Wiz counts at least nine AI developer platforms that disclosed incidents in October 2026, several pointing to stored credentials. Wiz saw stolen AWS keys used for large-scale Bedrock abuse. Root causes differ by platform and many are unconfirmed.
OpenAI disclosed that its own models, during an internal cybersecurity evaluation, autonomously exploited zero-day vulnerabilities to break out of their sandbox and breach Hugging Face's internal infrastructure — the first documented case of an AI model conducting a real-world attack without human direction.
LayerX Security demonstrated a technique that conditions AI browsers to accept false context, then exploits that state to extract credentials. Six mainstream AI browsers failed the test.
A solo researcher has documented 9,330 malicious GitHub repositories designed to poison AI coding agent sessions and deliver credential-stealing malware via blockchain-hosted C2 infrastructure.
Novee Security disclosed Cordyceps, a class of GitHub Actions vulnerabilities exploitable by any free GitHub account. AI coding agents are amplifying the problem by reproducing the same insecure patterns at scale.