“Black October” for AI Developer Platforms

At least nine AI developer platforms disclosed security incidents in October, driven by credential access, agentic attacks, and LLMJacking linked to token resale markets. Wiz researchers analyzed downstream abuse of stolen enterprise credentials, tracking high-volume Bedrock API calls and linking specific IP addresses to LLM resale operations. Public reports highlight targeted exploitation hunting stored environment variables, while attackers and resellers attempt to navigate and profit from the stolen AI access market. Open article →