AI agents harvest thousands of credentials in six hours

Google Threat Intelligence Group observed threat actors use agentic AI workflows to compromise a cloud resource, build, and execute a credential-harvesting campaign in under six hours, compromising thousands of third-party credentials, its Q2 2026 report says. The same report says attackers are targeting model weights, prompts, source code, API credentials, and cloud quotas, so builders should treat agent instructions and cloud access as one security boundary, not separate controls; OpenAI’s Promptfoo acquisition shows where that control layer is heading.