Warp agentik ishlab chiqish muhiti foydalanuvchilariga tegishli agent qaror jurnallari va telemetriya ma'lumotlari loyihaning infratuzilmasidagi uchinchi tomon sotuvchisiga qilingan hujum natijasida fosh bo'ldi.
Kompaniyaning asoschisi va bosh direktori Zax Lloydning hisob-kitobiga ko'ra, "Warp foydalanuvchilarining taxminan 1% ta'sirlangan bo'lishi mumkin", ammo tashqi mutaxassislar davom etayotgan tekshiruvda yordam bermoqda.
Warp — bu zamonaviy terminal sifatida boshlangan va keyinchalik agentik ishlab chiqish muhitiga (ADE) aylangan mashhur ishlab chiquvchi vosita bo'lib, u ishlab chiquvchilarga AI agentlariga kod yozish va sinovdan o'tkazish hamda dasturiy ta'minotni joylashtirishni yo'naltirish imkonini beradi.
Muhit bitta ish maydonida terminal, kod muharriri, vazifalarni muvofiqlashtirish va agent tekshiruv vositalarini taqdim etadi. Loyihaning veb-saytida platformada kamida 800 000 foydalanuvchi borligi aytilgan.
"Juma kuni biz Warp infratuzilmasidagi sotuvchining faol va tor doiradagi ekspluatatsiyasi deb hisoblaydigan narsadan xabardor bo'ldik", — deb ta'kidladi Lloyd.
"Biz operatsiyani bir necha soat ichida aniqladik va ta'sirni bartaraf etish va yumshatishga muvaffaq bo'ldik", — deb qo'shimcha qildi bosh direktor.
Agent izlari va telemetriya potentsial ta'sirlangan ma'lumotlar sifatida aniqlangan bo'lsa-da, kompaniya fosh qilingan ma'lumotlar manba kod, so'rovlar, hisob ma'lumotlari yoki boshqa nozik tafsilotlarni o'z ichiga olgan-olmaganini aniqlashtirmadi.
Hodisa tahlili shuni ko'rsatadiki, hujum "agent to'dasi" tomonidan quvvatlangan bo'lib, u "juda murakkab kirish va eskalatsiya texnikasi"ga tayangan.
Lloyd Warp uchinchi tomon sotuvchisi bilan zaiflik haqida bog'langanini aytdi, ammo hech qanday tafsilot ulashilmagan. Platforma ta'sirlangan deb aniqlangan foydalanuvchilarni xabardor qildi.
Kiberxavfsizlik firmasi CrowdStrike ham tekshiruvda yordam berish uchun jalb qilingan, platforma esa huquqni muhofaza qiluvchi organlarni ham xabardor qilgan.
Warpdagi hodisa AI kodlash platformasi OpenCode'dagi hodisadan keyin sodir bo'ldi, u o'tgan hafta foydalanuvchilarga xavfsizlik buzilishi tashqi provayderlar bilan ishlatiladigan saqlangan API kalitlarini fosh qilganini xabar qilgan edi.
Hodisa OpenCode foydalanuvchilarining kichik foiziga, taxminan 1,4% ga ta'sir qildi va ba'zilar uchun 1 700 dollargacha ruxsatsiz to'lovlarga olib keldi.
Warp foydalanuvchilariga hushyor bo'lish, hisob faoliyatini kuzatish va kutilmagan aloqalarga nisbatan ehtiyotkorlikni oshirish tavsiya etiladi.
Hujumchilar haqiqiy hisob ma'lumotlariga ega bo'lgach, ularning harakatlarining faqat 37% bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy hisob ma'lumotlaridan foydalanayotganda, oldini olish keskin pasayadi.
Blue Report 2026 mijozlar ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnika-texnika mudofaani o'lchaydi.
Hisobotni oling
Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project’s infrastructure.
The company’s founder and CEO, Zach Lloyd, estimates that "roughly 1% of Warp users may have been impacted," but external experts are helping with the ongoing investigation.
Warp is a popular developer tool that started as a modern terminal and evolved into an agentic development environment (ADE) that allows developers to direct AI agents to write and test code and deploy software.
The environment provides a terminal, a code editor, task orchestration, and agent review tools in a single workspace. The project's website says the platform has at least 800,000 users.
“On Friday, we became aware of what we believe to be an active and narrow-banded exploitation of a vendor in Warp's infrastructure,” Lloyd stated.
“We detected the operation within hours and were able to remediate and mitigate the impact,” the CEO added.
Although agent traces and telemetry were identified as potentially affected data, the company did not clarify whether the exposed information included source code, prompts, credentials, or other sensitive details.
Analysis of the incident suggests that the attack was powered by "an agent swarm" that relied on "a very sophisticated penetration and escalation technique."
Lloyd said that Warp has contacted the third-party vendor about the vulnerability, but no details have been shared. The platform has notified users identified to be impacted.
The cybersecurity firm CrowdStrike has also been engaged to assist with the investigation, while the platform has also informed law enforcement authorities.
The incident at Warp follows an incident at AI coding platform OpenCode, which notified users last week that a security breach exposed stored API keys used with external providers.
The incident affected a small percentage of OpenCode users, about 1.4%, and led to unauthorized charges of up to $1,700 for some.
Warp users are advised to remain vigilant, monitor account activity, and treat unsolicited communications with increased caution.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report