Nine AI developer platforms hit in a month of stolen-key attacks, Wiz says

Cloud security firm Wiz said on Friday, 30 October, that at least nine AI developer platforms disclosed security incidents in October, in attacks it calls “Black October”. The nine — Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank — disclosed incidents between 6 and 30 October.

The attacks differed in detail, but Wiz says they shared a target: stored environment variables, where platforms keep customers’ secret keys for AI services. Wiz stresses no single weakness links the nine, and no one has tied them to a single attacker. Three reported signs of an “agent swarm” attack, and two linked theirs to “distillation” attempts.

Wiz also tracked two stolen company keys from one of the breaches. In both cases, the first unauthorised use came within 30 minutes of the reported theft, followed by days of quiet testing at 14 to 120 calls a day. Then came the flood: one key made about 800,000 calls to Amazon’s Bedrock AI service in about 30 hours, with about 90 per cent succeeding, while the other made about 1.7 million calls in about 13 hours. Together, Wiz estimates, they likely ran up more than $100,000 at list prices.

Wiz also linked the keys to sites reselling cheap AI access, including operations it calls “momo” and “Xingjiabi”, but cannot prove they ran the floods. Zeabur, one of the nine, says it will shut down over its incident. The advice is blunt: revoke stolen keys at the provider that issued them, rotate every stored secret, and check AI bills for unexplained calls.

Why it matters

Platforms hold many customers’ keys at once, so one break-in can hand attackers many accounts. The bill lands on the customer, not the platform: a stolen key draws on the victim’s account. The 30-minute gap shows how little time victims have.

What happens next

Most investigations are still open, and none has published a full count of affected customers or keys. Railway has promised a follow-up once its forensic work ends, and Zeabur plans to switch off its servers by 31 December. Anyone who stored AI keys on one of the nine should rotate them now, even if not named as affected.

This article is for general information and education only. It is not legal or financial advice.

Sources

• https://www.wiz.io/blog/black-october-for-ai-developer-platforms (Wiz, 30 October 2026)
• https://tsnmedia.org/black-october-ai-developer-platforms/ (TSN Media, 31 October 2026)