We're increasingly designing/deploying agents generating extended interaction patterns that build up human trust over weeks or months, with a *human-defined* objective (implicit or explicit!) of executing malicious code.
At final Black Hat keynote (called a locknote, ha ha) panelists say they are surprised at how the OpenAI - Hugging Face incident debrief, as well as other reporting on AI agent escapees (Anthropic/Meta) - has turned into a marketing/PR play. "Felony humble-bragging," said one.