Black October: At least nine AI developer platforms breached this month

Wiz counts at least nine AI developer platforms, including Fireworks, Railway, Lightning AI and Warp, that disclosed breaches in October, with stored environment variables and AI-access credentials the common target. Root causes differ, and most investigations are unfinished. Wiz traced two stolen AWS Bedrock keys to resale operations; one case saw about 800k calls, the other about 1.7 million, and it estimates over $100k at list price. These figures come from Wiz alone and were not independently checked. Teams should scope keys tightly, restrict cross-region inference profiles, and rotate secrets.