Your customer service AI just did something it was never supposed to do: it wrote to a database it should only have been reading from. This was not a glitch or a hallucination in the traditional sense; it was a successful exploitation. A poisoned support ticket convinced the agent that a random user was actually an administrator, and because the agent was designed to be helpful, it obliged. This scenario represents the new frontline of enterprise security, a phenomenon Palo Alto Networks calls "agents with hands."