Wiz Counts 'Black October': Nine AI Developer Platforms Breached in a Month

What happened

The nine platforms, in disclosure order, are Fireworks AI (Oct 6), Andromeda (Oct 9), Zeabur (Oct 14), Lightning AI (Oct 15), OpenCode (Oct 16-17), Railway (Oct 20), Warp (Oct 23), CommandCode (Oct 28) and Northflank (Oct 30). Wiz said that in any other month, any one of these would have been the month's top security story, but October's density meant few reports connected the incidents.

The shared pattern is not a single flaw: every public report points to environment variables, and Wiz said no single vulnerability or dependency links all nine incidents; some reports mention an 'agent swarm' attack, and OpenCode and CommandCode attributed their incidents to distillation attempts, while Zeabur said after its incident that it would shut down by Dec 31. Northflank disclosed its incident on Oct 30 after receiving a threat alert from Wiz, telling customers to assume all environment variables had been decrypted and to rotate keys, and multiple customers later reported unauthorized use of AI API keys.

Downstream abuse already has an observable bill: for the two enterprise keys Wiz tracked, the first unauthorized activity came within 30 minutes of the vendor-reported credential access, as a single InvokeModel call; Case A then ran about 800,000 Bedrock calls in 30 hours with about 90% succeeding, and Case B ran about 1.7 million calls in 13 hours with over a million succeeding; at list price the two cases together ran over $100,000. Wiz linked the abuse to infrastructure tied to two resale operations, momo and Xingjiabi, but did not establish that those operations carried out the initial compromises or the large-scale abuse.

Key facts

1. Source and date: cloud security company Wiz, publishing its 'Black October' research on Oct 30, 2026
2. Nine platforms: Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank
3. Shared target: environment variables holding AI service keys; Wiz said no single vulnerability or dependency links all nine incidents and did not confirm a single attacker
4. Northflank: disclosed on Oct 30 after a threat alert from Wiz, telling customers to assume all environment variables had been decrypted and to rotate keys; multiple customers reported unauthorized use of AI API keys
5. Downstream bill: two enterprise-key cases together ran over $100,000 at list price; Case A made about 800,000 Bedrock calls in 30 hours, Case B about 1.7 million calls in 13 hours
6. Resale leads: Wiz linked the abuse to infrastructure tied to two resale operations, momo and Xingjiabi, but did not establish their role in the initial compromises