At the 64th Annual Meeting of the Association for Computational Linguistics (ACL 2026) this week in San Diego, California, researchers from Bloomberg’s AI Engineering group and AI Strategy & Research ...

Your AI agent did exactly what it was designed to do. The framework underneath it just handed an attacker a shell on the box that holds your OpenAI key, your database credentials, and your CRM tokens.