Summary

Wiz reported that its Red Agent used an issue-title injection to execute commands and obtain Snowflake Jira credentials from a public repository. The disclosure says Copilot Autofix co-authored the merged change and marked it clear, while Wiz clarified that it cannot establish whether the code change itself was AI-assisted.

Why it matters

The incident links coding-assistant review, CI/CD permissions and autonomous offensive testing in one concrete failure mode, making human review and least-privilege controls central to agent adoption.

Sources