Third Party Vendor

Security incidents tagged Third Party Vendor. Newest first.

1 Third Party Vendor incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

MediumPartly patched
Warp says attackers exploited a vendor in its infrastructure and accessed agent trace and telemetry data
On Oct 26 2026, Warp CEO Zach Lloyd disclosed that on Friday Oct 23 the company found what it believes was an active, narrow exploitation of a vendor in Warp's infrastructure. Warp says it detected the operation within hours and remediated it. According to Lloyd, the attack appears to have come from an agent swarm using a sophisticated penetration and escalation technique, likely starting with a hole in a vendor dependency, and it accessed a limited amount of agent trace and telemetry data. Warp puts the upper bound at roughly 1% of its users, has notified everyone it positively identified as impacted, is working with CrowdStrike on a fuller investigation and has engaged law enforcement. The vendor and the vulnerability haven't been named.
Warp (terminal and agent platform)Since Oct 23, 2026updated Oct 26, 2026, 20:16 UTC

Warp says attackers exploited a vendor in its infrastructure and accessed agent trace and telemetry data
Zach Lloyd
@zachlloydtweets
On Friday, we became aware of what we believe to be an active and narrow-banded exploitation of a vendor in Warp's infrastructure. We detected the operation within hours and were able to remediate and mitigate the impact. We have been in touch with the vendor about the vulnerability. Everyone who uses Warp places a lot of trust in us and that’s not something we take lightly. I’m very sorry that this incident has occurred. The attack appears to have come from an agent swarm using a very sophisticated penetration and escalation technique, likely starting with a hole in a vendor dependency, and ultimately accessing a limited amount of agent trace and telemetry data. We have been working over the weekend and we have notified anyone who we have positively identified as impacted. As of today, we believe an upper bound of roughly 1% of Warp users may have been impacted. We are working closely with the team at Crowdstrike to do a more extensive and comprehensive investigation and have engaged law enforcement. Anyone who has been impacted will receive instructions from us on action they need to take. We will continue to post updates as we learn more.
Oct 26, 2026view on x