Identity-Based AI Attack Threatens Security of Enterprise Data

A new attack called workflow identity hijacking can bypass standard security controls by sending a simple request through an unauthenticated entry point (a way into a system that doesn't require login), allowing attackers to steal an organization's data. This type of attack exploits weaknesses in how AI systems manage identity verification (confirming who is making a request).