An AI Review Cleared the Bug That Opened Snowflake's Jira

Four separate items landing in a single day describe the same gap: AI systems are being handed real access — merge rights on production code, shared browser sessions, credentials, entire development pipelines — faster than the isolation and review layers around them are being built. Wiz documented a critical vulnerability in a Snowflake repository that an automated GitHub Copilot review checked and cleared, opening a path its autonomous Red Agent used to reach Snowflake's internal Jira under an authorized bounty test. A security researcher demonstrated that the encrypted reasoning traces produced by frontier AI products can be replayed and read, and a scan of roughly 7,000 publicly shared sessions surfaced 62 API keys, 33 email addresses, and 33 passwords, much of it visible o ...