Credential Harvesting

Credential harvesting is the unauthorized collection of user login information, API keys, or authentication tokens through phishing, malware, or social engineering attacks. In enterprise AI governance, credential harvesting poses a critical risk because compromised credentials can grant attackers access to AI systems, training datasets, and model repositories containing sensitive proprietary information. Organizations must implement multi-factor authentication, regular security audits, and employee training programs to prevent credential theft and protect their AI infrastructure from unauthorized access.

1 item

ResearchGlobal2026-08-03

89% Surge in AI-Enabled Attacks Makes AI Infrastructure a Primary Control Surface

CrowdStrike's 2026 Threat Hunting Report documents an 89 percent rise in AI-enabled cyberattacks during 2025, with adversaries using AI throughout the attack chain while simultaneously targeting AI systems as high-value assets. Attack techniques now include LLMjacking, AI supply-chain compromise, and credential harvesting from developer AI tools. Effective patch windows have collapsed to 24 to 48 hours, fundamentally changing the operational tempo required for enterprise AI security programs.

CrowdStrike LLMjacking AI security supply chain risk threat intelligence credential harvesting nation-state threats