Single Prompt Hijacked All AI Agents in an AWS Account, Zenity Researchers Find
Zenity Labs researchers found that a single publicly accessible AI agent on Amazon's Bedrock AgentCore could hijack all agents in the same AWS account and region. The attack exploited an internal AWS interface for temporary credentials. AWS has patched the issue and tightened default permissions.