The 5 Security Risks Nobody Talks About in AI Coding Agents

In January 2026, Block's security team ran a red team exercise against their own AI agent, Goose. They called it Operation Pale Fire. They achieved full compromise of an employee's laptop — not through some exotic zero-day, but through prompt injecti...