Agents

One public-facing AI agent on AWS could read, rewrite, and delete every other agent in the region

Single source1 source8 Oct 2026

Zenity Labs researchers say a single publicly accessible AI agent on Amazon's Bedrock AgentCore was enough to take over every AgentCore agent in the same AWS account and region.

Reported by 1 source

the-decoder.comhttps://the-decoder.com/a-single-prompt-was-enough-to-hijack-every-ai-agent-in-an-aws-account-zenity-researchers-found/

← Back to all developments · Signals are a development reported by more than one source. See the methodology.