Attack
Wiz describes a real cloud attack carried out entirely by an AI agent, from initial access to exfiltration.
A Java remote code execution flaw in an exposed Kafka UI instance served as the confirmed initial access vector.
The same source IP scanned more than 600 other Wiz customer environments during the same period.
Through a compromised admin API key, the agent created a user prefixed pentest in the administrators group.
Names like pentest or redteam likely help pass the activity off as an authorized test and bypass guardrails.