Snowflake's Jira Compromised by AI-Generated GitHub Copilot 'Autofix'

Wiz's Red Agent independently discovered and exploited a GitHub Actions vulnerability introduced by GitHub Copilot's Autofix feature, successfully gaining access to Snowflake's internal Jira.

Red Agent detected the vulnerability, launched the attack, and secured access to sensitive data in Snowflake's internal Jira without human intervention, then assessed the scope of the attack.

This case is a concrete example demonstrating that AI-based automated code fixing features can create security vulnerabilities, while AI agents can be used to detect and exploit such vulnerabilities.