Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

Threat actors are using autonomous AI agents (AI systems that can independently perform multiple tasks) to steal credentials and compromise cloud environments at unprecedented speed, with one group harvesting thousands of credentials in just six hours. Attackers are targeting AI assets like proprietary models and API credentials (secret keys that allow access to services) across healthcare, government, and media sectors, and are deploying credential-stealing malware like DUSTMAKER that uses prompt injection (tricking AI by hiding instructions in its input) to evade defenses. This represents a broader shift where criminals are leveraging AI-assisted tools to accelerate attacks faster than security teams can respond.