gcdRadar

aws

2 live · 3 on record · last incident 3 days ago

Dec ’25records per month, by first reportNov ’26

Live2

  1. live
    AntiFox Hackers use AntiFox AI agents in AWS credential‑theft attacks

    Breaches & attacks · Exploited · since 11 Nov 2026

    Attackers are deploying the open‑source AntiFox AI agent platform on Alibaba Cloud instances to infiltrate web services and Amazon Web Services environments. The campaign has been used to steal AWS credentials, enabling further unauthorized access.

    Do:Detect and block unauthorized AntiFox agents, rotate compromised AWS credentials, and monitor for suspicious activity

    AI
  2. live
    Qubole Hackers Exploit Qubole AWS Access to Breach Customer Accounts

    Breaches & attacks · Real loss · since 26 Oct 2026 · updated 10 Nov 2026

    Attackers used Qubole platform AWS access credentials to breach multiple customer accounts between October 14 and October 26. The intruders stole stored secrets and data from the affected environments.

    Do:Audit AWS IAM roles and review logs for unauthorized access originating from Qubole integration credentials.

Earlier1

  1. closed
    AWS Threat Actor Used AI-Assisted Workflows to Compromise AWS Environment

    Breaches & attacks · Exploited · since 8 Jul 2026

    AI