Hackers Can Turn AI Workflows Into Privileged Data-Stealing Proxies Without Jailbreaking Models

<p>Enterprise AI workflows can be vulnerable to misuse that exposes sensitive information without prompt injection, account compromise, or jailbreaking a large language model. This vulnerability, termed Workflow Identity Hijacking, exploits authorization gaps between external requesters and the privileged identities used by AI automation. Workflows linked to public-facing email inboxes, web forms, GitHub issues, shared documents, [&#8230;]</p> <p>The post <a href="https://cybersecuritynews.com/ai-workflows-stealing-proxies/">Hackers Can Turn AI Workflows Into Privileged Data-Stealing Proxies Without Jailbreaking Models</a> appeared first on <a href="https://cybersecuritynews.com">Cyber Security News</a>.</p>