Issue 2026-10-08 · Industry · 安全 · 研究

Single Prompt Hijacked All AI Agents in an AWS Account, Zenity Researchers Find

Single Prompt Hijacked All AI Agents in an AWS Account, Zenity Researchers Find

Zenity Labs researchers found that a single publicly accessible AI agent on Amazon's Bedrock AgentCore could hijack all agents in the same AWS account and region. The attack exploited an internal AWS interface for temporary credentials. AWS has patched the issue and tightened default permissions.

The Decoder9 d ago
Read original ↗