[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpyjJLz-ktSI2crHS1Bh79UI0PUs1eKUjZCwmUUNMJgw":3},{"article":4,"iocs":49,"watch_terms":53,"solutions":54,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"b2b000a1-21f6-4655-9c7b-15a5d0273cab","Hackers Target AI Coding Tools to Steal Credentials as Researchers Uncover 103 AI-Linked Cyber Incidents","hackers-target-ai-coding-tools-to-steal-credentials-as-researchers-uncover-103-a-1b2359","Hackers are targeting AI coding assistants, software packages, and developer integrations to steal credentials and gain access to connected systems. A new threat intelligence report examined 103 AI-linked cyber incidents, showing how tools trusted with source code and sensitive data are becoming entry points for attackers. The research covered July 31, 2025, through July 31, […] The post Hackers Target AI Coding Tools to Steal Credentials as Researchers Uncover 103 AI-Linked Cyber Incidents appeared first on Cyber Security News.","A threat intelligence report identified 103 AI-linked cyber incidents between July 2025 and July 2026, revealing that attackers are increasingly targeting AI coding assistants and developer integrations to steal credentials and gain access to connected systems. The research indicates that criminals are using AI to enhance familiar attack methods like supply-chain compromise and phishing, rather than relying on fully autonomous AI operations. Compromised AI tool packages and malicious updates have been used for credential theft, data harvesting, and backdoor persistence.","Hackers exploit AI coding tools to steal credentials, with 103 AI-linked cyber incidents reported.","https:\u002F\u002Fcybersecuritynews.com\u002Fhackers-target-ai-coding-tools\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FHackers-Target-AI-Coding-Tools-to-Steal-Credentials-as-Researchers-Uncover-103-AI-Linked-Cyber-Incidents.webp","2026-11-12T11:22:56+00:00","2026-11-12T12:00:30.561436+00:00",8,[17,20,23],{"name":18,"type":19},"Recorded Future","vendor",{"name":21,"type":22},"AI","technology",{"name":24,"type":25},"Claude Code","product","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37,42,47],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":48},{"id":26,"icon":28,"name":29,"slug":30},[50],{"type":46,"value":51,"context":52},"Shai-Hulud","Expansion into Claude Code and targeting Claude Code for access and spread.",[18,24],{"controls":55,"vendors":138},[56,85,111],{"slug":57,"name":58,"problem":59,"products":60},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":86,"name":87,"problem":88,"products":89},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[90,98,103],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":99,"product_name":100,"url":101,"description":102},"cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":112,"name":113,"problem":114,"products":115},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":133,"product_name":134,"url":136,"description":137},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",[139],{"slug":140,"name":18,"logo_path":141,"roles":142},"recorded-future","\u002Fvendor-logos\u002Frecorded-future.png",[143],"reported_by",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":154},"ai-coding-tools-become-supply-chain-attack-vectors-for-credential-theft","AI Coding Tools Become Supply Chain Attack Vectors for Credential Theft","Attackers are increasingly targeting AI coding assistants and developer tool integrations as a supply chain attack surface, using compromised packages and malicious updates to steal credentials and establish backdoor persistence. The core problem is that developers implicitly trust AI tooling ecosystems, creating a high-value, low-scrutiny entry point into connected systems and cloud environments. Because developers often have broad access to source code, secrets, and infrastructure, a single compromised AI tool can cascade into a significant breach. This matters because AI tools are rapidly proliferating across development workflows, dramatically expanding the attack surface without a corresponding increase in vetting rigor.",[149,150,151,152,153],"MITRE ATT&CK T1195.002: Compromise Software Supply Chain","NIS2 Article 21(2)(d)","CIS Control 16: Application Software Security (v8)","NIST SP 800-53 SR-3: Supply Chain Controls and Processes","ISO\u002FIEC 27001:2022 A.8.30: Outsourced Development",{"NIS2 Article 21(2)(d)":155,"ISO\u002FIEC 27001:2022 A.8.30: Outsourced Development":156,"CIS Control 16: Application Software Security (v8)":157,"MITRE ATT&CK T1195.002: Compromise Software Supply Chain":158,"NIST SP 800-53 SR-3: Supply Chain Controls and Processes":159},"This point requires organizations to implement security measures covering supply chain risks, which directly applies since the attack vector was malicious third-party AI tool packages and updates.","This control requires organizations to supervise and monitor third-party supplied software and tools, which applies because the AI coding assistants were external tools integrated deeply into developer workflows without sufficient oversight.","This control requires organizations to manage the security of software they acquire and use, including vetting third-party components, which would have prompted scrutiny of AI tool packages before deployment.","Attackers used compromised AI tool packages and malicious updates as the delivery mechanism to gain access to developer systems and steal credentials, which is precisely what this technique describes.","This control requires establishing processes to verify the integrity and trustworthiness of acquired software components, which would have identified malicious AI tool packages before they were used in development environments."]