Amazon CISO: Iranian hacking crews ‘on high alert’ since Israel attack

AWS CISO CJ Moses reports that Iranian state-linked operators and hacktivists have increased activity since the Israel conflict but have not changed objectives or adopted destructive tactics, and appear slower to embrace agentic AI than other adversaries. By contrast, many nation-state and financially motivated groups now chain AI agents to accelerate the attack lifecycle—validated by AWS’s MadPot honeypots observing near‑real‑time scans and takeovers—contributing to a surge in tracked threat groups as AI lowers the barrier for less‑skilled attackers.