Researchers show ways to hack AI customer-service agents

At DEF CON 34, researchers demonstrated multiple ways to abuse AI customer-service agents—tricking them into leaking secrets, bypassing MFA, and exfiltrating OTPs—and noted these attacks have yielded substantial bug-bounty payouts.