AI Weekly Malaysia

Snowflake beat Q2 expectations with $1.55B revenue (35% YoY growth) and raised full-year product revenue guidance to $6.07B from $5.84B. The company highlighted its CoCo AI coding agent, which grew to 9,100 accounts, adding over 2,000 in the quarter.

Why: If you build on Snowflake or evaluate data platforms, CoCo's rapid account growth signals Snowflake is bundling AI coding agents into its data cloud—worth tracking whether this changes your tooling choices or creates integration opportunities. The raised guidance and margin expansion (14.5% vs 13.5%) suggest enterprise data spend is accelerating, not contracting.

ShinyHunters claims to have stolen millions of patient records from U.S. pharmaceutical distributor McKesson by phishing employees into granting network access, then exfiltrating data from the company's cloud-hosted Snowflake and Salesforce environments. McKesson's CTO Francisco Fraga confirmed the breach affects its oncology & multispecialty and medical-surgical units, and the hackers are demanding a $55 million ransom. Stolen data includes names, addresses, Social Security numbers, diagnoses, medications, allergies, and employee home addresses.

Why: If you ship on Snowflake or Salesforce cloud environments, this is a concrete reminder that your data warehouse perimeter is only as strong as your least-phished employee's session. The attack vector here wasn't a zero-day or misconfigured bucket—it was social engineering leading to cloud account takeover. Review whether your cloud data platform access requires MFA beyond a single SSO password, and whether service accounts with broad read access to production data warehouses can be reached via compromised employee credentials.