AWS patched a critical vulnerability in its Bedrock AgentCore harness, tracked as CVE-2026-18830 with a CVSS score of 8.6, that allowed authenticated users to execute tools while bypassing model invoc…
The Cloud Security Alliance published a research note on August 6, 2026 describing CoreBreak, a set of four CVEs across Amazon Bedrock AgentCore, Google's Agent Development Kit (ADK) for Python, and V…
Researchers Hedi Ingber and Aviyam Ivgi of Stealth presented CoreBreak at Black Hat USA 2026, revealing a structural vulnerability in AI agent infrastructure that bypasses model-level defenses by expl…
Researchers Hedi Ingber and Aviyam Ivgi of Stealth presented CoreBreak at Black Hat USA 2026, a vulnerability pattern in AI agent dispatch layers that allows tool execution without a legitimate model …
Vercel patched two AI SDK packages after researchers showed that code running inside a Vercel Sandbox could forge an AI model's tool call and reach host-level operations, including secret lookups and …