CORTEXCybersécurité
While researching the MSSQL and SCCM permission models to build MSSQLHound and ConfigManBearPig, PowerShell scripts that collect information for the BloodHound attack path management software, I found permissions that allowed elevation of privileges to the MSSQL sysadmin server role and the SCCM Full Administrator security role.
Agent-based systems would create massive new attack surfaces. "The amount of prompt injection we're about to see propagate across the Internet is going to be staggering."— OpenAI's November 23' Releases, November 2023 Analysis: Prompt injection is now OWASP's #1 LLM vulnerability for 2025. OpenAI stated in December 2025: "Prompt injection is unlikely to ever be fully 'solved.'" 24 CVEs were assigned for AI tool vulnerabilities in December 2025 alone. VERDICT: Called it—endemic status confirmed.