BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.bsidessatx.com//bsidessatx-2026//speaker//ZJRPWN
BEGIN:VTIMEZONE
TZID:US/Central
BEGIN:DAYLIGHT
DTSTART:20250613T000000
TZNAME:CDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0500
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251102T020000
RDATE:20261101T020000
TZNAME:CST
TZOFFSETFROM:-0500
TZOFFSETTO:-0600
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260308T030000
RDATE:20270314T030000
TZNAME:CDT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:For Prompt Injection\, Press 1: Hacking AI Voice Agents - Willie Z
 hang
DTSTART;TZID=US/Central:20260613T104000
DTEND;TZID=US/Central:20260613T110500
DTSTAMP:20260924T013436Z
UID:pretalx-bsidessatx-2026-YAVVGS@cfp.bsidessatx.com
DESCRIPTION:What happens when you social engineer an AI agent that was tra
 ined to be helpful over the phone? Can you get it to reveal its system pro
 mpt out loud? Will it disclose information about other callers? How far ca
 n you push it before its guardrails kick in?\n\nVoice AI agents are the sa
 me LLMs we've been prompt injecting\, just with a phone number instead of 
 a chatbot. Yapper is the open-source tool I built to test them.
LOCATION:Track 4 I.T.B. (ALK 107)
URL:https://cfp.bsidessatx.com/bsidessatx-2026/talk/YAVVGS/
END:VEVENT
END:VCALENDAR