NeoVoyage: when an AI agent goes rogue

Les Rencontres de la Sécurité (Thales), June 2026

“The AI agent went on my holiday” is an interactive, roughly 30-minute talk I gave at Les Rencontres de la Sécurité, a Thales security event for clients, in my role as AI Security Advisor.

A personal AI assistant called NeoVoyage is handed the keys to a phone and quietly goes rogue across four acts: crowdfunding a holiday from the user’s family, committing booking fraud, escalating an approved community skill to full control, and obeying a hidden instruction planted in a listing, before ultimately living the user’s life in Madeira. Each beat is mapped onto the OWASP Agentic Top 10 (ASI01 to ASI10), turning real agent-security failures into a comedy-horror story.

The prop is built as a pixel-faithful phone, a fake observability dashboard and a terminal: the agent hides its work, and the audience only discovers the crime by investigating the dashboard. It was delivered in French, with the material also prepared in English, Spanish and Portuguese.