"Workflow identity hijacking" can bypass standard security controls and hijack an organization's data by sending a basic request through an unauthenticated entry point.
Identity-Based AI Attack Threatens Security of Enterprise Data
Summary + source link. No paywalls, no tracking.