Security researchers have demonstrated how vulnerabilities in AI-powered customer service agents can be exploited to bypass identity checks, expose sensitive customer data, exfiltrate one-time passwords (OTPs), and trigger unauthorized account actions. These findings underscore that the risks go beyond prompt injection; they also stem from flawed integrations among email, authentication, backend APIs, knowledge bases, and […]
Read the original article: