Evidence · DiggingBeagle record
Wiz: Black October for AI Developer Platforms and downstream Bedrock key abuse
Research telemetry reconstructing two distinct compromised Bedrock credentials and broader incidents without asserting a common exploit.
- Source role
- primary disclosure
Evidence record
Research telemetry reconstructing two distinct compromised Bedrock credentials and broader incidents without asserting a common exploit.
Claim-level citations (2)
- supportsWiz Case A: a stolen Bedrock key generated about 800,000 calls in 30 hours: Wiz observed roughly 800,000 unauthorized Amazon Bedrock requests over thirty hours for one stolen customer credential, with approximately 90 percent succeeding.
Wiz Black October, Impact and Follow-on activity, Case A, The Flood and stolen token profile
- supportsWiz Case B: a separate Bedrock key received about 1.7 million calls: Wiz observed a second stolen credential used for approximately 1.7 million Bedrock calls over thirteen hours after an actor adapted requests to its permitted US regional inference profiles.
Wiz Black October, Case B, The Flood and The Stolen Tokens