LOWVulnerability
Global

Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours

·Source: Dark Reading

Updated:

Executive Summary

The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.

Analysis

The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.
Source Attribution

Originally published by Dark Reading on Jul 8, 2026.

Related Threats

MEDIUMVulnerability

Greek victims file lawsuit against Intellexa over Predator spyware

The use of the spyware came to light in 2022, with traces of Predator found on dozens of phones. The scandal led to the resignation of Greece’s intelligence service chief and the prime minister’s chief of staff.

The Record
HIGHVulnerability

NVD HIGH: CVE-2026-60104 — Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-...

Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, allowing a low-privileged organization member to obtain another user's vault key and a victim-scoped access token by creating a Trusted Device Encryption authentication request, bound to an attacker-controlled public key, that is readable from an unauthen

CVE-2026-60104
NIST NVD
HIGHVulnerability

NVD HIGH: CVE-2026-59806 — Gradio before 6.20.0 contains an open redirect and server-side request forgery v...

Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to redirect users to arbitrary URLs or perform client-side SSRF by supplying unvalidated HTTP/HTTPS URLs to the file_fetch() function in the /gradio_api/file= endpoint. Attackers can craft a malicious FileData response targeting internal endpoints such as cloud metadata services to re

CVE-2026-59806
NIST NVD