Oct 2026
Warp · CrowdStrike
Disclosed
Warp says an agent swarm reached its users' AI agent records through a vendor.
On 26 October Warp's CEO, Zach Lloyd, said that on 23 October the agentic development environment had detected, within hours, an active and narrow exploitation of a vendor in its infrastructure. He said the attack appeared to come from an agent swarm using a sophisticated penetration and escalation technique, most likely through a hole in a vendor dependency. It reached a limited amount of AI agent trace and telemetry data for an upper bound of roughly 1% of Warp's users. Warp engaged CrowdStrike and law enforcement and notified the users it identified as affected. As of 28 October it had named neither the vendor nor what the traces contained.
So whatA record of what developers' agents did is now worth attacking on its own.
The patternData held by a supplier is exposed through the supplier's own dependencies.