The AI That Broke the Code, and the AI That Broke In
Wiz disclosed yesterday that GitHub Copilot Autofix co-authored a commit in Snowflake's public repo that silently removed a safe shell-input pattern and replaced it with injectable string interpolation. Wiz's autonomous Red Agent then found the flaw, crafted a working exploit, and exfiltrated Jira API credentials — all without human input. The same loop that promises AI-driven security is also capable of closing it the other way.
Read more →