Threat
Leaked Credentials Let an AI Agent Into Two Companies’ Systems ◆ Truffle Security Co.
Publication date unknown · Discovered trufflesecurity.com
Page published
Publication date unknown · First observed: 18 Oct 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
The reported AI-agent access highlights how exposed credentials can provide an entry point for automated intrusions, reinforcing the importance of secret detection, revocation, and least-privilege access.
Truffle Security reports that leaked credentials enabled an AI agent to access two companies’ systems. The supplied extract contains only cookie-consent text, so the circumstances, scope, and remediation cannot be established.