Snowflake's Jira Compromised via AI-Generated GitHub Copilot 'Autofix'
galnagli · hn · 2026-08-17
Wiz researchers revealed how Snowflake's CI/CD pipeline was compromised due to AI-generated code. Attackers exploited a vulnerability in code suggested by GitHub Copilot 'Autofix' to create a malicious GitHub Action, stealing OIDC credentials and gaining admin access to Jira. This highlights emerging supply chain risks when integrating AI coding assistants.
More from coding & agent
- Inflight launches: a feedback layer that turns prototype comments into Claude tasks — soleio · 2026-10-16
- Apple code signing drags for hours; official advice: just wait a week — pjausovec · 2026-10-16
- Hermes: a 4B model with 8K context got worse with more test-time compute, pointing to contextual reasoning — mangahomanga · 2026-10-16
- Flux 3 Klein's Default Templates Are Broken Without Its Prompt Upscaler — StrictMove5839 · 2026-10-16
- 21-person team ships hundreds of PRs weekly with AI writing 97% of the code — rseroter · 2026-10-16
- ClosedMCP: Set Up MCP Servers Once, Share Them Across Your Whole Team — Ok_Sprinkles1301 · 2026-10-16