Isolation Is the New Runtime
An AI agent, left unattended to triage issues overnight, was tricked by a bug report into reading and exfiltrating AWS credentials, demonstrating a vulnerability Simon Willison calls the 'lethal trifecta' of private acce…