Observed Signal · Apr 14, 2026 · Vulnerability Disclosure · Source: Manager Magazin · Impact: 2/5 · Sentiment: Negative
CodeWall Breaches Bain Pyxis AI Platform in 18 Minutes
Cybersecurity start-up CodeWall used autonomous AI agents to probe enterprise systems and gained access to Bain & Company’s Pyxis platform in roughly 18 minutes, the Financial Times reports. The researchers say the breach allowed them to view nearly 10,000 AI chatbot conversations, including queries from Bain employees and some client-related prompts. Access was reportedly gained by using a username and password found in publicly available web code; CodeWall also discovered employee email addresses and security tokens that could enable account impersonation or new account creation. Bain says it investigated and quickly fixed the issue and disputed aspects of CodeWall’s characterization. CodeWall previously reported similar findings at McKinsey and BCG; it focuses on companies that invite ethical hacking exercises.
Demonstrates rapid exploitability of conversational AI platforms and credential exposure risks; notable for enterprises using LLM/chatbot tools but not immediate industry-shifting news.
Track Bain & Company Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- CodeWall used autonomous AI agents to test and attack enterprise systems.
- CodeWall reportedly accessed Bain & Company’s Pyxis platform in about 18 minutes.
- Attackers could view nearly 10,000 AI chatbot conversations on Pyxis, according to CodeWall.
- Access was gained using a username and password exposed in publicly available web code; additional employee emails and security tokens were found.
- Bain said it investigated CodeWall’s report, quickly remediated the vulnerability, and disputed some aspects of CodeWall’s portrayal of the issue.
Connected Companies & Entities
2 Entities mappedOntology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Unauthorized Access Reported to Anthropic's Mythos
A private online forum reportedly gained unauthorized access to Mythos, Anthropic's recently announced enterprise cybersecurity AI, by leveraging credentials or access through a third‑party vendor. Bloomberg told TechCrunch the group demonstrated use of the model with screenshots and a live demo; Anthropic says it is investigating and has found no evidence the activity impacted its own systems. Mythos had been distributed selectively to vendors including Apple under an initiative called Project Glasswing. The incident highlights third‑party supply‑chain risks for restricted AI releases and the potential for security tools to be repurposed if access controls fail.
Security Research: AI Browsers Leak Passwords
Security researchers at LayerX disclosed a vulnerability they call “Bioshocking” that tricks AI-powered browser agents into exfiltrating sensitive data. By convincing an agent it is playing a game, attackers can prompt it to follow a crafted path (e.g., visiting a “/code-URL”) which in tests led to a GitHub repository containing users' SSH login credentials. LayerX reports the technique worked against multiple agentic browser tools and a Claude Chrome plugin. According to the report, OpenAI implemented protections for Atlas, Perplexity closed the issue without providing a fix, and Anthropic issued a patch that did not stop the exploit; other vendors did not respond. LayerX recommends users close unneeded logged-in services before using AI agents and revoke agent permissions after use to reduce exposure.
Zenity Labs Reveals 'AgentForger' ChatGPT Vulnerability
Zenity Labs disclosed 'AgentForger,' a critical vulnerability in OpenAI's ChatGPT Workspace Agents that let attackers inject a malicious autonomous agent via a single phishing ChatGPT link. The forged agent could be created in the name of a clicked employee, inherit that employee's enterprise connectors (email, calendar, cloud storage, Slack/Teams) and existing authorizations without showing an OAuth consent screen, and be scheduled to repeatedly exfiltrate files, harvest credentials and MFA tokens, impersonate users, and persist inside the organization. Zenity Labs reported the issue to OpenAI via Bugcrowd on 2026-06-04; OpenAI acknowledged the report within a day and removed the vulnerable URL parameter within four days, patching the flaw before public disclosure. Zenity framed AgentForger as an evolution of CSRF and a new class of attacker-created, agentic insiders; exploitation in the wild is unknown.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.