AI-assisted AWS intrusion using exposed S3 credentials and rapid privilege escalation

Sysdig reported observing an offensive operation against an AWS environment in which a threat actor progressed from initial access to administrative privileges in under 10 minutes, with multiple indicators suggesting large language models (LLMs) were used to accelerate reconnaissance, code generation, and decision-making. Initial access was obtained via valid credentials exposed in public S3 buckets, reportedly associated with AI/RAG-related data and an IAM user used to automate Amazon Bedrock tasks via AWS Lambda. The actor then escalated privileges via Lambda function code injection, moved laterally across 19 AWS principals, and abused Amazon Bedrock in an LLMjacking pattern while also provisioning GPU-capable compute instances for suspected model-related activity.

Dark Reading’s coverage echoed Sysdig’s findings, emphasizing the speed of the compromise, the role of AI as a force multiplier, and post-compromise activity including data collection/exfiltration and GPU instance provisioning. In contrast, TechTarget’s “must-have security technologies” piece and SecuritySenses’ discussion of borrowing financial risk models for security are general guidance/trend articles and do not describe this specific intrusion or provide incident-specific technical details, making them non-contributory to the reported AWS compromise.