Attacker impersonated AI bots from OpenAI, Anthropic and 30 others to steal secrets
Cequence researchers observed a single threat actor posing as roughly 32 AI bot identities, scanning enterprise servers for about 90 file paths including .env files, cloud credentials and SSH keys. On one October day it reached 48% of Cequence-protected organizations seeing AI bot traffic; no breach was reported.