30
30
30
30
30
30
30
30
30
30
30
30
30
30
30
30
30
30
30
30
Inside the Warehouse Where Amazon Scans and Destroys Books for AI Training
Amazon's Las Vegas VGT3 warehouse destructively scans thousands of books, cutting spines and discarding pages, to build AI training data.
404 Media interviewed an anonymous Amazon employee at the VGT3 warehouse in Las Vegas, part of the same complex as the LAS8 print-on-demand facility. Workers receive shipments of books including library liquidations and University of London materials, scan them, cut the spines off with machines, and discard the loose pages irreversibly. The operation was discovered by placing a tracking device in a shipment of rare books a bookseller suspected was being acquired by an anonymous AI company. Employees described scanning barcodes to weed out duplicates and an often disorganized process that changed daily.
30
30
Amazon launches Alexa+ in India with Hindi support
Amazon launched its generative AI Alexa+ assistant in India with Hindi support in Early Access, free for Prime customers after testing.
Amazon announced that Alexa+, its generative AI-powered conversational assistant, is now available in India in Early Access with Hindi and English support, including mid-sentence language switching and long-form context retention. The assistant handles multi-step tasks such as ordering groceries via Amazon Now and controlling smart home devices, with integrations including Swiggy, District, MakeMyTrip, EazyDiner, Amazon Music, and JioSaavn. It will be free for Prime members after the testing period and cost about $20.85 per month for non-Prime customers. Amazon is targeting India's 600 million-plus Hindi speakers, and says smart device adoption grew 20% year over year.
22
When an Attacker Meets a Group of Agents: Navigating Amazon Bedrock's Multi
Unit 42 red-teamed Amazon Bedrock multi-agent applications, demonstrating prompt-injection attack chains that leak agent instructions and invoke tools, mitigated by Bedrock Guardrails.
Unit 42 red-teamed Amazon Bedrock Agents' multi-agent collaboration in Supervisor and Supervisor with Routing modes. The demonstrated attack chain detects the operating mode, discovers collaborator agents, delivers attacker-controlled payloads, and can disclose agent instructions and tool schemas and invoke tools with attacker-supplied inputs. No vulnerabilities were found in Bedrock itself, and the built-in prompt attack Guardrail blocked the attacks when properly configured. The researchers collaborated with Amazon's security team and frame the findings as a broader prompt injection risk for LLM-based systems.
55
30
When AI Remembers Too Much
Unit 42 PoC shows indirect prompt injection can poison Amazon Bedrock Agent long-term memory, enabling silent exfiltration of conversation history across future sessions.
Palo Alto Networks Unit 42 published a proof of concept showing that indirect prompt injection can silently poison the long-term memory of Amazon Bedrock Agents when the memory feature is enabled. Malicious content on a webpage or document manipulates the agent's session summarization process, so injected instructions persist across sessions and are added to later orchestration prompts, silently exfiltrating user conversation history. The issue is not a vulnerability in the Amazon Bedrock platform but an illustration of the broader unsolved LLM prompt-injection challenge. Amazon reviewed the research and stated that Bedrock Guardrails with the prompt-attack policy provides effective mitigation.
55
30
30
30
30
30
30
30
30
30
Podcast: We Spoke to an Amazon Worker Destroying Books for AI
404 Media podcast covers Amazon destroying scanned books for AI training, recurring AI names in academic papers, and ICE voter-data spending.
404 Media's podcast follows up on its investigation of an Amazon warehouse where books are scanned and destroyed for AI training data, including an interview with a warehouse worker. The hosts also discuss how the same few names repeatedly surface in LLM outputs and AI-generated academic papers. The episode additionally covers ICE's plans to spend millions on voter fraud data and Boston Dynamics robot dogs.
12
We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility
Investigation reveals Amazon buys and destroys massive quantities of printed books, cutting bindings to scan them for AI training data at a Las Vegas warehouse.
A 404 Media investigation tracked a rare book with a GPS device to Amazon's VGT3 warehouse in Las Vegas, revealing an unreported operation buying large volumes of printed books for AI training data. Employees there report cutting bindings off shipments to scan the books quickly, destroying the printed copies in the process. The finding offers rare visibility into how major AI companies acquire print material for training corpora.
32
30
Mandiant Founder Kevin Mandia Joins Amazon Board
Amazon elected cybersecurity veteran Kevin Mandia, founder of Mandiant, to its board of directors on September 8.
Amazon appointed Kevin Mandia to its board, citing the need for cybersecurity expertise as AI-era risks evolve. Mandia founded and led Mandiant, which was acquired by Google in 2022 and folded into Google Cloud, and currently runs security firm Armadin as CEO while serving as general partner at Ballistic Ventures. He previously worked as a computer security officer at the Pentagon and as an Air Force Office of Special Investigations special agent, and served on NSTAC and CISA's Cybersecurity Advisory Committee.
40
30