A Single Cloud Compromise Can Feed an Army of AI Sex Bots
Summary: Researchers at Permiso Security leaked a test AWS key on GitHub and found it was picked up within minutes and used to run an AI sex-chat service on Amazon Bedrock, generating over 75,000 successful model invocations in two days. None of the AWS accounts Permiso investigated had full logging of LLM activity enabled, and the two-day experiment produced a $3,500 AWS bill for the researchers.
Why it matters: A stolen cloud key can be resold to power services that push models into child sexual abuse material, and the attackers now check programmatically for prompt logging and skip accounts that have it on - so the visibility control that would reveal the abuse also deters it.
Read the original at Krebs on Security ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026