I don’t love the title here. Maybe this is a “me” problem, but when I see “AI agent does X,” the idea that it might be one of those molt-y agents with obfuscated ownership pops into my head.
In this case, a group of pentesters used an AI agent to select McKinsey and then used the AI agent to do the pentesting.
While it is conventional to attribute actions to inanimate objects (car hits pedestrians), IMO we should be more explicit these days, now that unfortunately some folks attribute agency to these agentic systems.
Ok, we've reverted the title (submitted title was "AI Agent Hacks McKinsey")
> now that unfortunately some folks attribute agency to these agentic systems.
You're doing that by calling them "agentic systems".
Yah it's just an ad, and "Pentesting agents finds low-hanging vulnerability" isn't gonna drive clicks.
Yeah, the original article title "How We Hacked McKinsey's AI Platform" is better.