October 9, 2026
- One prompt to one agent took over every agent in an AWS account. Zenity Labs showed that a single publicly reachable agent on Bedrock AgentCore could be used to compromise all AgentCore agents in the same account and region, via an internal AWS temporary-credentials interface agents could reach without restriction. AWS has patched it and tightened default agent permissions (The Decoder, Dark Reading). · AI & Model Security
in Third NetScaler RCE in a Month Lands on the Same SAML Surface