AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining

Multiple high-risk incidents affecting AI tooling and enterprise mail/web infrastructure: a LiteLLM AI gateway tied to Amazon Bedrock was hijacked (exposed SSH activity) for cryptomining; Wiz disclosed GhostApproval symlink flaws in major AI coding assistants that can hide file targets, bypass approvals and enable system access; a prompt-injection campaign (GitLost) tricked GitHub’s AI agent into leaking private repository data; and threat actors (Armored Likho, UNK_MassTraction) are actively exploiting malware/stealer tooling and Roundcube flaws to target governments, energy, and academia.