AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
Source SecurityWeek
Description
A surge in cyberattacks targeting AI developer platforms has been observed, with attackers harvesting AI access tokens and using AI-assisted tools to automate intrusions. Multiple companies including WorkOS, Northflank, Trigger.dev, Chainstack, and others have disclosed breaches where attackers accessed sensitive customer and business data. The attackers exploited various initial access methods such as compromised credentials, third-party dependencies, and vulnerabilities. The stolen AI access tokens are monetized in a growing underground market, and AI penetration testing frameworks like Artex have been used to automate attacks. These incidents highlight an industry-wide trend of targeting AI infrastructure and credentials.