Workflow Identity Hijacking Targets Enterprise AI Data Access
A newly documented attack technique called 'workflow identity hijacking' exploits unauthenticated entry points in enterprise environments to bypass standard security controls and seize control of organisational data. The attack leverages the trusted identity context of automated AI workflows to move laterally and exfiltrate sensitive information. This represents a significant threat to enterprises relying on AI-driven automation pipelines where identity boundaries are not rigorously enforced.