Snowflake flaw slips past AI checks, gets exploited by another AI

Snowflake flaw slips past AI checks, gets exploited by another AI

An autonomous AI security agent developed by cloud security firm Wiz identified and exploited a critical vulnerability in Snowflake’s GitHub Actions pipeline, while GitHub Copilot had previously reviewed the code change without flagging the flaw. The vulnerable code was part of a pull request (PR) that GitHub Copilot was involved in, though Wiz has clarified that it is unclear whether the coding assistant itself introduced the vulnerability. “Co…

AI-Generated Code Vulnerability Exploited by Autonomous Agent in Snowflake

Two AI agents just fought over a Snowflake PR. You should read about it. In five days, two AI agents turned a Snowflake connector repo into a live demo of machine-vs-machine offense. On June 18, 2026, GitHub Copilot Autofix co-authored a commit that quietly dropped input sanitization from a shell-based run block. On June 23, an autonomous AI security agent — running an offensive scan — found the flaw, broke out of an echo string by crafting an i…

Critical Snowflake GitHub Actions Flaw Allows Attackers to Steal Internal Jira Credentials

A significant GitHub Actions injection vulnerability in Snowflake’s public snowflake-connector-net repository. This flaw could have allowed unauthenticated attackers to execute commands on a GitHub-hosted runner and potentially steal internal Jira credentials. The vulnerability was discovered by Wiz Red Agent, an autonomous AI-powered security research tool, just five days after the vulnerable workflow was deployed. Snowflake […] This article ha…

An AI Agent Hacked Snowflake in Five Days — And Now Two Companies Are Disputing Whose AI Broke It

A vulnerability sat live in one of Snowflake’s public code repositories for exactly five days before an autonomous AI agent found it, exploited it, and stole access to internal systems — with no human involved in any step. What happened next is a case study in how hard it’s becoming to assign blame when AI tools are involved on both sides of a security incident. What Wiz’s Red Agent Did Wiz Research’s autonomous “Red Agent” identified a script i…

Wiz CTO speaks out amid confusion over Snowflake-GitHub Copilot flaw

Wiz claims its AI found a flaw written and reviewed by GitHub Copilot, but the developer platform has pinned the blame on boring old human error. In a blog post this week Wiz Research said that its Red Agent, an AI-powered bug hunting tool, had spotted a vulnerability in one of Snowflake's public repositories. That is very much what Red Agent is designed to do, but the Google-owned security company claimed that the flaw had actually been introdu…