AI Agent Exploits Vulnerability Missed by GitHub Copilot in Snowflake Repository

Wiz's autonomous red-team agent found a script injection in Snowflake's public repo that Copilot Autofix had cleared. The tooling on both sides of the fight is improving at roughly the same rate.

Wiz's autonomous AI agent, Red Agent, discovered and exploited a script injection vulnerability in Snowflake's public GitHub repository, which GitHub Copilot Autofix failed to detect. The flaw enabled unauthorized access to sensitive internal data, highlighting the risks of AI-assisted development and the need for robust oversight in AI-driven cybersecurity.

See the full article