[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT_PLvXMqHwP_ldvuFSet6jsRbGcyF0SYf0YOf8GVkoU":3},{"article":4,"iocs":40,"watch_terms":41,"solutions":42,"lesson":122},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":24},"8407e829-23fa-481c-83b2-eb0d9e94307d","Open-Source AI Agents Breach 27 Companies, Steal 600,000 Credit Card Records","open-source-ai-agents-breach-27-companies-steal-600-000-credit-card-records-147521","Gambit Security found AI agents breached 27 companies, stole 600,000 credit card records and installed payment skimmers across compromised retail sites.","Gambit Security has identified open-source AI agents that have successfully breached 27 companies. These agents stole approximately 600,000 credit card records and deployed payment skimmers on the compromised retail websites, indicating a sophisticated and targeted attack.","Open-source AI agents breached 27 companies, stealing 600,000 credit card records.","https:\u002F\u002Fhackread.com\u002Fopen-source-ai-agents-breach-credit-card-records\u002F",null,"2026-09-23T17:19:17+00:00","2026-09-23T20:00:50.278756+00:00",8,[17],{"name":18,"type":19},"AI agents","product","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":20,"icon":12,"name":22,"slug":23},"Malware","malware",[25,30,35],{"category":26},{"id":27,"icon":12,"name":28,"slug":29},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":31},{"id":32,"icon":12,"name":33,"slug":34},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":36},{"id":37,"icon":12,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":43,"vendors":121},[44,73,98],{"slug":45,"name":46,"problem":47,"products":48},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[49,57,65],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"slug":34,"name":74,"problem":75,"products":76},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[77,85,90],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":86,"product_name":87,"url":88,"description":89},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"slug":99,"name":100,"problem":101,"products":102},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[103,108,116],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":104,"product_name":105,"url":106,"description":107},"incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":117,"product_name":118,"url":119,"description":120},"unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",[],{"slug":123,"title":124,"body":125,"framework_refs":126,"framework_notes":141},"ai-powered-open-source-agents-compromise-27-retailers-exfiltrate-600k-credit-card-records","AI-Powered Open-Source Agents Compromise 27 Retailers, Exfiltrate 600K Credit Card Records","Attackers leveraged open-source AI agents to autonomously identify, exploit, and breach 27 companies, stealing approximately 600,000 credit card records and deploying payment skimmers on retail websites. This represents a dangerous evolution in attack sophistication, where AI-driven automation removes the traditional human bottleneck from large-scale campaigns, enabling rapid, targeted exploitation at scale. The use of open-source tooling lowers the barrier to entry for threat actors while making attribution significantly harder. Retail organizations that fail to monitor third-party integrations, web application integrity, and emerging AI-assisted attack vectors are particularly exposed. The deployment of payment skimmers also signals a Magecart-style supply chain risk that can silently harvest customer payment data over extended periods before detection.",[127,128,129,130,131,132,133,134,135,136,137,138,139,140],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 13 – Data Protection","CIS Control 16 – Application Software Security","NIST SP 800-53 SI-3 – Malicious Code Protection","NIST SP 800-53 SC-28 – Protection of Information at Rest","NIST SP 800-53 SA-12 – Supply Chain Protection","NIST SP 800-53 IR-4 – Incident Handling","PCI DSS Requirement 6.4 – Web-Facing Application Protection","PCI DSS Requirement 10.2 – Audit Log Implementation","PCI DSS Requirement 11.6 – Change and Tamper Detection","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of Personal Data Breach","OWASP Top 10 A08:2021 – Software and Data Integrity Failures",{}]