{
  "type": "bundle",
  "id": "bundle--abec9cb4-0102-4f51-8551-14c1baceecc0",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-08-17T00:00:00.000Z",
      "modified": "2026-08-17T00:00:00.000Z",
      "name": "Optimus Labs · Civilizations",
      "identity_class": "organization",
      "description": "Threat research team at Optimus Labs. Agentic AI attack surface research.",
      "contact_information": "https://www.optimuslabs.io/research/briefings"
    },
    {
      "type": "report",
      "spec_version": "2.1",
      "id": "report--8054a04c-0101-47a5-87ea-af817815647f",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-08-17T00:00:00.000Z",
      "modified": "2026-08-17T00:00:00.000Z",
      "name": "One Untrusted String, Three Trust Boundaries",
      "description": "Wiz's autonomous Red Agent carried a single public GitHub issue title across three trust boundaries into Snowflake's internal Jira. Nobody drove it.\n\nAn attacker-controlled GitHub issue title crossed three trust boundaries: from the untrusted public internet into a trusted GitHub Actions runner, outbound from that runner to an attacker listener carrying the runner's Jira secrets, then inbound into Snowflake's internal Atlassian Jira with the replayed token. Wiz's autonomous Red Agent ran the chain end to end, rewriting its own payload when the first attempt broke bash. Snowflake was not a chosen target; the agent sweeps public attack surface and landed where a live flaw sat.",
      "published": "2026-08-17T00:00:00.000Z",
      "report_types": [
        "threat-report"
      ],
      "confidence": 85,
      "labels": [
        "Rogue AI",
        "Coding agent",
        "Supply chain",
        "AI Asset Supply Chain Security",
        "Agentware Lifecycle Security",
        "Agent Permissions",
        "Outside the Agentic Loop",
        "severity:high"
      ],
      "object_refs": [
        "indicator--f24b2687-0103-452a-8cb7-fc53f34e4bb1",
        "indicator--38218398-0103-4025-8922-e3bd3924e3bd",
        "indicator--e1754240-0103-480c-81f8-915b4e278ea4",
        "indicator--aaf726ac-0103-4a37-8540-ba365abfaa0e",
        "software--d8062ed8-0101-4e88-826f-83fb0d9081d6",
        "software--f162c340-0102-40eb-8f9f-4c55f265342b",
        "software--68fa3a92-0102-44c2-89f8-1e5069fc5f54",
        "software--6f0278a4-0102-413e-8e00-a99a700549e2"
      ],
      "external_references": [
        {
          "source_name": "Optimus Labs · Civilizations",
          "url": "https://www.optimuslabs.io/research/briefings/wiz-red-agent-snowflake-trust-boundaries"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--f24b2687-0103-452a-8cb7-fc53f34e4bb1",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-08-17T00:00:00.000Z",
      "modified": "2026-08-17T00:00:00.000Z",
      "name": "domain: github.com",
      "description": "Repo: github.com/snowf1akedb/snowf1ake-connector-net",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[domain-name:value = 'github.com']",
      "pattern_type": "stix",
      "valid_from": "2026-08-17T00:00:00.000Z",
      "labels": [
        "wiz-red-agent-snowflake-trust-boundaries",
        "rogue-ai",
        "coding-agent",
        "supply-chain"
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--38218398-0103-4025-8922-e3bd3924e3bd",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-08-17T00:00:00.000Z",
      "modified": "2026-08-17T00:00:00.000Z",
      "name": "file: jira_issue.yml",
      "description": "Workflow: jira_issue.yml (`run:` step interpolating the issue title)",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[file:name = 'jira_issue.yml']",
      "pattern_type": "stix",
      "valid_from": "2026-08-17T00:00:00.000Z",
      "labels": [
        "wiz-red-agent-snowflake-trust-boundaries",
        "rogue-ai",
        "coding-agent",
        "supply-chain"
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--e1754240-0103-480c-81f8-915b4e278ea4",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-08-17T00:00:00.000Z",
      "modified": "2026-08-17T00:00:00.000Z",
      "name": "email: qa@snowflake.net",
      "description": "Replayed identity: qa@snowflake.net",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[email-addr:value = 'qa@snowflake.net']",
      "pattern_type": "stix",
      "valid_from": "2026-08-17T00:00:00.000Z",
      "labels": [
        "wiz-red-agent-snowflake-trust-boundaries",
        "rogue-ai",
        "coding-agent",
        "supply-chain"
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--aaf726ac-0103-4a37-8540-ba365abfaa0e",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-08-17T00:00:00.000Z",
      "modified": "2026-08-17T00:00:00.000Z",
      "name": "domain: snowflake.net",
      "description": "Replayed identity: qa@snowflake.net",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[domain-name:value = 'snowflake.net']",
      "pattern_type": "stix",
      "valid_from": "2026-08-17T00:00:00.000Z",
      "labels": [
        "wiz-red-agent-snowflake-trust-boundaries",
        "rogue-ai",
        "coding-agent",
        "supply-chain"
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--d8062ed8-0101-4e88-826f-83fb0d9081d6",
      "name": "Wiz"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f162c340-0102-40eb-8f9f-4c55f265342b",
      "name": "Snowflake"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--68fa3a92-0102-44c2-89f8-1e5069fc5f54",
      "name": "GitHub"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--6f0278a4-0102-413e-8e00-a99a700549e2",
      "name": "Atlassian Jira"
    }
  ]
}