AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

Pillar Security details an automated attack campaign by an AI agent named Hackerbot-Claw that, over ~37 hours in February 2026, probed and exploited misconfigured CI/CD pipelines on major GitHub projects (including Microsoft, DataDog, Aqua Security), deleted releases (notably Trivy), stole security tokens, and used a 2,000-word social-engineering prompt to coerce local AI developer assistants into exfiltrating credentials; researchers observed rapid machine-speed escalation, one successful defensive detection by Claude Code, and conclude the campaign is inactive but its methods are now a public playbook.