Public reporting points to exposed API surface, unsafe SQL construction, and broken object-level authorization. The AI layer changed the blast radius.
McKinsey's Lilli Looks More Like an API Security Failure Than a Model Jailbreak
calendar_today
March 10, 2026
domain
promptfoo