A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found
- AWS: 26 events in the last 90 days
- Previous: 2 days earlier · Inside the AWS lab that makes everything you do online feel effortless
What happened
Zenity Labs researchers say a single publicly accessible AI agent on Amazon's Bedrock AgentCore was enough to take over every AgentCore agent in the same AWS account and region. The attack exploited an internal AWS interface for temporary cloud credentials that agents could reach without restriction. AWS has since patched the issue and significantly tightened the agents' default permissions.
Summary assembled by rule from the sources below