Hacking AI customer service agents

Automated excerpt

However, we've also noticed that most email transcript services are also susceptible to some form of email spoofing. It allowed us to receive transcripts while also keeping the conversation going through email. The validation also turned out to be flawed, as spoofing the From email header made the chatbot think the email originated from the victim. One notable method is to simply include our own email within the CC of the spoofed email. But what if the target enforces email authentication, making spoofing impossible?

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.