A lone threat actor used AI to orchestrate a complex attack against a large Amazon Web Services (AWS) environment and successfully extort the victim. Security and incident response firm Sygnia this week published research describing how a financially motivated attacker took advantage of agentic AI workflows to “accelerate victim reconnaissance, attack tool development, command structuring and environment-specific adaptation.” It is no secret that threat actors have been using large language models (LLMs) to assist with the cyberattack process for some time now, be it generating plausible phishing emails or even whole malware from scratch. In some circumstances, threat actors have leaned on AI to orchestrate complete campaigns from beginning to end.

Full report : The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.