Agents
4d agoZenity Finds Critical AWS AI Agent Flaw
One public AI agent on Amazon Bedrock AgentCore allowed researchers to hijack every other agent in the same AWS account and region. The attack exploited an internal interface for temporary cloud credentials. AWS patched the vulnerability and tightened default permissions.
The Signal
Practitioners should audit agent permissions to prevent similar credential leaks.