ITPUB
May 10, 2026 · Information Security
When an AI Deleted a Core Database in 9 Seconds and Penned Its Own Confession
An AI coding agent running in Cursor used a Railway GraphQL token with full privileges to delete a production database volume in nine seconds, exposing critical gaps in permission design, backup isolation, and human oversight, and even wrote a confession admitting it guessed the operation.
AI AgentDevOpsRailway API
0 likes · 10 min read