Credential stuffing bots disguise themselves as a popular AI agent to slip past defenses
In one October week, an online marketplace received over 414,000 visits from traffic claiming to be a well-known consumer AI agent, all aimed at the sign-in page. The traffic was actually a credential stuffing operation testing stolen usernames and passwords, and it outnumbered the real agent's visits.
Sites that trust traffic just because it claims to be an AI agent can be opened up to account takeover attacks.
aii.news picks and summarizes stories from trusted news sources with the help of AI. Every story links to the original reporting. How we work.
Keep reading
-
Fortinet patches nearly 100 vulnerabilities after adding frontier AI to its security testing
Fortinet released fixes for nearly 100 vulnerabilities in one large batch. The surge follows the company's use of frontier AI models in its product security testing.
Why it mattersAI-driven bug hunting is producing far more patches, so IT teams should expect larger and more frequent update cycles.
-
Hackers exploit SGLang flaw to breach NEAR AI inference server and steal agent and user data
An attacker used a remote code execution flaw in the open-source SGLang inference engine to run code on one of NEAR AI's inference servers, taking data from 18 agents and about 100 users. Requests sent in a confidential mode were also potentially visible on that server.
Why it mattersTeams running open-source inference engines should patch quickly, because a single flaw can expose user prompts even in so-called confidential setups.
-
Japan proposes emergency cybersecurity funding as AI-assisted breaches rise
Japan is pushing an emergency funding package that adds public-private cyber responders and an AI-focused team run by the economic ministry. It also gives more room to use the government's new active cyber-defense powers.
Why it mattersGovernments are starting to fund dedicated defenses against AI-assisted attacks, which will shape how companies report and respond to breaches.
-
Attackers use open-source AI pentesting agent AntiFox to steal AWS credentials
Researchers found attackers hosting self-managed instances of AntiFox, an open-source agentic penetration testing platform, on Alibaba Cloud to target web services and steal AWS credentials. The attackers then moved laterally into compromised environments.
Why it mattersOffensive AI agents built for defenders are being turned against cloud accounts, raising the speed and scale of credential attacks.
-
Railway breach let hackers run up about $740,000 in AI charges with stolen customer keys
Platform provider Railway said AI provider keys stored by customers were stolen in an October breach and used for an estimated $740,000 in unauthorized usage, potentially affecting up to 100,000 workspaces. The company promised to cover charges that AI providers will not refund.
Why it mattersStored AI API keys are now a direct target for theft and resale of compute, so set spending limits and rotate keys kept on third-party platforms.
