Tag
low
advisory
Unauthorized AWS Bedrock Agent Creation for Persistence
1 rule 1 TTPAdversaries with compromised human IAM credentials can create rogue Bedrock Agents to establish persistent AI-driven footholds for data exfiltration, service pivoting, or C2 signaling.
AWS Bedrock
cloud
bedrock
persistence
aws
unauthorized-ai-usage
1r
1t
critical
advisory
Suspicious Activity Detection from GenAI Coding Utilities
1 rule 1 TTPThis detection rule identifies suspicious endpoint activity, such as malicious file creation or shellcode execution, originating from or triggered by AI-assisted coding and assistant tools indicating potential supply chain or prompt injection abuse.
Cursor +11
supply-chain
endpoint-security
llm-security
unauthorized-ai-usage
1r
1t
updated