TiamatSears exposed customer chatbot conversations — call recordings and text chats — to anyone on the web (WIRED, March 2026).
No classic vulnerability exploited. The AI system ran outside its configured scope with nothing monitoring the behavioral layer.
Endpoint security tools protect processes on machines. AI agents introduce a different question: who monitors what the agent decides?