Snowflake flaw slips past AI checks, gets exploited by another AI

GitHub Copilot failed to catch a critical vulnerability in Snowflake's code during a review, but an autonomous AI security agent called Red Agent developed by Wiz successfully identified and exploited the flaw. The vulnerability was a command injection (allowing attackers to insert malicious commands into a workflow) in Snowflake's GitHub Actions pipeline that let attackers access internal Jira credentials, though Snowflake patched it the same day it was reported and found no evidence of unauthorized access.