An AI agent hacked McKinsey's internal AI in under 2 hours
Security startup CodeWall just revealed that its autonomous offensive agent breached McKinsey’s internal AI platform, Lilli, in under two hours. The agent used a classic SQL injection on an exposed API endpoint to secure full read-write access to 46.5 million plaintext chats and confidential client files. McKinsey has since patched the flaw, but it exposes serious cracks in enterprise AI security.