AI Agent hacked McKinsey's chatbot and gained full read-write access in 2 hours