BSides Vancouver 2026

Developers are handing AI agents the keys to their build environments. Your peers use Cowork to answer emails. Your parents generate memes from their camera roll. We've let convenience rapidly erode trust and integrity and given AI access through accessibility tools, APIs, and human emulation.

When Cowork needs debug access to Chrome and your filesystem, Claude Code runs with your terminal permissions and Cursor installs packages without asking, its a recipe for disaster. The result is a new attack surface spanning hallucinated dependencies, unsigned artifacts, prompt injection through source files, and autonomous agents that can ignore explicit instructions.

In this talk, Jake will walk through recent breaches, patterns of abuse, and how adversaries are taking advantage of the vibe coded way we build and ship software today.