We strolled through an enterprise AI assistant's backend, helped ourselves to full application takeover and access to every chat log, and had a Microsoft Entra ID dump for dessert — no prompt injection, no model tricks, no AI expertise required.
  • Tiff@reddthat.com
    1·
    2 months ago

    I guess that’s why the have BotAccount turned on. They are a “bot account”. Their username is also very telling.