“Black October” for AI Developer Platforms

Wiz research documents a wave of agentic attacks targeting AI developer platforms during October, dubbed 'Black October.' Attackers are exploiting vulnerabilities and misconfigurations in AI development environments to perform LLMJacking at scale. LLMJacking involves hijacking access to large language model APIs and compute resources for unauthorized use. The attacks leverage agentic AI capabilities to automate and amplify the scope of compromise. This represents an emerging and growing threat vector specifically targeting the AI/ML development ecosystem. The incidents highlight the need for stronger security controls around AI platform credentials, API keys, and access management.