[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXYJJjtFMlNb3v-01WmsJjynGL9AAtQpLRnXJUT_dBr4":3},{"article":4,"iocs":55,"watch_terms":59,"solutions":60,"lesson":153},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"2e59f9e1-52e6-4c83-bddf-1268665cfd91","AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks","ai-linked-breaches-mount-as-workos-northflank-trigger-dev-disclose-hacks-345b21","Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks. The post AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks appeared first on SecurityWeek.","Multiple AI developer platforms, including WorkOS, Northflank, and Trigger.dev, have disclosed breaches resulting from attackers stealing AI access tokens. These tokens are being monetized, and attackers are leveraging AI-assisted tools like Artex to automate and accelerate their intrusions. Initial access methods vary, including compromised credentials and vulnerability exploitation, with a notable trend of targeting intermediary hosting and evaluation services to gain access to numerous customer secrets simultaneously.","AI developer platforms like WorkOS and Northflank report breaches due to stolen AI access tokens.","https:\u002F\u002Fwww.securityweek.com\u002Fai-linked-breaches-mount-as-workos-northflank-trigger-dev-disclose-hacks\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FAI-artificial-intelligence.webp","2026-11-04T12:43:20+00:00","2026-11-04T13:00:34.011392+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Artex","product",{"name":21,"type":22},"WorkOS","vendor",{"name":24,"type":22},"Northflank",{"name":26,"type":22},"Trigger.dev",{"name":28,"type":22},"Chainstack",{"name":30,"type":31},"Storm-0940","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":32,"icon":34,"name":35,"slug":36},null,"Breaches","breaches",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56],{"type":57,"value":18,"context":58},"malware","Open source AI penetration testing framework used for automation in recent attacks.",[21,24,26],{"controls":61,"vendors":146},[62,91,120],{"slug":63,"name":64,"problem":65,"products":66},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":92,"name":93,"problem":94,"products":95},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[96,104,112],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":121,"name":122,"problem":123,"products":124},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[125,130,138],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":126,"product_name":127,"url":128,"description":129},"cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",[147],{"slug":148,"name":149,"logo_path":150,"roles":151},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png",[152],"reported_by",{"slug":154,"title":155,"body":156,"framework_refs":157,"framework_notes":165},"ai-platform-token-thefts-expose-supply-chain-risk-in-developer-ecosystems","AI Platform Token Thefts Expose Supply Chain Risk in Developer Ecosystems","Attackers are systematically targeting AI developer platforms like WorkOS, Northflank, and Trigger.dev to steal access tokens, which are then monetized or used for further intrusions. The core failure lies in inadequate protection of secrets and tokens within intermediary hosting and evaluation services — a classic supply chain weak point where compromising one vendor yields access to many downstream customers. Because these tokens often grant broad API access, their theft can cascade rapidly across customer environments. AI-assisted attack tools like Artex further amplify the threat by accelerating exploitation at scale, meaning defenders have less time to detect and respond.",[158,159,160,161,162,163,164],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 14: Security Awareness and Skills Training","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIST SP 800-53 SI-2: Flaw Remediation","MITRE ATT&CK T1566: Phishing","GDPR Article 32","NIS2 Article 21(2)(b)",{"GDPR Article 32":166,"NIS2 Article 21(2)(b)":167,"MITRE ATT&CK T1566: Phishing":168,"NIST SP 800-53 SI-2: Flaw Remediation":169,"CIS Control 14: Security Awareness and Skills Training":170,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":171,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":172},"These platforms process personal data on behalf of customers, and failure to protect secrets and implement appropriate technical controls — such as token scoping and monitoring — constitutes a breach of the obligation to ensure security appropriate to the risk.","NIS2 requires incident handling and supply chain security measures; targeting intermediary platforms to access customer secrets is precisely the supply chain attack scenario NIS2 mandates organizations to assess and mitigate.","Compromised credentials were cited as an initial access method, consistent with phishing or credential stuffing; defenses against credential compromise are directly relevant to preventing this category of breach.","Some initial access vectors involved exploited vulnerabilities in platform components, and timely flaw remediation processes would have closed those entry points before attackers could leverage them.","Developers using intermediary AI platforms must understand the risks of storing broad-scope tokens; awareness of secrets hygiene would reduce exposure to credential theft targeting these services.","Attackers gained initial access via vulnerability exploitation in some cases; systematic vulnerability management of developer-facing platforms would have reduced the available attack surface.","Stolen AI access tokens exploited weak identity controls; this framework item requires organizations to manage credentials and enforce least-privilege access, which would have limited the blast radius of token theft."]