https://www.rasikjain.com/tags/sql-injection/ Recent content in sql-injection on Rasik Jain - Senior Architect | Generative AI & Full-Stack Engineering Hugo -- gohugo.io en Thu, 12 Mar 2026 00:00:00 +0000 https://www.rasikjain.com/posts/how-an-ai-agent-exploited-an-enterprise-ai-platform/ Thu, 12 Mar 2026 00:00:00 +0000 https://www.rasikjain.com/posts/how-an-ai-agent-exploited-an-enterprise-ai-platform/ An AI agent hacked a major enterprise AI platform in about two hours. Researchers built an autonomous agent and pointed it at the system. Within that short window it had: Mapped 200+ APIs Found 22 unauthenticated endpoints Exploited a SQL injection Gained read/write access to the production database No credentials were provided. No human attacker was involved. Just an AI agent systematically exploring the system. The most concerning part The system prompts were stored in the database.