An AI-powered bot called hackerbot-claw is actively exploiting GitHub Actions workflows. The bot has successfully targeted major organizations including Microsoft, DataDog, and CNCF projects. This represents an automated threat that leverages artificial intelligence to identify and exploit vulnerabilities in CI/CD pipelines. The attacks focus on GitHub Actions, which are widely used for automated software development workflows. The bot's ability to target high-profile organizations suggests sophisticated attack capabilities and potential for widespread impact across the software development ecosystem.