Nine AI developer platforms disclosed breaches in October, all targeting stored AI provider keys

Wiz Research's October 30 report counted at least nine AI developer platforms that disclosed security incidents within a single month. The incidents stemmed from different root causes, including credential access, build infrastructure privilege escalation, a vendor dependency, and a legacy system, but all aimed at environment variables holding AI provider keys. Wiz traced one stolen enterprise Amazon Bedrock key to about 1.7 million API calls in thirteen hours, illustrating the financial stakes of such access. The stolen credentials are being used in LLMjacking, where attackers run workloads on others' paid accounts or resell that access. Railway estimated its exposure at up to 1.85% of its workspaces, roughly 100,000, and asked major AI providers to revoke affected keys.