AI Tool Abuse

AI tool abuse refers to situations where people or attackers misuse AI systems and the software tools connected to them, such as coding assistants, browser agents, or plugins that can take actions on a company's behalf. Examples include tricking an AI agent into leaking data or running unauthorized commands, or using a legitimate AI product for fraud, harassment, or malware creation. For compliance and risk teams, these incidents matter because they can expose confidential information, create liability for actions the company never intended, and show that existing access controls and vendor reviews did not anticipate how AI tools behave.

1 item

Corporate PolicyGlobal2026-11-04

$6.34 Billion Binance Heist Makes Internal AI Tools a Privileged Access Risk

Binance published an incident report tracing a $6.34 billion theft to a North Korean state-sponsored campaign that compromised three engineers through a fake job interview and malicious coding assignment. Attackers then used access to an internal AI tool to move laterally to a privileged wallet signing service. Binance has rebuilt affected systems and committed to independent security reviews.

Binance insider threat AI tool abuse lateral movement privileged access financial services AI incident state-sponsored attack