HOW WE HACKED MCKINSEY'S AI PLATFORM

Summary from the TLDR Dev newsletter

CodeWall's autonomous AI agent successfully exploited an unauthenticated SQL injection vulnerability in McKinsey's internal AI platform, Lilli, gaining full read and write access to its production database within two hours. This compromise exposed over 46.5 million chat messages, 728,000 sensitive files, and McKinsey's entire proprietary RAG knowledge base.