Today in Tech
Today in Tech
Foundry
Why every AI agent can be hacked
41 minutes Posted Jan 13, 2026 at 3:00 pm.
– Introduction, overview: Why every AI agent can be hacked
– First enterprise AI attack on Microsoft Copilot
– Systemic vulnerabilities and why things got worse
– Why agents are always gullible by design
– Prompt injection vs simple persuasion
– Zero-click attacks explained
– Hacking ChatGPT via Google Drive & shared docs
– Planting malicious “memories” in your AI
– The Cursor + Jira “apples” exploit for stealing secrets
– Thousands of exposed Copilot Studio agents on the internet
– Goal hijacking: convincing agents to change their mission
– Dumping Salesforce data via a customer-success agent
– Soft vs hard security boundaries for AI
– What vendors fixed—and what they can’t fix
– Why “secure AI platform” is a myth
– What enterprises must own in the shared responsibility model
– Treating agents like risky insiders to monitor
– How AI security needs to evolve next
– Closing thoughts
0:00
41:30
Download MP3
Show notes
AI agents are exploding across the enterprise—but security hasn’t caught up. In this episode of Today in Tech, host Keith Shaw talks with Michael Bargury, co-founder and CTO of Zenity, about why every AI agent is inherently vulnerable, how zero-click attacks work, and what companies must do now to reduce their risk.
Bargury explains how attackers can hijack AI agents with simple persuasion, plant malicious “memories,” and silently exfiltrate sensitive data from tools like Microsoft Copilot, ChatGPT, Salesforce, and Cursor, often without users ever clicking on anything.
You’ll learn:
* Why AI agents are always vulnerable by design
* How prompt injection = persuasion, not just a technical bug
* What zero-click agent attacks look like in the real world
* How attackers can weaponize shared docs, Jira tickets, and email automations
* Why there is no such thing as a “fully secure” agent platform
* Practical steps to monitor, contain, and manage AI agent risk
Chapters