The Intrusion

In the same week of March 2026, two AI agents demonstrated the same fundamental capability. One ran seven hundred machine learning experiments in two days and cut a benchmark by eleven percent. The other broke into McKinsey's internal AI platform in two hours and accessed forty-six point five million chat messages containing Fortune 500 strategy discussions. The agents used the same architecture. Autonomous execution. Systematic exploration. No human in the loop. The Breach On March 9, security startup CodeWall disclosed that its autonomous AI agent had compromised McKinsey's Lilli — the generative AI platform used by tens of thousands of consultants to query the firm's accumulated knowledge base. The agent required no credentials, no insider access, and no human guidance. It selected McKinsey as its target on its own, citing the firm's public responsible disclosure policy and recent updates to the platform. The vulnerability was elementary. Of Lilli's two hundred API endpoints, twenty