AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
Summary
Multiple companies, including WorkOS, Northflank, and Trigger.dev, have disclosed security breaches. The article reports that attackers have been harvesting AI access tokens and using AI-assisted offensive tools to automate attacks.
IFF Assessment
Attackers are successfully breaching developer platforms and harvesting AI access tokens, which is bad news for defenders.
Defender Context
Stolen AI access tokens can give attackers access to downstream services and data, so defenders should rotate API keys and tokens, audit third-party integrations, and monitor for anomalous token use. The use of AI-assisted tooling to automate intrusions suggests faster attack cycles and a need for faster detection and response. This fits a broader trend of AI-enabled attacks targeting developer and SaaS infrastructure.