Wiz incident response report: an unnamed artificial intelligence (AI) agent system ran a multi-cloud intrusion

Wiz's Customer Incident Response Team (CIRT) reports an intrusion into one organization's Google Cloud Platform (GCP), Amazon Web Services (AWS), Kubernetes, identity provider and continuous integration and delivery (CI/CD) systems that it attributes to an artificial intelligence (AI) agent, saying that in several recent intrusions an AI agent system was "running the entire operation", without naming the agent, model or vendor, and inferring agent operation from the tempo, parallelism, script rewrites and task identifiers it observed.

The record

Kind

Report

Source record

Wiz, Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack (19 October 2026) (Researcher disclosure)

Record published

2026-10-19

Posted here

2026-11-01

World

Software agents · Enterprise work agents

Controls concerned

Independent audit log C-V1; Least-privilege credential scoped to task C-E1; Containment and isolation C-E5

Checked

Checked against its record on 2026-11-01 by a reader who did not draft it; report verification/reports/SIG-2026-11-01-001-2026-11-01.md.

A signal's controls are the ones its record points at, the exposure; a case's controls are the ones its records show were absent or failed, so the two can differ.

Corrections

Changes to what this signal says, with the reason. Every earlier version is kept.

• 2026-11-01: Summary. AI spelled out at first use; the quoted words describe several recent intrusions in Wiz's introduction, not this case alone, so the attribution now matches the source
  Show the change

  Before: Wiz's Customer Incident Response Team (CIRT) reports an intrusion into one organization's Google Cloud Platform (GCP), Amazon Web Services (AWS), Kubernetes, identity provider and continuous integration and delivery (CI/CD) systems that it attributes to an AI agent system it says was "running the entire operation", without naming the agent, model or vendor, and inferring agent operation from the tempo, parallelism, script rewrites and task identifiers it observed.

  After: Wiz's Customer Incident Response Team (CIRT) reports an intrusion into one organization's Google Cloud Platform (GCP), Amazon Web Services (AWS), Kubernetes, identity provider and continuous integration and delivery (CI/CD) systems that it attributes to an artificial intelligence (AI) agent, saying that in several recent intrusions an AI agent system was "running the entire operation", without naming the agent, model or vendor, and inferring agent operation from the tempo, parallelism, script rewrites and task identifiers it observed.
• 2026-11-01: Title. abbreviation AI not spelled out at first use (rule 24)
  Show the change

  Before: Wiz incident response report: an unnamed AI agent system ran a multi-cloud intrusion

  After: Wiz incident response report: an unnamed artificial intelligence (AI) agent system ran a multi-cloud intrusion

What a signal is. A signal records what a primary record says; it assigns no fault. It is lighter than a case: one dated item from one record, tagged with the world, sector and controls it touches. It becomes a case when it meets the bar for one.

Newer: CVE-2026-109442: piflow 2.0.0 through 2.0.1
Older: CVE-2026-109437: CognicellAI Cognition