VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_a7397cc291ced5fd3a77e403300ddcfa

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Published Sep 9, 2026

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. 

Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide range of data from compromised systems. This can include credential, session tokens, and API

Affected AI Products

anthropic
Get the weekly digest. Every Monday: top AI security stories of the week. Free.