{"slug": "aws-agentcore-security-undone-by-prompt-requesting-credentials", "title": "AWS AgentCore security undone by prompt requesting credentials", "summary": "AWS's AgentCore security protections can be bypassed by a prompt that simply asks the agent for credentials, according to The Register. The report details how a prompt requesting credentials undoes the security controls on Amazon's agent-building platform, exposing a gap in the guardrails meant to keep agents from leaking secrets.", "body_md": "### [AI](https://beta.theregister.com/tag/ai)\n\n- \n#### Nvidia found $1B under the couch to help secure American scientific computing dominanceCommitment comes as GPUzilla prepares to fortify Uncle Sam's arsenal with at least seven AI-optimized supers\n- \n#### TSMC taps GlobalFoundries to bolster US silicon interposer production in $2B dealAdvanced packaging tech is essential to the domestic production of high-performance semiconductors used in AI datacenters\n- \n#### Microsoft is about to let Copilot loose on your file systemBut don't worry, it's totally safe because the agents and models will (probably) be running locally. Routers never break right?\n- \n#### Microsoft N1Xes Intel in favor of Nvidia's shiny new SoCs in Surface Laptop UltraPoverty-spec model starts at $2,599 with 24 GB of RAM and 512GB of storage with 128 GB models topping $5,899\n- \n#### Rails originator roasted over Rust boosterismDavid Heinemeier Hansson's agent-coded bakeoff produced curious results\n\n### [Infosec](https://beta.theregister.com/security)\n\n- \nSecurity #### Russians are posing as Signal support to launch phishing attacksPLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!\n- \nSecurity #### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attackPLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more\n- \nBlack Hat and DEF CON #### DEF CON Franklin project enlists hackers to harden critical infrastructureVoting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included\n- \nSecurity #### EQT buys majority share in Swiss cybersecurity biz AcronisWent at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified\n- \nMalware Month #### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sightOn the plus side, infosec's a good bet for a long, stable career\n\n### [FOSS](https://beta.theregister.com/tag/FOSS)\n\n- \n#### OpenAI dots inspire open source imitators amid technical difficultiesPersistent agents appeal to AI companies, but demand isn't obvious\n- \n#### Ubuntu 'Stonking Stingray' beta swims out: Deeper Rust 'oxidization' plus LLM speech-to-textGNOME 51 is here, and Ubuntu interim releases are getting interesting again\n- \n#### Revive Raskin's 3 laws of software with humane work that considers a dev's duty of careAll this, and angry NeoVim users\n- \n#### Firefox 157: Could bold new look be just what Mozilla needs?*Yet another new version of Firefox, with a significant reskin\n- \n#### KDE turns 30 and someone's brought an AI-native desktop proposalAkademy talk imagines Plasma assembling itself around a personal model of each user\n- \n#### Shopify extends lifeline to Tailwind as vibe coding erodes web dev platform's bottom lineAcquisition gives open source CSS framework 'a stable long-term home'", "url": "https://wpnews.pro/news/aws-agentcore-security-undone-by-prompt-requesting-credentials", "canonical_source": "https://www.theregister.com/security/2026/10/09/aws-agentcore-security-undone-by-prompt-requesting-credentials/5302436", "published_at": "2026-10-09 19:15:48+00:00", "updated_at": "2026-10-11 00:18:45.477027+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-infrastructure", "artificial-intelligence"], "entities": ["AWS", "AgentCore", "Amazon", "The Register"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/aws-agentcore-security-undone-by-prompt-requesting-credentials", "markdown": "https://wpnews.pro/news/aws-agentcore-security-undone-by-prompt-requesting-credentials.md", "text": "https://wpnews.pro/news/aws-agentcore-security-undone-by-prompt-requesting-credentials.txt", "jsonld": "https://wpnews.pro/news/aws-agentcore-security-undone-by-prompt-requesting-credentials.jsonld"}}