{
 "type": "bundle",
 "id": "bundle--64568711-54f2-578d-a49e-97d9545a77b5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--3e029195-42c2-5545-a652-d9f50a921d05",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "Wiz Red Agent exploits GitHub Actions injection in Snowflake repository and reaches internal Jira",
   "description": "Wiz Research's autonomous Red Agent, working under Snowflake's HackerOne disclosure program, scanned Snowflake's GitHub organization and flagged a script injection flaw in a workflow in the snowflake-connector-net repository. The agent exploited it and obtained Jira credentials from a GitHub Actions runner. When its first attempt failed with a shell syntax error, it analyzed the error and adjusted its approach without human help. The credentials gave read access to Snowflake's internal Jira, and Wiz then reported the flaw and Snowflake fixed it the same day.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-021",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-021/"
    },
    {
     "source_name": "Wiz Research",
     "url": "https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug",
     "description": "Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--4dd82055-8970-5ccd-8d10-00dd49f8dc85",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "Wiz Research's Red Agent, an autonomous AI-powered security research tool, operating under Snowflake's HackerOne vulnerability disclosure program",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--2d1cd87d-213c-5495-a57c-600d094c3ce5",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "Snowflake (public repository snowflake-connector-net and its internal Jira); GitHub Advanced Security and Copilot checks on the merged PR did not flag the flaw",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--8ba4c249-a3c0-5235-8304-fa198b006a25",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--1e0ed93d-fa7e-55bd-8e16-c9155af66585",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "TA0002 Execution",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0002"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--6a263dd5-e68e-59ad-aa9e-0ddd26163985",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "TA0006 Credential Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0006"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--f3e49ae9-5b40-5af5-9be4-c2f95320f265",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--018014cd-8de8-5055-9950-8cfdf5b8a865",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--f58c40c5-2144-54ed-a524-800d714c34c5",
   "created": "2026-06-23T00:00:00.000Z",
   "modified": "2026-06-23T00:00:00.000Z",
   "name": "TA0043 Reconnaissance",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0043"
    }
   ]
  }
 ]
}