Preliminary research

Hacking AI customer service agents

Ayoub and Inti De Ceukelaire · Intigriti · 3 September 2026

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

AI support agents can join a ticket, account and privileged support workflow without preserving the customer's authorization boundary. The article explains how to map tools, influence agent decisions and test cross-account actions, with worked examples drawn from customer-service systems.

Record

Researcher

Ayoub and Inti De Ceukelaire

Published by

Intigriti

Date

3 September 2026

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• Slides

Tags

• ai-agent
• prompt-injection
• auth-bypass
• owasp-a01-2021
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Ayoub and Inti De Ceukelaire, first published at the original source. Preserved copies are kept so the citation survives its host.