Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
Findings
10 findings · run finished 2026-09-12 06:04Z · worst first
CriticalBackDefault policy version changed on an attached policy by a non-deployersandbox · eu-west-1
‹generated-workload-32› +744dDisabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Default policy version changed on an attached policy by a non-deployer on generated-workload-32 in eu-west-1 (account 345678901234): first seen 44 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-003 · f/GP1E5CpqsD · e/Zabcdefghijk e/ghijkmnopqrs e/789ABCDEFGHJ +6
Root account used2
CriticalNew
CriticalNewAccess keys minted across users in a burst1234567890120d‹generated-workload-40› +8234567890123 · us-east-1‹i-00000000000000028›100dDisabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-40 in us-east-1 (account 234567890123): first seen 100 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/ArnVq4KxdQ · e/123456789ABC e/89ABCDEFGHJK e/FGHJKLMNPQRS +5
CriticalNew‹generated-workload-0› +3prod-acct · us-east-1 / payments-prod-cluster-0‹i-00000000000000000›0dDisabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Root account used on generated-workload-0 in us-east-1 (account 123456789012): first seen 0 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-001 · f/A4kqZHhQXj · e/123456789ABC e/89ABCDEFGHJK e/FGHJKLMNPQRS +1
observed on synthetic accountsV-004 · f/5VA7vrDB4E · t/4b1c9e0a-1234-4abc-8def-0123456789ab
AMI shared publicly2
Critical
‹generated-workload-24› +6prod-acct · ap-southeast-1 / payments-prod-cluster-0‹i-00000000000000018›168dDisabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-24 in ap-southeast-1 (account 123456789012): first seen 168 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/CriCJcMezw · e/RSTUVWXYZabc e/YZabcdefghij e/fghijkmnopqr +7
Critical‹generated-workload-64› +4234567890123 · ap-southeast-1‹i-00000000000000040›88dDisabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. AMI shared publicly on generated-workload-64 in ap-southeast-1 (account 234567890123): first seen 88 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-008 · f/A1JSYkfbQM · e/RSTUVWXYZabc e/YZabcdefghij e/fghijkmnopqr +2
Administrator-equivalent AWS-managed policy on a service principal2
Critical
‹generated-workload-16› +5234567890123 · us-west-2‹i-00000000000000010›112dDisabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-16 in us-west-2 (account 234567890123): first seen 112 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/5zDhYAh8zQ · e/HJKLMNPQRSTU e/QRSTUVWXYZab e/XYZabcdefghi +8
Critical‹generated-workload-56› +3sandbox · us-west-2‹i-00000000000000038›32dDisabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. Administrator-equivalent AWS-managed policy on a service principal on generated-workload-56 in us-west-2 (account 345678901234): first seen 32 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-010 · f/DSTWvQYDBY · e/HJKLMNPQRSTU e/QRSTUVWXYZab e/XYZabcdefghi +3
EC2 instance accepts IMDSv12
Critical
‹generated-workload-48› +9prod-acct · eu-central-1 / payments-prod-cluster-0‹i-00000000000000030›156d•Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-48 in eu-central-1 (account 123456789012): first seen 156 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/2MABPzB2Np · e/9ABCDEFGHJKL e/GHJKLMNPQRST e/PQRSTUVWXYZa +4
Critical‹generated-workload-8› +4sandbox · eu-central-1‹i-00000000000000008›56d•Disabling the key makes the existing log files unreadable now. A deletion that runs its course makes them unreadable permanently, without a single log file being touched. EC2 instance accepts IMDSv1 on generated-workload-8 in eu-central-1 (account 345678901234): first seen 56 days ago and still present on the run that wrote this board; the weak set grew from 0 to 2 between the two runs, and none of the new members is covered by an allowlist entry.V-013a · f/2dTniNd4qd · e/9ABCDEFGHJKL e/GHJKLMNPQRST e/PQRSTUVWXYZa +9