter the AI-agent loop, using a practical scenario to show how an attacker can manipulate both machine and human decision-making. We’ll look at why “human approval” isn't automatically a security control, and what developers can do to make agentic workflows more resilient.
Because sometimes the vulnerability isn't the AI. It's the person who says, “Trust me, bro.”