Tag: agentcore
2 articles
AWS AgentCore Flaw Exposes Credentials, Enables Lateral Attacks
A single chat prompt was all it took for an external attacker to exploit a vulnerability in AWS AgentCore, extracting sensitive IMDS credentials and taking over all agents in the same account and region. This shocking security flaw highlights the potential for devastating lateral attacks with just a single exposed agent.
Unit 42 Uncovers Privilege Escalation Flaw in Amazon Bedrock AgentCore
Imagine a service designed to help users having unrestricted access to sensitive data - that's what Unit 42 discovered in Amazon Bedrock's AgentCore, where a flaw allowed for privilege escalation and data exfiltration due to overly broad permissions. This "Agent God Mode" vulnerability highlights the risks of systemic misconfiguration.