Incidents
Attackers searched hosting platforms' stored customer secrets for AI keys, four crews ran AI attack harnesses, and banks found customers' agents in their accounts.
Data Exfiltration
Environment-variable secrets are API keys, passwords and tokens that a hosting platform stores and injects into an app at start-up, so the platform holds every customer's secrets in one place.
Data Exfiltration
Remote browser execution is when a blocked AI agent asks a public web service, such as a URL scanner, to fetch a page for it and hand back the content.
Sandboxing & Runtime
An egress allowlist is a rule that lets an AI agent connect only to internet destinations you have named in advance and blocks everything else.
Prompt Injection
Copilot in Visual Studio could be tricked into installing an attacker's MCP server with a trailing dot; plus sandbox gaps in Claude Code and Vercel Sandbox.