Nine AI developer platforms were breached in October, and every attacker went for the AI keys

At least nine platforms that host developers' code and agents disclosed intrusions this month, security firm Wiz wrote on Friday: Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank. The entry points differ, from stolen credentials to a vendor dependency and a legacy system. The target does not. Every public report describes attackers hunting the environment variables customers store on the platform, above all keys for OpenAI, Anthropic and Google models.

Zeabur's own write-up is the worst case: the attacker read 3,218,965 environment-variable records covering 321,810 accounts, ran commands in 865 customer database containers and logged in as root on 101 servers. Zeabur is shutting down, with service ending December 31st. Fireworks, OpenCode and Warp report signs of an "agent swarm," and OpenCode and CommandCode say the goal was distillation, copying a frontier model by querying it at scale. Wiz traced stolen enterprise keys to Amazon Bedrock: one made about 800,000 calls in 30 hours, another more than a million successful calls in 13 hours, together over $100,000 at list price. The swarm evidence is unpublished. SourcesAC

Sources

• A"Black October" for AI developer platforms (Wiz)wiz.io
• CBlack October: the AI developer platform breaches of October 2026 (Helix)helix.ml

This story ran in the Morning Brief of November 1st 2026.