AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
AI-related cyberattacks are surging, with hackers stealing AI access keys to monetize them and using AI tools to speed up their intrusions.
Over the past month, at least a dozen AI developer platforms were hit, with the most recent incidents involving CommandCode, Northflank, Trigger.dev, Chainstack, and WorkOS.
Across all incidents, the hackers appear to have been hunting for AI access tokens they could monetize, relying on AI agents to speed up and streamline their attacks.
While part of the same industry-wide trend, the attacks do not appear to be related, and initial access varies from compromised credentials to third-party dependencies and vulnerability exploitation.
The attackers hit Andromeda, Brev (NVIDIA), CommandCode, Fireworks AI, Lightning AI, Northflank, OpenCode, Railway, Trigger.dev, Warp, and Zeabur, mainly looking for stored customer secrets.
“Intruders are reaching AI provider credentials through the intermediary layer of hosting...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
