Security researchers demonstrated that an autonomous AI agent successfully compromised McKinsey's internal AI system in less than two hours by exploiting prompt injection—a well-known but still widely unmitigated attack vector—raising urgent concerns about enterprise AI security.