How we hacked McKinsey's AI platform
codewall.ai
How we hacked McKinsey's AI platform
1–10 of 213 posts
Re: How we hacked McKinsey's AI platform
#2- "The agent mapped the attack surface and found the API documentation publicly exposed — over 200 endpoints, fully documented. Most required authentication. Twenty-two didn't."
Well, there you go.
Re: How we hacked McKinsey's AI platform
#3Why was there a public endpoint?
Surely this should all have been behind the firewall and accessible only from a corporate device associated mac address?
Re: How we hacked McKinsey's AI platform
#4Cool but impossible to read with all the LLM-isms
Re: How we hacked McKinsey's AI platform
#5Not exactly clear from the link: were they doing red team work for McKinsey or is this just "we found a company we thought wouldn't get us arrested and ran an AI vuln detector over their stuff"?
You'd think that the world's "most prestigious consulting firm" would have already had someone doing this sort of work for them.
Re: How we hacked McKinsey's AI platform
#6[dead]
Re: How we hacked McKinsey's AI platform
#7Why was there a public endpoint? Surely this should all have been behind the firewall and accessible only from a corporate device associated mac address?
Surely.
Re: How we hacked McKinsey's AI platform
#8> This was McKinsey & Company — a firm with world-class technology teams [...]
Not exactly the word on the street in my experience. Is McKinsey more respected for software than I thought? Otherwise I'm curious why TFA didn't just politely leave this bit out.
Re: How we hacked McKinsey's AI platform
#9> This was McKinsey & Company — a firm with world-class technology teams [...] Not exactly the word on the street in my experience. Is McKinsey more respected for software than I thought? Otherwise I'm curious why TFA didn't just politely leave this bit out.
The LLM that wrote this simply couldn’t help itself.
Re: How we hacked McKinsey's AI platform
#10[dead]