8-Minute Access: AI Accelerates Breach of AWS Environment

Sysdig researchers reported a rapid, AI-assisted AWS intrusion on Nov 28, 2025 where attackers found exposed credentials in public S3 buckets, used LLMs to automate reconnaissance and code generation, injected Lambda code to escalate privileges across 19 AWS principals and achieved admin access in under ten minutes; they exfiltrated data, provisioned GPU instances and abused Amazon Bedrock for LLM hijacking, highlighting the growing speed and operational impact of AI-enabled cloud attacks.