Block CISO: We red-teamed our own AI agent to run an infostealer on an employee laptop