A working app can still expose a key to private systems. Anthropic describes a 1.8 million-APK credential hunt in Claude-assisted criminal operations, while separate cases show how quickly stolen tokens can become wider access.
Florida identified one compromised police login, improperly stored on an employee's personal device, as the route into its systems. The claimed scale of exposure remains unconfirmed.
Attackers diverted Coder's trusted Terraform registry to malicious modules that searched provisioners for cloud keys, tokens, SSH credentials and secrets.
Nineteen Chrome and Edge extensions delivered wallet-draining and credential-stealing modules, including five legitimate tools weaponised after ownership changes.
Ten malicious npm releases carried valid provenance because an outsider could drive the project’s trusted GitHub Actions publishing workflow.
Microsoft observed attackers turning exposed LiteLLM gateways into credential-harvesting, database-access and persistence hubs. The public exploit chain makes AI gateways a Tier-0 patching priority.
Australian authorities charged two alleged TeamPCP participants and quantified the campaign's reach: more than 1,000 organisations, 500,000 credentials and 300 GB of data.
Hundreds of AI agents exploited PaperCut at 395 organisations, with some intrusions reaching domain administrator in minutes. Defenders must investigate Active Directory, not only the PaperCut host.
Operation Fake KickOff uses fake recruiters, browser-in-the-browser pages and live MFA relay to steal corporate Google Workspace access.
SynkLoader used a fake Teams help desk, an Azure-hosted installer, a counterfeit Windows lock screen and an internal proxy to turn one user action into hands-on-keyboard corporate access.
