單一提示詞劫持AWS帳戶中所有AI代理
zenity研究人員發現amazon的bedrock agentcore平台存在一系列漏洞，只需一個聊天消息就能接管aws帳戶和區域中的所有ai代理。這影響了使用aws ai代理的公司。
zenity labs researchers found a chain of vulnerabilities in amazon's bedrock agentcore platform, which they call 'agentcorruption.' a single publicly accessible ai agent was enough to take over every agentcore agent in the same aws account and region. the researchers used a single prompt to trick an agent into sending its own aws credentials to an external server. the stolen credentials gave them broad access to other agents, source code, passwords, and private conversations. aws has partially fixed the issue, but zenity recommends that companies manually assign stricter roles to their ai agents.