Post

Zenity Labs disclosed AgentCorruption on Oct 8: one prompt to a public Bedrock AgentCore agent reaches every agent in the AWS account and region. API keys, OAuth tokens, memory, source code. IAM roles exceeded every agent's function. Which of yours holds keys it was never given?