ttps_attack:T1136.003 × latest_source_host:feeds.fortinet.com × limpar

Resultados

2 casos · pág. 1/1

feeds.fortinet.com · há 1d high

LLMjacking: Leaked AWS Admin IAM Key Used to Subscribe to and Abuse Bedrock Foundation Models

FortiGuard Labs describes an LLMjacking incident in which an AWS account was compromised through a leaked, long-lived IAM access key with AdministratorAccess permissions. The operator subscribed to one or more foundation models through AWS Marketplace and invoked them through Amazon Bedrock, generating inference charges against the victim…

feeds.fortinet.com · há 1d high

Shai Hulud persistence on Jenkins host leads to AWS IAM escalation and Redshift data warehouse breach

FortiGuard Labs describes an intrusion in which a compromised Jenkins EC2 build host, tied to Shai Hulud persistence, was used to steal instance role credentials via IMDS and pivot into the victim's AWS environment. The actor used the credentials from external IPs, created an admin IAM user named cloudops-monitor, opened network paths to …