Zenity Labs researchers say a single publicly accessible AI agent on Amazon's Bedrock AgentCore was enough to take over every AgentCore agent in the same AWS account and region. The attack exploited an internal AWS interface for temporary cloud credentials that agents could reach without restriction. AWS has since patched the issue and significantly tightened the agents' default permissions.
The article A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found appeared first on The Decoder.
source & further reading
the-decoder.com — original article
ChatGPT with GPT-6 ditches mostly text output for interactive UI with charts, buttons, and mini apps
Claude Haiku 5.5 arrives with massive price cuts proving the AI pricing arms race is far from over
OpenAI launches Decisions API that reduces complex evaluations to yes, no, or pick one